API Security Testing With Postman & OWASP Zap - A quick walkthrough

[@johnfaltermeier4529]

Your teaching style is clear and concise. Simply awesome!

[@thetesttherapist]

Thank you!

[@dedensetiawanchannel]

I was just wondering how to use it with Postman and pentest to my apps. Thanks dude

[@thetesttherapist]

You’re welcome! If you have any more questions or need further assistance, feel free to ask. Happy pentesting!

[@ajendra5415]

Thank you very much for the tutorial. 🙏

[@thetesttherapist]

Glad it was helpful!

[@sampadroutz]

Just awesome! To the point, clear and concise. Thanks

[@thetesttherapist]

Glad you liked it!

[@sampadroutz]

@@thetesttherapist can you please make more videos on how we can automate the zap security test using its scripting feature? It will be great to see that. Thanks a ton in advance.

[@Hiturion]

Great video. Thank you Sir!

[@thetesttherapist]

Thank you :)

[@PCB389]

Great, I was just wondering how to use it with Postman. Thanks.

[@PaulChege-sb5yt]

Thank you sir!

[@sayedmosalam]

Thanks a lot for you video, but if the api needs generated token to be able to use it is there authentication method like in the web app authenticated scan?

[@moaidel-moatasembellah1729]

Thanks for sharing

[@ManikantaGembali-ot1pu]

Can you tell how to generate a sharable file for the details of alerts of a particular API ?

[@thetesttherapist]

You can generate detailed report : Report -> generate Report -> From Template choose "Traditional HTML Report" This should display alerts with all details

[@nirmaal2255]

how to find the unpublished api and how to do ai fuzzing

[@thetesttherapist]

Spider can get you any folder under the domain under test , but for ai fuzzing i don’t know haven’t tried it before 🤷🏻