ZA Proxy

Firstly It's needed to install ZAP (ZA Proxy) using sudo snap install zaproxy --classic then need to configure Proxy Server and generate Certificate as in Options section. After that Certificate need to import in Firefox browser. Then Proxy SwitchyOmega Extension needed to install and configure AutoProxy. Then any site can be configure for Pen Testing.

Options

OWASP ZAP » Options » Local Proxies                   » Go to New Screen
OWASP ZAP » Options » Dynamic SSL  Certificates       » Go to New Screen  » Save
OWASP ZAP » Firefox » Settings   » Certificates       » View Certificates » Import
OWASP ZAP » Firefox » Settings   » Network Settings   » Proxy
OWASP ZAP » Firefox » Extensions » Proxy SwitchyOmega » Auto Switch

Shortcuts

─────────────────────────────────────────────── Ctrl + Alt + D  » Options Ctrl + J  » Import WSDL From Web Ctrl + I  » Import a File From URLs	─────────────────────────────────────────────── Ctrl + Shift + I  » Import WSDL From System

Knowledge

sudo ss -tulwn | grep LISTEN sudo ss -tulpn | grep LISTEN | grep 8080 sudo ss -tulpn | grep LISTEN | grep sshd sudo ss -tulpn | grep LISTEN | grep minio

References

ZAP » Configure to monitor security Threats ZAP » Using a Proxy for Certain Sites Only ZAP » Setup to scan your web application ZAP » Proxy Auto-Configuration ZAP » Setting up for Browser ZAP » Setting up for Android ZAP » Proxy SwitchyOmega ZAP » Zed Attack Proxy ZAP » Getting Started ZAP » GitHub	ZAP » sudo snap install zaproxy --classic
IAST » Interactive Application Security Testing DAST » Dynamic Application Security Testing Penetration Testing, Process, Types, & Tools MAST » Mobile Application Security Testing SAST » Static Application Security Testing Open Source Application Security Tool JMeter Wrk