MITS 5004 IT Security: Exploring Zed Attack Proxy on Kali Linux

This presentation provides an overview of the Zed Attack Proxy (ZAP) tool within the Kali Linux environment, focusing on its capabilities for security vulnerability testing. It begins by introducing various vulnerability tools available in Kali Linux before delving into the specifics of ZAP, including its history, principles, and features such as active and passive scanning, spidering, and support for web sockets. The presentation details how ZAP functions, covering aspects like intercepting traffic, automated scanning, and both traditional and AJAX spiders. It also explains the process of website scanning, differentiating between active and passive scanning techniques. Furthermore, the presentation touches on analysis and reporting features, including vulnerability level determination and report generation in HTML format. The concluding sections cover the installation and configuration of ZAP, alongside practical examples of its use with Mutillidae, demonstrating various attack simulations and directory browsing. The presentation concludes by highlighting ZAP's ease of use and its effectiveness in enhancing application security.

Research Security
vulnerability tools using
Kali (Linux)
-Zed Attack Proxy

Presented By-
• Student 1
• Student 2
• Student 3

Overview
• vulnerability tools
• Zed Attack Proxy -Then
• Zed Attack Proxy -Now
• Zed Attack Proxy Principle
• Zed Attack Proxy Principle
• Features of Zed Attack Proxy
• Functioning of Zed Attack Proxy

Research Security vulnerability tools
using Kali (Linux)
• Different type of vulnerability tools are used in kali Linux.
• The list of different type of tools are: Hydra, Maltego, NMap
Zed Attack Proxy, SqlMap, Metasploit Framework, and Burp
Suite.
• In here we will discuss about the Zed Attack Proxy which is
very efficient as a vulnerability tool.

Zed Attack Proxy -Then
• Released Date – September 2010
• Ease of use a priority
• A fork of the well regarded Paros Proxy
• Involvement actively encouraged
• Adopted by OWASP October 2010

Zed Attack Proxy -Now
• Easy to use as a pen-testing tool
• It is a open source tool and free
• This tool is very much helpful for the beginners
• Professionals are also used this software
• Ideal for automated security tests

Zed Attack Proxy Principle
• Opensource
• Free
• Cross platform
• Easy to use
• Fully documented
• Compatible with other tools

Features of Zed Attack Proxy
• The main features of Zed Attack Proxy tool are bellow:
• active and passive scanning
• Traditional and ajax Spiders
• Support for web socket
• Standard security controls
• Mailing Lists
• API
• Dynamic SSL Certificates
• Brute force scanner

More Features of Zed Attack Proxy
• Report generation
• Support different type of scripting like Java, Zest, Python.
• Port Scanning
• Anti CSRF token handlining
• Entreat external applications
• Auto tagging
• Headless mode

Functioning of Zed Attack Proxy
• Reporting
• Intercepting the traffic
• Automated scanning
• Traditional and ajax spiders

Intercepting the Traffic
• Configuring the web browser to using the zap proxy server
on localhost
• This can intercept all the network traffic
• This can click any web link to capture the network traffic
• This request can be modified before forward it to the server
• The result can be intercepting before forwarding it to the
web browser

Spidering
• The Zap spider is required for crawling the invisible links
• Its help to discover the hidden links automatically
• Newly discover links are visible
• The different domain URLs are also listed in the result