rce-serialization-dotnet

OWASP Zed Attack Proxy (ZAP)

Formerly, ZAP was owned and maintained by OWASP. It has since become part of the Software Security Project.

ZAP Funding and the Open Source Fellowship

  1. If the Java Runtime environment is not already installed. Download it from https://www.java.com/en/download/. If Maltego is already installed, then it is already available. See the Maltego Java Config Windows desktop application for the location of the JRE used by Maltego.

  2. Download the Windows 64-bit OWASP ZAP installer at https://www.zaproxy.org/download/.

  3. Open Chrome or your preferred browser.

  4. Add FoxyProxy Basic browser add-in for Chrome or your preferred browser.

  5. Launch FoxyProxy Basic.

    Launch FoxyProxy

  6. Select Options.

    Select Options

  7. Add a proxy with the following settings and click Save.

    Setting Value Description
    Title ZAP Name of the proxy
    Hostname 127.0.0.1 Local host
    Port 8081 Proxy for ZAP

    Add Proxy

  8. Chrome bypasses the proxy when navigating to localhost. To avoid this, navigate to the Options tab and add <-loopback> to the Global Exclude text box and Save.

    Include Loopback

  9. Enable the ZAP Proxy. Browsing any non-local site will result in a “No Internet” connection error until ZAP is started and configured for port 8081. Select Disable when done with ZAP.

    Enable Proxy

  10. Open Zap and navigate to Tools Options. In the list of options, select Network Local Servers/Proxies. Change the port to 8081.

    Port 8081

  11. Navigate to Network Server Certificates. Click View.

    View Certificate

  12. Click Install Certificate.

    Install Certificate

  13. Leave Current User selected and click Next.

  14. Select Place all certificates in the following store, click Browse and select the Trusted Certificate Authorities store. Click Next.

    Store Certificate

  15. Click Finish. The browser using Foxy Proxy may need to be restarted for the certificate to take effect.

  16. Navigate to http://zap/ on the configured browser. This documentation page is a launching point into tutorials and background about the tool.

  17. In ZAP, select Manage Add-Ons in the tool bar.

    Install Add-Ons

  18. Navigate to the Marketplace tab. Select and install the following Add-Ons:

    • FuzzDb
    • SVN Digger Files
This site is open source. Improve this page.