Introduction

What?

Build a virtual local testlab with tools for web application pentesting.

Why?

Labs, challenges, CTFs, application pentesting, teaming.

How?

• Setting up Burp Suite (Kali)

• Setting up ZAP (Kali)

• Using firefox as proxy for Burp and Zap

• OAST alternatives

• HTTP proxies and traffic analysers

• Vulnerability discovery tools

• Target recognition

• Browser extensions

• Create recon scripts