@zaproxy is one of the essential tools I will use in a pentest for me. Of course I will also use burp suite but I am starting to default to @zaproxy for my tasks instead because of their contextual window design, free automated scanners and database/server design <3
@mr_goodwin@freddyb @ssh4un @ScottStorey I was a big fan of Cisco certs 15 years ago but dumps and CCIE leaked labs before a major update changed my mind.
This applies to PMP too when half of the population passed the tests during the pandemic.
A cert means that U prepared for a skill but not accumulated that skills.
I was doing a blind sqli lab in #burp academy, using the burp community version it took 3 hours to fuzz the administrator password but using #ZAP it took exactly 2 min 48 sec.
I can't believe this.
#Pentesting#Security
This week I started the @PortSwigger academy but I'm facing a problem with the labs.
Is it normal to read the solution at this level? I feel that there is a big gap between the theory & labs.
Dear experts and fellow learners, please advice.
#owasp#burp#ZAP#pentesting