Questions Tags Users Badges

owasp zap how to check vulnerabilities of post request

Created Feb 29, 2020 Edited Feb 29, 2020

Viewed 1656

I have to check if my endpoint REST POST have or not some vulnerabilities.

I'm using owasp zap for the first time.

If I try to check my endpoint that is a REST POST just inserting the url in the form on owasp zap, it gives me an error 405.

So how can I check this kind of request?

Thanks

zap owasp spring java

1 Answers

The ZAP Quick Scan is just that, a quick scan :) You have various options:

If you have an Swagger / OpenAPI definition then import that: https://www.zaproxy.org/docs/desktop/addons/openapi-support/
If you have any API tests then you can proxy those via ZAP
Otherwise you can send any requests you like via the Manual Request Editor: https://www.zaproxy.org/docs/desktop/ui/dialogs/man_req/

To learn more about ZAP have a look at the Getting Started Guide: https://www.zaproxy.org/getting-started/

edited Mar 2, 2020

user_15098340

answered Mar 2, 2020

Related