OWASP ZAP is a tool that we have already used ing this book for various tasks, and among its many features, it includes an automated vulnerability scanner. Its use and report generation will be covered in this recipe.
Using OWASP ZAP to scan for vulnerabilities
Getting ready
Before we perform a successful vulnerability scan in OWASP ZAP, we need to crawl the site:
- Open OWASP ZAP and configure the web browser to use it as a proxy
- Navigate to http://192.168.56.11/peruggia/
- Follow the instructions from Using ZAP's spider in Chapter 3, Using Proxies, Crawlers, and Spiders
