how to perform mobile security test on real devices using OWASP ZAP -


i want perform security test mobile application, both android , studio. considering use owasp zap. don't know how can perform test real device. so, knowing this, please let me know. thanx!

yes,you can perform test using "proxy server". first need install certificate in mobile device zap record it. can following steps:

  1. open zap
  2. go tools
  3. click in options click in dynamic ssl certificate , generate new , save it.
  4. then need send certificate device, make sure name file "zap"
    1. in local proxy, set address "empty"

then, need configure android/ios application network configuration can following steps:

  1. go advance setting of network
  2. click in proxy , set "manual"
  3. then, need enter proxy server computer ip address , port proxy set in zap.

after these steps, need able perform test.

hope works! thanx!


Comments

Popular posts from this blog

neo4j - finding mutual friends in a cypher statement starting with three or more persons -

minify - Minimizing css files -

php - How to remove letter in front of the word laravel -