From 8d4d11e0ca685bf9dc4fc3390c06755b3879718a Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 14 Jan 2022 17:23:18 -0700 Subject: [PATCH] Updated OWASP ZAP Integration (markdown) --- OWASP-ZAP-Integration.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/OWASP-ZAP-Integration.md b/OWASP-ZAP-Integration.md index e2a778a..e2413a1 100644 --- a/OWASP-ZAP-Integration.md +++ b/OWASP-ZAP-Integration.md @@ -10,11 +10,11 @@ pip3 install python-owasp-zap-v2.4 In order to setup OWASP ZAP integration, you will need to have ZAP running on the same host as Sn1per and the http/https proxy listening on port 8081/tcp. -![](https://i0.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP2.png?w=740&ssl=1) +![](https://i0.wp.com/sn1persecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP2.png?w=740&ssl=1) In addition, you will need to enable the ZAP API service and disable the API key. -![](https://i2.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP1-1.png?w=746&ssl=1) +![](https://i2.wp.com/sn1persecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP1-1.png?w=746&ssl=1) The last step is to update your /root/.sniper.conf file and enable the following setting: ``` @@ -25,4 +25,4 @@ ZAP_SCAN="1" After, you can run the ‘webscan’ mode (ie. ```sniper -t 127.0.0.1 -m webscan -w 127.0.0.1```). After the scan completes, all HTML reports will be saved to /usr/share/sniper/loot/workspace/WORKSPACE_ALIAS_HERE/web/zap-report-$TARGET-$DATE.html. -> ![](https://i1.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP4.png?w=1133&ssl=1) \ No newline at end of file +> ![](https://i1.wp.com/sn1persecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP4.png?w=1133&ssl=1) \ No newline at end of file