sudo sh ZAP_2_11_1_unix.sh
[sudo] password for kali:
Starting Installer ...
open zap
tools -> options -> set local proxy
serve multillidae on localhost
quick start -> manual explore localhost
right click on http:127.0.0.1 -> attack -> spider
spidering starts
right click on http:127.0.0.1 -> attack -> forced browse and children
in the forced browse tab dropdown list -> select default list
right click on http:127.0.0.1 -> attack -> forced browse and children
after forcing browse for a while, pause -> open tree view
-> right click on get request in notes folder -> open in browser
hidden page opens
reference:
No comments:
Post a Comment