SANSFIRE 2014

Bust a Cap in a Web App With ZAP

• Adrien de Beaupre
• Thursday, June 26th, 8:15pm - 9:15pm

The Zed Attack Proxy (ZAP) is the Open Web Application Security Project's (OWASP) flagship testing tool. This presentation will describe the why and how of attacking your own web-based applications with ZAP. The presentation will include a walk-through of the web application testing methodology where ZAP is used as the attack tool.

Bio:

Adrien de Beaupre is a penetration tester and independent senior information security consultant. Mr. de Beaupre holds the ISC2 CISSP, GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), GPEN (GIAC Penetration Tester), GCIH (GIAC Certified Incident Handler), GCIA (GIAC Certified Incident Analyst), GSEC (GIAC Security Essentials), OPST (OSSTMM Professional Security Tester), OPSA (OSSTMM Professional Security Analyst, and MCSE (NT4.0 and 2K). As a volunteer member of the SANS Internet Storm Center (isc.sans.edu) he performs incident handling and threat analysis. He is a community instructor for the SANS Institute, teaching the 401, 503, 504, 542, and 560 courses.