Getting Started with OWASP Zed Attack Proxy

In this chapter, you will learn how to set up OWASP Zed Attack Proxy (ZAP) and the testing environments we will use throughout this book. We are going to cover what software is required to run ZAP and show you how to download and install it on your local machine. You will also learn how to install Docker and use it to set up OWASP Juice Shop, which we will use to perform the labs in this book.

Moreover, we will walk you through the process of downloading and installing ZAP, which we will use throughout the book. We will also cover various ways of installing ZAP on your computer and explain in what situation you might want to use one method rather than the other. Additionally, we will cover how to install Zed Attack Proxy directly from the JAR file as well as by using the Docker image of Zed Attack Proxy.

ZAP is an open source application built and maintained by the Open Web Application Security Project (OWASP). ZAP is built specifically...