Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
ddb07a33
Commit
ddb07a33
authored
Jul 06, 2020
by
Thiago Figueiró
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Fix documentation links to ZAP
parent
e2fe6aec
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
2 additions
and
2 deletions
+2
-2
doc/user/application_security/dast/index.md
doc/user/application_security/dast/index.md
+2
-2
No files found.
doc/user/application_security/dast/index.md
View file @
ddb07a33
...
@@ -44,10 +44,10 @@ see the details and the URL(s) affected.
...
@@ -44,10 +44,10 @@ see the details and the URL(s) affected.
![
DAST Widget Clicked
](
img/dast_single_v13_0.png
)
![
DAST Widget Clicked
](
img/dast_single_v13_0.png
)
[
Dynamic Application Security Testing (DAST)
](
https://en.wikipedia.org/wiki/Dynamic_Application_Security_Testing
)
[
Dynamic Application Security Testing (DAST)
](
https://en.wikipedia.org/wiki/Dynamic_Application_Security_Testing
)
uses the popular open source tool
[
OWASP Z
AProxy
](
https://github.com/zaproxy/zaproxy
)
uses the popular open source tool
[
OWASP Z
ed Attack Proxy
](
https://www.zaproxy.org/
)
to perform an analysis on your running web application.
to perform an analysis on your running web application.
By default, DAST executes
[
ZAP Baseline Scan
](
https://
github.com/zaproxy/zaproxy/wiki/ZAP-Baseline-Scan
)
By default, DAST executes
[
ZAP Baseline Scan
](
https://
www.zaproxy.org/docs/docker/baseline-scan/
)
and performs passive scanning only. It won't actively attack your application.
and performs passive scanning only. It won't actively attack your application.
However, DAST can be
[
configured
](
#full-scan
)
However, DAST can be
[
configured
](
#full-scan
)
to also perform an
*active scan*
: attack your application and produce a more extensive security report.
to also perform an
*active scan*
: attack your application and produce a more extensive security report.
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment