This is a starter course for those jumping into the world of web application security. ZAP is the byproduct of an open source OWASP community project and is used by everyone from those starting out in security, developers, QA testers, to professional penetration testers alike. In this course, Getting Started with OWASP Zed Attack Proxy (ZAP) for Web Application Penetration Testing, you'll learn the process to run your application through a series of tests. First, you'll start by learning the interface and understanding how ZAP works with the browser. Next, you'll discover how to prepare your environment as you setup for the attack. Then, you'll get walked through some of the manual and automated function of the tool, and how new features of ZAP allow you to pull that functionality into the browser. Finally, you'll explore how to report on what you found. By the end of this course, you'll gain the knowledge to have the confidence to be able to step through an application, and find some opportunities to strengthen the security posture of the software.
Getting Started with OWASP Zed Attack Proxy (ZAP) for Web Application Penetration Testing
via Pluralsight
You’re only 3 weeks away from a new language
Build the Finance Skills That Lead to Promotions, Not Just Certificates
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
This is a starter course for those jumping into the world of web application security. ZAP is the byproduct of an open source OWASP community project and is used by everyone from those starting out in security, developers, QA testers, to professional penetration testers alike. In this course, Getting Started with OWASP Zed Attack Proxy (ZAP) for Web Application Penetration Testing, you'll learn the process to run your application through a series of tests. First, you'll start by learning the interface and understanding how ZAP works with the browser. Next, you'll discover how to prepare your environment as you setup for the attack. Then, you'll get walked through some of the manual and automated function of the tool, and how new features of ZAP allow you to pull that functionality into the browser. Finally, you'll explore how to report on what you found. By the end of this course, you'll gain the knowledge to have the confidence to be able to step through an application, and find some opportunities to strengthen the security posture of the software.
Taught by
Mike Woolard