OWASP ZAP Advanced Features for Web Application Security Testing

Explore advanced features of the OWASP Zed Attack Proxy (ZAP) in this conference talk from AppSecEU 2014 in Cambridge. Begin with a quick introduction to ZAP, then delve into advanced penetration testing capabilities including handling single page and non-standard applications, client-side testing with Plug-n-Hack, advanced scanning options, contexts, fuzzing, scripting, Zest macro language, and modifying source code. Learn from Simon Bennetts, Security Automation Engineer at Mozilla and OWASP ZAP Project Leader, as he shares insights on building secure web applications through understanding attack methodologies.