diff --git a/OWASP-ZAP-Integration.md b/OWASP-ZAP-Integration.md index 0fe3aae..e2a778a 100644 --- a/OWASP-ZAP-Integration.md +++ b/OWASP-ZAP-Integration.md @@ -1,3 +1,13 @@ +### Requirements + +OWASP ZAP integration requires the following python module to function. + +``` +pip3 install python-owasp-zap-v2.4 +``` + +### Setup + In order to setup OWASP ZAP integration, you will need to have ZAP running on the same host as Sn1per and the http/https proxy listening on port 8081/tcp. ![](https://i0.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP2.png?w=740&ssl=1) @@ -11,6 +21,8 @@ The last step is to update your /root/.sniper.conf file and enable the following ZAP_SCAN="1" ``` -After, you can run the ‘webscan’ mode (ie. ```sniper -t 127.0.0.1 -m webscan -w 127.0.0.1```). After the scan completes, all HTML reports will be saved to /usr/share/sniper/loot/workspace//web/zap-report-$TARGET-$DATE.html. +### Scanning + +After, you can run the ‘webscan’ mode (ie. ```sniper -t 127.0.0.1 -m webscan -w 127.0.0.1```). After the scan completes, all HTML reports will be saved to /usr/share/sniper/loot/workspace/WORKSPACE_ALIAS_HERE/web/zap-report-$TARGET-$DATE.html. > ![](https://i1.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-ZAP4.png?w=1133&ssl=1) \ No newline at end of file