GitHub - girmaneshir/Security-Testing-Using-OSWAP

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
Lab Manual- Security Testing Using OWASP ZAP for a Flask Web Application.docx		Lab Manual- Security Testing Using OWASP ZAP for a Flask Web Application.docx
Lab Manual- Security Testing Using OWASP ZAP for a Flask Web Application.pdf		Lab Manual- Security Testing Using OWASP ZAP for a Flask Web Application.pdf
Security_Testing_ZAP_Active_Passive_Scan.py		Security_Testing_ZAP_Active_Passive_Scan.py
app.py		app.py
create_db.py		create_db.py
demo_app.db		demo_app.db
readme.rs		readme.rs
requirements.txt		requirements.txt

Repository files navigation

# Web Application Security Testing with OWASP ZAP

## Overview

This repository contains a comprehensive lab manual for conducting web application security testing using OWASP ZAP (Zed Attack Proxy). The manual provides step-by-step instructions for setting up and using ZAP to identify and analyze vulnerabilities in web applications.

## Table of Contents
1. [Prerequisites](#prerequisites)
2. [Setup Instructions](#setup-instructions)
3. [Obtaining API Key](#obtaining-api-key)
4. [Inserting Target URL](#inserting-target-url)
5. [Performing Scans](#performing-scans)
   - [Passive Scanning](#passive-scanning)
   - [Active Scanning](#active-scanning)
6. [Analyzing Results](#analyzing-results)
7. [Reporting Vulnerabilities](#reporting-vulnerabilities)
8. [Conclusion](#conclusion)

## Prerequisites

Before you begin, ensure you have the following:

- Python 3.x installed
- OWASP ZAP installed on your machine
- Basic understanding of web application security principles

## Setup Instructions

1. **Clone the repository**:
   ```bash
   git clone <repository-url>
   cd <repository-folder># Security-Testing-Using-OSWAP