Using OWASP ZAP to detect vulnerabilities
- Download the required installer https://www.zaproxy.org/download/
-
Appearance of the program
-
To start the scan, click ‘Automated Scan’
-
Next, you need to specify the URL, which browser to use for tests and
press the ‘Attack’ button
-
The list of vulnerabilities found is stored in the 'Alerts’ tab. For everyone
the alert program provides an explanation and solutions to the problem.
