Penetration Testing with OWASP ZAP, Part 2 of 5: Config and Attack Modes

Course description

OWASP ZAP is an open-source web application. This course covers Scan Policy Manager Configuration, how to configure ZAP and ZAP Attack Modes.

Each LearnNowOnline training course is made up of Modules (typically an hour in length). Within each module there are Topics (typically 15-30 minutes each) and Subtopics (typically 2-5 minutes each). There is a Post Exam for each Module that must be passed with a score of 70% or higher to successfully and fully complete the course.

Prerequisites

none

Meet the expert

Atul Tiwari

Atul has been involved in information security,  IT auditing, and  penetration testing web apps in the field of information security training for over 8 years.

Video Runtime

73 Minutes

Time to complete

93 Minutes

Course Outline

Configure ZAP

Scan Policy Manager Configuration (25:05)

• Introduction (00:08)
• Scan Policy Manager Config (08:04)
• Setting the Scan Policy (16:44)
• Summary (00:08)

Configuration of ZAP (32:02)

• Introduction (00:08)
• Configuration of ZAP (04:56)
• Install Certificate (07:58)
• Do Not Automatically Persist (07:20)
• API Key (07:16)
• Change Alert (00:00)
• (04:14)
• Summary (00:08)

ZAP Attack Modes (16:02)

• Introduction (00:08)
• ZAP Attack Modes (06:30)
• Contexts (04:34)
• Mode Recap (04:41)
• Summary (00:08)