TIME DURATION: August 31- September 10
OWASP zap
So far, I have been learning the basics of OWASP ZAP as a beginner. I learned that ZAP is a web application security testing tool used to identify possible vulnerabilities in websites.
I learned how to connect a browser to ZAP, use the Spider to discover pages on a website, and view and understand HTTP requests and responses, especially login requests.
I was also introduced to the Fuzzer, rate limiting, account lockout, username enumeration, Active Scanning, and session/cookie security. However, I am still learning how to practically use the Fuzzer and understand its different options.
Overall, I have gained a basic understanding of how OWASP ZAP works and how it can be used to study and test web application security in an authorized lab environment.
Then as a team. i and my team members made conference call meetings to discuss about the progress of the website and how to improve it .