The Open Web Application Security Project | Salesforce Developer Guide

OWASP (Zed Attack Proxy) is an Open-Source Web Application Security Extend. It is wanting to be used by both those unused to application security just as capable penetration analyzers.

Following key points are there:-

It is planned to be utilized by both those new to application security just as expert infiltration analyzers.
At the point when utilized as a Proxy Server (An intermediary server goes about as a portal among you and the web) it permits the client to control the entirety of the traffic that goes through it, including traffic utilizing http.
The OWASP Zed Attack Proxy (ZAP) is one of the world's most mainstream web application security testing apparatuses.
Accessible free as an open source venture, and is added to and kept up by OWASP Only.
The OWASP ZAP device can be utilized during web application advancement by web engineers or by experienced security specialists during entrance tests to evaluate web applications for vulnerabilities.
The OWASP Zed Attack Proxy is a Java-based device that accompanies a natural graphical interface.
Being a Java device implies that it tends to be made to run on most working frameworks that help Java.
OWASP ZAP is found of course inside the most recent Kali Linux 2.0

Don't forget to check out: Protect Your Salesforce Data : Salesforce Security

How Zap Work After Installing? Following are the Step Describe below:

As seen above, the GUI window is divided into three major sections:

1.) Left Section: The left area of the ZAP window shows the "Specific circumstance" and "Locales" dropdown catches. At times, various sites can be focused for filtering and they show up under the "Locales" dropdown. Be that as it may, a particular site may be of intrigue. In this uncommon case, it must be determined under the "Unique circumstance" segment. Believe this to be the extent of testing.

Right Section: Here, we are given a URL segment where we are required to determine the objective for filtering. The "Assault" button begins the assault on the objective and the "Stop" button ends the assault. A security analyzer may be keen on physically testing a site for vulnerabilities.

2.) Base Section: This segment contains six tabs that are essential in demonstrating the exercises occurring during the helplessness examine. Beneath the tabs is an advancement bar that shows the sweep progress, number of sent demands, and takes into consideration sending out of the subtleties in CSV format. The "History" tab shows the sites being tried. For this situation we are trying just a solitary objective, so the history record will show a solitary section.

Check out another amazing blog by Marziya here: The Most Common Types of Salesforce Integrations

- The "Alarms" tab gives more insight concerning the issues found on the objective being examined. Issues are positioned by seriousness, with "Basic" being viewed as most elevated on the hazard list and concealed red, "High" of significant high hazard and concealed orange, "Medium" of slight high hazard and concealed yellow, "Low" of that which could prompt either high or medium hazard, introduction of touchy data or a trade off of the objective, and concealed blue.

- Spidering is significant in finding the section focuses into the web application and what connections are past the extent of assault. An advancement bar is significant in demonstrating the spidering progress also.
- Spidering is significant in finding the section focuses into the web application and what connections are past the extent of assault. An advancement bar is significant in demonstrating the spidering progress also.

This Tab is the "Dynamic Scan." This is imperative in indicating the advancement of the progressing check continuously, with each prepared record being shown.