OWASP ZAP HUD

AGENDA

• Objective: learn ZAP w/ HUD
• Lab PC setup
• Intro OWASP
• Intro Dojo
• Intro ZAP (the case for HUD)
• Rapid HUD overview
• DIY HUD Tutorial

PC SETUP - USB

• Install VirtualBox
• double-click EXE on USB
• then "install" Web Security Dojo
• double-click OVA on USB

PC SETUP - Internet

• Download and install VirtualBox by Oracle
• http://bit.ly/2TNGFDG
• Download Web Security Dojo
• = http://bit.ly/dojo34beta2
• = then double-click that OVA fil

While we wait for downloads/installs...

OWASP DE

Web Security Dojo

Dojo v3.4 beta fix

ZAP

• How to update it
• Marketplace updates
• Quick demo

ZAP HUD

HUD: How to...

• turn on
• turn off
• reset tutorial or turn off prompt
• right-click HUD tool for options (e.g.

HUD Tutorial

Live fire practice

Targets to consider

• https://insecure.local:8080/insecure/
• https://demo.testfire.net/
• = u: asmith p: andy
• ./
• https://demo.testfire.net/
• = u: jsmith p: Demo1234

HUD Limitations

• https://targets.local/phpdemos/a4.php