I have started learning OWASP ZAP and I am confused about passive scanning in OWASP ZAP.
On right clicking the node in Site tree I do not see any passive scanning option, however under Tools | Options I am able to see Passive Scan Rules.
- How Can I run Passive Scan in OWASP ZAP?
- Is the "URL to attack" in the Quick Start same as Active Scan after Spidering
Thanks