简体   繁体   中英

Configure - OWASP ZAP Automated Scan

I'm looking at a scenario where OWASP ZAP Automated Scanner will do the following:

  1. Go through every parameter in a request
  2. Apply all stored payloads for XSS, SQL, Overflow vulnerabilities etc, Say a 100 payloads per vulnerability
  3. This should repeat for all the requests that are recorded in ZAP.

Is it possible with the existing Automated Scanner ? If no, can i manually configure the fuzzer through ZAP API's to do so ? If Yes, please provide information on the same

也已在ZAP用户组上询问(并回答:)此问题: https : //groups.google.com/d/msg/zaproxy-users/HmRI8NbfU4w/bwkUzcjpBQAJ,因此在此处重复讨论没有任何意义...

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM