SQL Injection Attacks Using OWASP Zap Fuzzer

[@chidaruma_]

Nice to see some content of real value on yt

[@thetesttherapist]

Thank you!

[@daveeed.13aviiid]

thank you bro

[@KhalifamulyadiAbdulbari]

nice lesson thank you

[@thetesttherapist]

Thank you :)

[@berchil]

thank you

[@thetesttherapist]

Welcome!

[@velliangirimurugesh]

Nicely explained.. Please help us to learn more functionality in owasp

[@thetesttherapist]

Thank you :)

[@sathyanarayanansatzsathya]

Is thr any way to integrate this with existing selenium framework and run the scans in backend while ui testcases are being executed?

[@dahuynguyenphuc6586]

I just used owasp zap to check the website and there is an "Alerts" section. I want to get data directly from it, what should I do??

[@thetesttherapist]

If by data you mean extract a report , here how you can generate a report 👇
From Report menu select generate report

[@Joud3011]

how do i get the page that you enter the username in?

[@devil1238100]

Hey , how to add the addon FuzzDB Files from market place , Could see FUZZDB files is available in market place but i am not able to add this addon, can you help me out in adding this?

[@thetesttherapist]

Hey , if you are using Zap on Windows , sometimes it sees fuzz db files as a virus , try to add “FuzzDB Offensive” from the marketplace it should do the same job.
Good luck!

[@devil1238100]

@@thetesttherapist
thanks for quick response , have one more query when i try to start Fuzzer it says "Some Fuzz locations do not have any payload set. At least one payload must be added to start the fuzzer" . I have added a payload using payloads option but still i could see this warning. How do i need to resolve this?

[@chancellenawej6605]

Can you do it with ldap injection too?

[@thetesttherapist]

You can find ldap injection under jbrofuzz