OWASP ZAP From Scratch

Stop compromising your system and switch from using pirated Burpsuite tool to Zed Attack Proxy tool

Created byDarshit Varotaria

Last updated 6/2019

English

What you'll learn

Introduction to OWASP ZAP Scanner and Proxy tool
Setting Up ZAP with Browser
Installing Trust Certificate
Interception Tools
Brute Forcing tools
HUD - Truly amazing feature added by the developer community. An appreciable idea to make pentesting much faster.
Editing and Modifying POST/GET Requests
Demo to get started with ZAP
This course will help you to switch from using pirated Burpsuite tool to Open Source OWASP ZAP tool.

Course content

1 section • 10 lectures • 1h 3m total length

Introduction and objective of the course1:57
This video explain why it is important to use this tool. The Pros and Cons.
Installing ZAP on Kali Linux4:21
Explaining complete setup on Kali Linux.
Updating ZAP on Kali Linux6:37
Installing ZAP on Windows3:23
Overview of ZAP scanner and proxy tool4:36
Starting with introduction to various features available inside ZAP.
Setting Up proxy to ZAP3:07
Step by step explanation to setup proxy with browser and to add additional proxies inside ZAP.
Trust Certificate installation and Interceptions Functions9:04
From where to get ZAP trust certificate to import in browser? How different it is from Burpsuite to intercept requests in ZAP? Video explains all.
Fuzzer and Anti-CSRF form generation - Similar Burpsuite Pro Features10:16
These tools are available only inside Burpsuite Pro Edition known as Intruder and CSRF PoC Generator. But, they are also available in ZAP and its free without any restrictions.
Demo finding vulnerability using ZAP8:14
Using ZAP tool for finding vulnerability using features like Spider, Param and others shown in previous videos.
ZAP HUD - Truly amazing feature added by developers11:45
HUD i.e Heads Up Display is an amazing feature add to the tool by developers.

Requirements

Basic IT Skills or Using Proxy tools
Laptop or Desktop
Windows or Linux OS
Internet Connection

Description

Welcome to this short and quick introductory course. OWASP ZAP is popular security and proxy tool maintained by international community. This course is mean to be helpful while switching from using pirated Burpsuite tool by teaching alternatives for all features that are daily used by pentesters.

This tool contains all the features similar to Burpsuite like Repeater, Intruder, Scanning for possible vulnerabilities, Spider, Scanning and even more. The only changes are the titles. So, you just get to use with such titles and you are done with it.

This course does not mean to deface or damage Burpsuite fame. The aim is to help community who are using pirated Burpsuite tool and leads to compromise their system security.

Who this course is for:

Want to Switch from Cracked Burpsuite to Open Source OWASP ZAP
Information Security
Computer Science
Bug Hunters
Pentesters
Developers
Cyber Security Beginner