How to analyze OWASP ZAP scan results effectively
Question
How to analyze OWASP ZAP scan results effectively
After a run, I am getting a lot of URL's which are not vulnerabilities. Is there anyway that we can analyze the reports easily.
2 answers
solution1
1 2020-01-28 15:52:17
The ZAP HTML report should only contain potential issues. If its including things that you think are not issues then you'll need to let us know what they are. Note that
solution2
0 2021-09-01 12:50:48
I propose a strategy:
- Run the scan
- Take the highest severity finding
- Read about it and check with development/other team members is is an issue or not
- Continue with the next finding on the list
- Repeat steps 2-4
After that, you will be able to eliminate or address most of the findings, so in the next iteration, you can exclude the non-issues from the scan.
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.