~/talk

OWASP ZAP: More Advanced Features

Talkat OWASP AppSec Research (AppSecEU) 2015 · on Thursday, 2015-05-21· at 11:05· Room Forum· [security]
links:none on file
slides:none on file

Version 2.4.0 for OWASP ZAP claims concrete wins: 32,000 downloads in one month, translations into 31 languages and 130 translators, and a codebase now ~20% Paros and ~80% new. New features actually implemented include persistent sessions, a scan policy manager, an expanded fuzzing dialog with scriptable payloads, an attack mode that follows discovered content, richer REST API calls and an alpha access‑control add‑on. A server direction is underway with DB independence, MySQL support and a low‑memory option for zap as a service.

AI-written summary · about

  1. 0:00Start
  2. 1:40What is ZAP?
  3. 3:37ZAP Principles
  4. 8:49Open HUB Statistics
  5. 9:27Some ZAP use cases
  6. 29:57Version 2.4.0
  7. 32:03More of the same..
  8. 33:47ZAP (desktop) properties
  9. 34:39ZaaS properties
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.