【安全牛学习笔记】OWASP_ZAP

OWASP_ZAP

Zed attack proxy

WEB Applicaiton集成渗透测试和漏洞挖掘工具

开源免费跨平台简单易用

截断代理

主动、被动扫描

Fuzzy、暴力破解

API

    http://zap/

Do you want to persist the ZAP Session

   Yes,I want to persist this session with name based on the current timestamp

√ Yes,I want to persist this session but I want to specify the name and location

   No,I do not want to persist this session at this moment in time

   Remember my choice and not ask me again.

you can always changs your decision via the Options/Database screen

root@kali:~# netstat -pantu | grep 8080

tcp6       0      0 127.0.0.1:8080          :::*               LISTEN