Web App Penetration Testing - #6 - Discovering Hidden Files With ZAP

[@issammbarek78]

thank you man for everything you're doing

[@HackerSploit]

You are welcome

[@andreasloibl]

also a nice tool in that regard is using the OWASP dirbuster. When I pentest, I always Combine dirbuster, Burp and ZAP together.

[@The_One_0_0]

Sounds like a great combination 👍💯

[@thelegend-zj5de]

Another great tutorial, we love you Alexis!

[@JakeL-wr7xr]

Love the videos and the content. As always great work!! Just a question, is one better than the other like burp vs ZAP? or is it more of a preference or better to use both? I see many people use burp more. But the active scan of zap is really nice even if people say its not correct all the time.

[@blvckpantha]

Great video! Keep up the fantastic work !

[@HackerSploit]

Will do, thanks

[@telphusius]

Thank you , man ! Please keep doing tutorials with ZAP

[@AAAAA-zq3bj]

Sir, GOD bless u.Thanks for everything....

[@mrigendrasoni1960]

Glad I found your channel!

[@HackerSploit]

Thanls.

[@vns1111]

HEY zaproxy is already installed in kali 2018.1 or type apt-get install zaproxy

[@rafaeloliveira2740]

So this function pretty much do the same thing as "dirb" command, right?

[@neerajsathe8469]

You are one of the best TH-camr when it comes to Pentesting !!! Keep it up

[@Роберт-и8х]

This is awesome!
HackerSploit you are The Best man on 🌍! Huge hugs)

[@8080VB]

Mann now i love zap !! 🔷⚡

[@pranjal2477]

Sir how to do the same stuff by using burp

[@DawoodInDaHood]

Would this count as sql injection pls reply quick

[@BatteryProductions]

i love zaproxy, good video!

[@mksuenone]

Hi i have problem on my pc. It was penetrated by .URNB file ransomware. Can you help mw with this?

[@aliguellouma6333]

i never thought that zap is great tools thanks

[@roddy2143]

Dirbuster also works right...?

[@creamcheesediarrhea1006]

Love this channel.Don't stop.

[@rishabhuniyal9117]

man how to spider in burp suite 2.0 or above because they have removed spidering feature from it ? any help would be appreciated

[@alephanull1953]

Burp Pro

[@sushantdhopat]

the sound will be listening slowly?

[@ShabazDraee]

Why is that when I use the proxy settings I can't access my metasploitable via my browser, but I can when I have it on no proxy it works? How can I bypass this issue? Both my VM's are on NAT.

[@firozshaikh2316]

Generate certificate from zap proxy and import it in browser that will fix the issue that you are facing

[@pranavvijayakumar1989]

can we perform this to any MNC sites, so that we find the hidden file?

[@lucatrabalza2138]

very good!!

[@viveksvijay]

My mutillidae shows a blank screen why

[@yelbelpoys5276]

I didnt understand how you opened the mutillidae?

[@aaronhughes4199]

Great video, very informative. What VM do you use?

[@x_gosie]

me? i just saw your comments i just wondering why youre asking me that but I'll answer it my vm is vm oracle box.

[@jinsaugustine5203]

is his old videos like this still useful in 2024?

[@z_n_0vgamingroasting817]

sir can u be my teacher for everything u showed...we need u

[@Z0nd4]

Please, turn on the subtitles option

[@clayrichardson6137]

Try to find the tool kit Snowden tweeted about

[@ko-Daegu]

Clay Richardson
Wow what
What it is called
Or can you give me the link of Snowden tweet

[@jackvicky2173]

So interesting tomorrow my first job is to install Zap and start explore.. I had one issue with burpsuite sometimes it's certificate is not working properly, I mean Https request is not opening even though I added burp SSL certificate.. could you please help me on this if possible

[@aadarshvelu373]

How to days it took to study to get certificate in ceh

[@dualsensedynasty]

i have certificate error in browser why?

[@Ninja5433]

Running the Forced Browser Directory (and children) attack slowed my VM down a ton.

[@attscham7820]

cant think of a better comment than this.

[@pauljojo831]

Pls make videos on how to use the built-in tools and also he other tools from github.

[@percyblakeney3743]

Beg your pardon sir but I never ask "why do I need to find hidden files", rather, "why don't I need to find hidden files."
:D

[@bambiku]

how to keep your IP anonymous while digging the info. I've tried proxychains but the browser won't work

[@RedBlueLabs]

Using a paid VPN is a good option. You can switch between different countries. This is a popular method.

[@aadarshvelu373]

Bro ceh certificate in ec council is worth

[@aviralwalia]

I feel greedy sometimes...I just want you to upload this whole series at once 😅.

[@HackerSploit]

They are coming 😄

[@adriatical9016]

14:30 yay my name is present :D

[@RoadToJoy]

I ♥️ you!

[@h3x3r29]

Plz take me as your student , plz

[@shailshah809]

me too

[@asantoshkumarachary2692]

Not able to find Android app😢

[@tamilanmkv6024]

install NetHunder

[@ronak3600]

U can better use dirbuster

[@richard5931]

i dont know how to get mutillidae working

[@HackerSploit]

What is the issue?

[@ali-barznji]

❤❤❤

[@dariusmahamedi4917]

Could you do a series on hacking using the inspect element? Like the console, element, all that stufff

[@HackerSploit]

Yes

[@dariusmahamedi4917]

HackerSploit ummmm WILL you do a series on it anytime soon?

[@v380riMz]

you cant hack through inspect element

[@MA-pi7os]

You talk out of the subject a lot . that s how it gets boring. try to make it short and easy to explain. Thank u

[@alephanull1953]

I like it tho, it feels like he's legit doing it for the first time

[@pauljojo831]

Pls reply to everyone on kik

[@gaminghub472]

*10th*

[@MrGFYne1337357]

6th

[@imranthoufeeque]

4th comment...

[@alby_alby]

2nd

[@hiekinakamura]

5" comment

[@meghnaad2156]

pretty lame