RomanNum3ral
/
Sn1per
mirror of https://github.com/1N3/Sn1per.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated requirements section

xer0dayz 2020-08-22 13:30:30 -07:00
parent 2876a4cf2e
commit b7480d33f3
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
OWASP-ZAP-Integration.md

@ -1,3 +1,13 @@
### Requirements
OWASP ZAP integration requires the following python module to function.
```
pip3 install python-owasp-zap-v2.4
```
### Setup
In order to setup OWASP ZAP integration, you will need to have ZAP running on the same host as Sn1per and the http/https proxy listening on port 8081/tcp.
![](https://i0.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP2.png?w=740&ssl=1)
@ -11,6 +21,8 @@ The last step is to update your /root/.sniper.conf file and enable the following
ZAP_SCAN="1"
```
After, you can run the ‘webscan’ mode (ie. ```sniper -t 127.0.0.1 -m webscan -w 127.0.0.1```). After the scan completes, all HTML reports will be saved to /usr/share/sniper/loot/workspace/<workspace>/web/zap-report-$TARGET-$DATE.html.
### Scanning
After, you can run the ‘webscan’ mode (ie. ```sniper -t 127.0.0.1 -m webscan -w 127.0.0.1```). After the scan completes, all HTML reports will be saved to /usr/share/sniper/loot/workspace/WORKSPACE_ALIAS_HERE/web/zap-report-$TARGET-$DATE.html.
> ![](https://i1.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP4.png?w=1133&ssl=1)