Aller au contenu principal

OWASP ZAP Pro

35 hours 6 Modules 15+ Labs Beginner to Intermediate

Course Description​

OWASP ZAP is the world's most popular free web security scanner. Learn to use it professionally for vulnerability assessment.

Learning Objectives​

  1. Configure ZAP for professional testing
  2. Scan web applications effectively
  3. Fuzz inputs for vulnerabilities
  4. Automate security testing
  5. Integrate with CI/CD pipelines
  6. Report findings professionally

Course Structure​

Modules​

Module 1: ZAP Fundamentals (5h)​

  • Installation and setup
  • Interface overview
  • Proxy configuration
  • Context management

Module 2: Manual Testing (6h)​

  • Spidering
  • Manual exploration
  • Break points
  • Request modification

Module 3: Active Scanning (7h)​

  • Scan policies
  • Scanner configuration
  • Alert management
  • False positive handling

Module 4: Fuzzing (6h)​

  • Fuzzer basics
  • Payload generation
  • Anti-CSRF handling
  • Custom fuzzers

Module 5: Automation (6h)​

  • ZAP API usage
  • Python scripting
  • Automation Framework
  • Baseline scans

Module 6: CI/CD Integration (5h)​

  • Jenkins integration
  • GitHub Actions
  • Docker scanning
  • Reporting automation

Tools​

ToolPurpose
OWASP ZAPMain scanner
ZAP CLICommand line
ZAP APIAutomation
ZAP DockerContainer scanning