By the end of this project, you will learn the fundamentals of how to use OWASP Zed Attack Proxy (ZAP). This tool greatly aids security professionals and penetration testers to discover vulnerabilities within web applications. You will learn how to perform a basic web app vulnerability scan, analyze the results, and generate a report of those results. This course includes steps on how to configure the browser proxy to passively scan web requests and responses by simply exploring websites. This course will also include how to use dictionary lists to find files and folders on a web server, and how to spider crawl websites to find all the links and URLs. Finally, the end of the course gives a brief overview of how to intercept, view, modify, and forward web requests that occur between the browser and web application.
Web Application Security Testing with OWASP ZAP
通过 Coursera Plus 提高技能，仅需 239 美元/年（原价 399 美元）。立即节省
您将学到什么
Scan websites for vulnerabilities
Setup and use OWASP ZAP Proxy
Use a dictionary list to find files and folders and spider crawl to find links and URLs
您将练习的技能
要了解的详细信息
添加到您的领英档案
仅桌面可用
了解顶级公司的员工如何掌握热门技能
在 2 小时内学习、练习并应用岗位必备技能
- 接受行业专家的培训
- 获得解决实训工作任务的实践经验
- 使用最新的工具和技术来建立信心
关于此指导项目
分步进行学习
在与您的工作区一起在分屏中播放的视频中，您的授课教师将指导您完成每个步骤：
Introduction and Overview of OWASP ZAP (2 min)
OWASP ZAP Layout and First Scan (4 min)
Analyzing the OWASP ZAP Scan Results and Generating a Report (4 min)
Setting up FoxyProxy in Firefox to use OWASP ZAP as a Proxy (7 min)
Finding Files and Folders Using a Dictionary List within OWASP ZAP (4 min)
Use OWASP ZAP to Spider Crawl a website to find URLs and Links (4 min)
Use OWASP to View and Alter Requests (8 min)
推荐体验
Mid-level experience with web application security, and a fundamental knowledge of web application attack types and terminology is recommended.
7个项目图片
位教师
提供方
学习方式
基于技能的实践学习
通过完成与工作相关的任务来练习新技能。
专家指导
使用独特的并排界面，按照预先录制的专家视频操作。
无需下载或安装
在预配置的云工作空间中访问所需的工具和资源。
仅在台式计算机上可用
此指导项目专为具有可靠互联网连接的笔记本电脑或台式计算机而设计，而不是移动设备。
人们为什么选择 Coursera 来帮助自己实现职业发展
Felipe M.
Jennifer J.
Larry W.
Chaitanya A.
学生评论
- 5 stars
54.82%
- 4 stars
26.89%
- 3 stars
11.72%
- 2 stars
2.75%
- 1 star
3.79%
显示 3/290 个
已于 May 19, 2020审阅
This gives all the required bases for OWASP ZAP tool needed.
已于 Feb 26, 2022审阅
It is a very good lecture for beginner!! I highly recommend this course.
已于 Jun 29, 2020审阅
The course I believe was a bit easy and not intermediate plus Rhyme refused connections to the mutilliadae server
