{"id":58820,"date":"2022-10-03T09:38:36","date_gmt":"2022-10-03T01:38:36","guid":{"rendered":"https:\/\/version-2.com\/?p=58820"},"modified":"2022-12-02T18:14:42","modified_gmt":"2022-12-02T10:14:42","slug":"how-to-test-application-with-zap-part-one","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2022\/10\/how-to-test-application-with-zap-part-one\/","title":{"rendered":"How to test application with ZAP – Part One"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

\"\"<\/p>\n\n

Previously, I wrote about the prevention steps while developing your web application. While developing, you need to test it too, and of course, after development is done and the code is merged again, the application must be tested by the QA team. <\/p>

When the code is in the development stage, and you just want to test the functionality, you don\u2019t need to set up an environment. The test would be done in your localhost. But if you want to do security tests, you will need to set up an environment. In this article, I want to show you how to set up a test environment, which will also serve as a reference point for the following articles.<\/p>

Why is it good practice to set up an environment with virtual machines when testing a web application?<\/em><\/h4>

First, I will be focusing on testing the HTTP requests\/responses as they are something the attacker will first try to compromise.<\/p>

Thus, to test if HTTPs are secure, you can set up some virtual machines.<\/p>

As I mentioned, our focus will be on HTTP. First, I will give a short description of HTTP.<\/p>

HTTP – HyperText Transfer Protocol<\/strong><\/p>

HTTP request<\/u> is a request made by a client to access some resource on the server.<\/p>

HTTP response<\/u> is a response made by a server to a client with the requested resources.<\/p>

HTTP cycle<\/u><\/p>