How to speed up OWASP ZAP scans

So you’ve used OWASP ZAP to scan your web application, and its taking far too long? Is that it, do you have to lump it or leave it? There are actually many things you can do, but the first thing you have to do is work out whyits taking a long time.

https://blog.mozilla.org/security/2013/07/10/how-to-speed-up-owasp-zap-scans/
Speeding up OWASP


How Scanners work:

It helps to understand how scanners like ZAP work.
Typically they explore the application using a spider (also known as a crawler). This identifies all of the URLs that make up the application, all of the forms and all of the parameters.
They then usually attack every parameter on every page.

How to speed up OWASP ZAP scans | Mozilla Security Blog

No comments:

Post a Comment