{"id":718,"date":"2023-05-24T18:15:30","date_gmt":"2023-05-24T16:15:30","guid":{"rendered":"https:\/\/albertovr.com\/blog\/?p=718"},"modified":"2023-05-24T18:48:57","modified_gmt":"2023-05-24T16:48:57","slug":"escaneo-de-vulnerabilidades-automatico-con-owasp-zap","status":"publish","type":"post","link":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/","title":{"rendered":"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP"},"content":{"rendered":"<h1 class=\"wp-block-heading has-ek-typography\" style=\"\">OWASP<\/h1>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/oJyboP8TjexF4bGAoxTJ_header_blog_1.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Hoy os hablaremos de una herramienta de Pentesting muy conocida llamada OWASP ZAP.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Zed Attack Proxy (ZAP) es una herramienta gratuita de prueba de penetraci\u00f3n de c\u00f3digo abierto que se mantiene bajo el paraguas del Open Web Application Security Project (OWASP). ZAP est\u00e1 dise\u00f1ado espec\u00edficamente para probar aplicaciones web.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">OWASP ZAP (Zed Attack Proxy) es el esc\u00e1ner web de vulnerabilidades m\u00e1s utilizado en todo el mundo, es completamente gratuito y de c\u00f3digo abierto, por lo que podr\u00e1s adaptarlo a tus necesidades. Este programa es mantenido activamente por una comunidad internacional de voluntarios, los cuales trabajan para ir mejorando la herramienta poco a poco y tambi\u00e9n incorporando nuevas caracter\u00edsticas.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">En esencia, ZAP es lo que se conoce como un \u00abproxy de intermediario\u00bb. Se encuentra entre el navegador del probador y la aplicaci\u00f3n web para que pueda interceptar e inspeccionar los mensajes enviados entre el navegador y la aplicaci\u00f3n web, modificar el contenido si es necesario y reenviar esos paquetes al destino.<\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/5ocLZAERQz2YWRAokBky_guardar1.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>Ventajas de ZAP:<\/strong><\/p>\n\n<ul class=\"wp-block-list has-ek-typography\" style=\"\"><li class=\" has-ek-typography\" style=\"\">ZAP proporciona multiplataforma, es decir, funciona en todos los sistemas operativos (Linux, Mac, Windows)<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">ZAP es reutilizable<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Puede generar informes<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Ideal para principiantes<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Herramienta gratuita<\/li><\/ul>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">En esta imagen se muestra de una forma un poco m\u00e1s extensa el funcionamiento general de la herramienta.<\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/LgszH5nYTAOit0s1DAlZ_guardar2.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>Terminolog\u00edas ZAP<\/strong><\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Antes de configurar la instalaci\u00f3n de ZAP, comprendamos algunas terminolog\u00edas de ZAP:<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"># 1) Sesi\u00f3n : Sesi\u00f3n simplemente significa navegar por el sitio web para identificar el \u00e1rea de ataque. Para ello, se puede utilizar cualquier navegador como Mozilla Firefox cambiando su configuraci\u00f3n de proxy. O bien, podemos guardar la sesi\u00f3n zap como .session y se puede reutilizar.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"># 2) Contexto: Significa una aplicaci\u00f3n web o un conjunto de URL juntas. El contexto creado en el ZAP atacar\u00e1 al especificado e ignorar\u00e1 el resto, para evitar demasiados datos.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"># 3) Tipos de ataques ZAP: Puede generar un informe de vulnerabilidad utilizando diferentes tipos de ataques ZAP presionando y escaneando la URL.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Escaneo activo: Podemos realizar un escaneo activo usando Zap de muchas maneras. La primera opci\u00f3n es la Inicio r\u00e1pido, que est\u00e1 presente en la p\u00e1gina de bienvenida de la herramienta ZAP.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>INSTALACI\u00d3N DE LA HERRAMIENTA<\/strong><\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/Mn0srao0THbUWf7LotWg_guardar3.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Podemos descargar la herramienta en la\u00a0<a href=\"https:\/\/www.zaproxy.org\/download\/\"><strong>web oficial de OWASP ZAP<\/strong><\/a>, en la cual podr\u00e1s encontrar los enlaces para su descarga, tanto para Windows, Linux, macOS y los contenedores de Docker, los cuales ya incorporan todo lo necesario para su correcto funcionamiento.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">La instalaci\u00f3n de esta herramienta es realmente sencilla. Simplemente tendremos que seguir el asistente de instalaci\u00f3n, elegir si queremos la instalaci\u00f3n est\u00e1ndar o la personalizada, y elegir el directorio donde instalar todo el programa para ejecutarlo posteriormente.<\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/bAP2kw6KRjOOiupLv39C_guardar4.png?ssl=1\" alt=\"\"><\/figure>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/yioEtVTLKKjuqgOIGfvw_guardar5.png?ssl=1\" alt=\"\"><\/figure>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/MWhZ6VxJT5i9hQSN86mG_guardar6.png?ssl=1\" alt=\"\"><\/figure>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/PtZYbQiewI2kevtoLkQD_guardar7.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Tambi\u00e9n podremos elegir crear una carpeta en el men\u00fa inicio, crear los iconos en el escritorio e incluso el acceso r\u00e1pido. Por \u00faltimo, OWASP ZAP nos permitir\u00e1 comprobar si hay actualizaciones.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Tambi\u00e9n podremos instalar las nuevas reglas que se creen para los esc\u00e1neres web etc.<\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/ZdhzrRYsRZilkszpFGpJ_guardar9.png?ssl=1\" alt=\"\"><\/figure>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/cIwXqjBSVuHEsrwPptoY_guardar8.png?ssl=1\" alt=\"\"><\/figure>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/fg5hVH3eSLqUvJHYKNfH_guardar10.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Una vez instalado, podemos ejecutarlo para empezar a escanear servidores web y comprobar si existe alg\u00fan tipo de fallo de seguridad conocido.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Cuando inicie ZAP por primera vez, la herramienta preguntar\u00e1 si deseas mantener la sesi\u00f3n de ZAP. De forma predeterminada, las sesiones ZAP siempre se graban en el disco en una base de datos HSQLDB con un nombre y una ubicaci\u00f3n predeterminados. Si la sesi\u00f3n no persiste, esos archivos se eliminar\u00e1n al cerrar la sesi\u00f3n.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Si eliges mantener una sesi\u00f3n, la informaci\u00f3n de la sesi\u00f3n se guardar\u00e1 en la base de datos local para que pueda acceder a ella m\u00e1s tarde. Tambi\u00e9n podr\u00e1 proporcionar nombres personalizados y ubicaciones para guardar los archivos.<\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/SCiAYE8UTVaNNSVY8ij3_guardar11.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Por ahora, seleccione \u201cNo\u201d, no quiero persistir en esta sesi\u00f3n en este momento. Luego haga clic en Iniciar. Las sesiones de ZAP no se mantendr\u00e1n por ahora.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>Interfaz de usuario de escritorio ZAP<\/strong><\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">La interfaz de usuario de ZAP Desktop se compone de los siguientes elementos:<\/p>\n\n<ul class=\"wp-block-list has-ek-typography\" style=\"\"><li class=\" has-ek-typography\" style=\"\">Barra de men\u00fa: Brinda acceso a muchas de las herramientas autom\u00e1ticas y manuales.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Barra de herramientas: Incluye botones que facilitan el acceso a las funciones m\u00e1s utilizadas.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Ventana de \u00e1rbol: Muestra el \u00e1rbol de Sitios y el \u00e1rbol de Scripts.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Ventana del \u00e1rea de trabajo: Muestra solicitudes, respuestas y scripts y le permite editarlos.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Ventana de informaci\u00f3n: Muestra detalles de las herramientas autom\u00e1ticas y manuales.<\/li><\/ul>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Pie de p\u00e1gina: Muestra un resumen de las alertas encontradas y el estado de las principales herramientas automatizadas.<\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/NaALvoJLQsSJpLLGwmWt_guardar12.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>Ejecuci\u00f3n de un escaneo automatizado<\/strong><\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">La forma m\u00e1s sencilla de empezar a utilizar ZAP es a trav\u00e9s de la pesta\u00f1a Inicio r\u00e1pido. Quick Start es un complemento de ZAP que se incluye autom\u00e1ticamente cuando instala ZAP.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>Para ejecutar un escaneo automatizado de inicio r\u00e1pido:<\/strong><\/p>\n\n<ul class=\"wp-block-list has-ek-typography\" style=\"\"><li class=\" has-ek-typography\" style=\"\">Inicie ZAP y haga clic en la pesta\u00f1a Inicio r\u00e1pido de la ventana del \u00e1rea de trabajo.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Haga clic en el bot\u00f3n grande de Escaneo automatizado.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">En el cuadro de texto URL para atacar, ingrese la URL completa de la aplicaci\u00f3n web que desea atacar.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Haga clic en el ataque<\/li><\/ul>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/2owmZCHVSnKyNfYNFuCF_guardar13.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">ZAP proceder\u00e1 a rastrear la aplicaci\u00f3n web con su ara\u00f1a y escanear\u00e1 pasivamente cada p\u00e1gina que encuentre. Luego, ZAP utilizar\u00e1 el esc\u00e1ner activo para atacar todas las p\u00e1ginas, funcionalidades y par\u00e1metros descubiertos.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Adem\u00e1s, ZAP proporciona 2 ara\u00f1as para rastrear aplicaciones web, las cuales se pueden seleccionar desde esa misma pantalla.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">La ara\u00f1a ZAP tradicional que descubre enlaces examinando el HTML en las respuestas de la aplicaci\u00f3n web. Esta ara\u00f1a es r\u00e1pida, pero no siempre es efectiva cuando se explora una aplicaci\u00f3n web AJAX que genera enlaces usando JavaScript.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Para las aplicaciones AJAX, es probable que la ara\u00f1a AJAX de ZAP sea m\u00e1s eficaz. Esta ara\u00f1a explora la aplicaci\u00f3n web invocando navegadores que luego siguen los enlaces que se han generado. La ara\u00f1a AJAX es m\u00e1s lenta que la ara\u00f1a tradicional y requiere una configuraci\u00f3n adicional para su uso en un entorno \u00absin cabeza\u00bb.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">ZAP escanear\u00e1 pasivamente todas las solicitudes y respuestas enviadas a trav\u00e9s de \u00e9l. Hasta ahora, ZAP solo ha realizado an\u00e1lisis pasivos de su aplicaci\u00f3n web. El escaneo pasivo no cambia las respuestas de ninguna manera y se considera seguro. El escaneo tambi\u00e9n se realiza en un hilo de fondo para no ralentizar la exploraci\u00f3n. El escaneo pasivo es bueno para encontrar algunas vulnerabilidades y como una forma de tener una idea del estado de seguridad b\u00e1sico de una aplicaci\u00f3n web y ubicar d\u00f3nde se puede justificar una mayor investigaci\u00f3n.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Sin embargo, el an\u00e1lisis activo intenta encontrar otras vulnerabilidades mediante ataques conocidos contra los objetivos seleccionados. El escaneo activo es un ataque real a esos objetivos y puede ponerlos en riesgo, as\u00ed que no utilice el escaneo activo contra objetivos para los que no tiene permiso para probar.<\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>Ver alertas y detalles de alertas<\/strong><\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">En el lado izquierdo del pie de p\u00e1gina ZAP nos muestra un recuento de las alertas encontradas durante el testeo, desglosadas en categor\u00edas de riesgo, las cuales son:<\/p>\n\n<figure class=\"wp-block-image has-ek-typography\" style=\"\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/kajabi-storefronts-production.kajabi-cdn.com\/kajabi-storefronts-production\/blogs\/2147492532\/images\/uNe1MUCvS0yTA2oynsSw_guardar14.png?ssl=1\" alt=\"\"><\/figure>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Para verlas solo debemos seguir los siguientes pasos:<\/p>\n\n<ul class=\"wp-block-list has-ek-typography\" style=\"\"><li class=\" has-ek-typography\" style=\"\">Hacer click en la pesta\u00f1a \u201cAlertas\u201d en la ventana de informaci\u00f3n.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">Hacer click en cada alerta que se muestra en esa ventana para mostrar la URL y la vulnerabilidad detectada en el lado derecho de la Ventana de informaci\u00f3n.<\/li>\n\n<li class=\" has-ek-typography\" style=\"\">En las ventanas del \u00e1rea de trabajo, hacer click en la pesta\u00f1a Respuesta para ver el contenido del encabezado y el cuerpo de la respuesta. Se resaltar\u00e1 la parte de la respuesta que gener\u00f3 la alerta.<\/li><\/ul>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\"><strong>Generaci\u00f3n de informes en ZAP<\/strong><\/p>\n\n<p class=\"has-ek-typography wp-block-paragraph\" style=\"\">Una vez que se realiza el escaneo activo, podemos generar informes. Para eso simplemente debemos hacer click en \u201cOWASP ZAP\u201d &gt;&gt; \u201cInforme\u201d &gt;&gt; \u201cgenerar informes HTML\u201d &gt;&gt; \u201cruta de archivo proporcionada\u201d &gt;&gt; \u201cinforme de escaneo exportado\u201d.<\/p>\n\n<div class=\"wp-block-caxton-super-text has-ek-typography\" style=\"\"><p class=\"\" style=\"font-weight:400;color:#555;\" data-mobile-css=\"\" data-tablet-css=\"\" data-desktop-css=\"\"><span class=\"\"><\/span><\/p><\/div>","protected":false},"excerpt":{"rendered":"<p>OWASP Hoy os hablaremos de una herramienta de Pentesting muy conocida llamada OWASP ZAP. Zed Attack Proxy (ZAP) es una herramienta gratuita de prueba de penetraci\u00f3n de c\u00f3digo abierto que se mantiene bajo el paraguas del Open Web Application Security Project (OWASP). ZAP est\u00e1 dise\u00f1ado espec\u00edficamente para probar aplicaciones web. OWASP ZAP (Zed Attack Proxy) [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":720,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":0,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","_editorskit_typography_data":[],"_editorskit_blocks_typography":"","content-type":"","_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[],"class_list":["post-718","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informatica"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP - Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP - Blog\" \/>\n<meta property=\"og:description\" content=\"OWASP Hoy os hablaremos de una herramienta de Pentesting muy conocida llamada OWASP ZAP. Zed Attack Proxy (ZAP) es una herramienta gratuita de prueba de penetraci\u00f3n de c\u00f3digo abierto que se mantiene bajo el paraguas del Open Web Application Security Project (OWASP). ZAP est\u00e1 dise\u00f1ado espec\u00edficamente para probar aplicaciones web. OWASP ZAP (Zed Attack Proxy) [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/alberto.vigara\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-24T16:15:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-24T16:48:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png\" \/>\n\t<meta property=\"og:image:width\" content=\"525\" \/>\n\t<meta property=\"og:image:height\" content=\"112\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Alberto Vigara Rodriguez\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@AlbertoVigara\" \/>\n<meta name=\"twitter:site\" content=\"@AlbertoVigara\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alberto Vigara Rodriguez\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/\"},\"author\":{\"name\":\"Alberto Vigara Rodriguez\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb230d80579774cd6154c68090fff429\"},\"headline\":\"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP\",\"datePublished\":\"2023-05-24T16:15:30+00:00\",\"dateModified\":\"2023-05-24T16:48:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/\"},\"wordCount\":1359,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/albertovr.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/IMG_0257.png?fit=525%2C112&ssl=1\",\"articleSection\":[\"Informatica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/\",\"url\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/\",\"name\":\"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP - Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/albertovr.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/IMG_0257.png?fit=525%2C112&ssl=1\",\"datePublished\":\"2023-05-24T16:15:30+00:00\",\"dateModified\":\"2023-05-24T16:48:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/albertovr.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/IMG_0257.png?fit=525%2C112&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/albertovr.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/05\\\/IMG_0257.png?fit=525%2C112&ssl=1\",\"width\":525,\"height\":112},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/\",\"name\":\"Alberto VR\",\"description\":\"El Blog de Alberto VR -Inform\u00e1tica-\",\"publisher\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#organization\",\"name\":\"Alberto VR\",\"url\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i2.wp.com\\\/albertovr.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/avr.jpg?fit=256%2C256&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i2.wp.com\\\/albertovr.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/avr.jpg?fit=256%2C256&ssl=1\",\"width\":256,\"height\":256,\"caption\":\"Alberto VR\"},\"image\":{\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/alberto.vigara\",\"https:\\\/\\\/x.com\\\/AlbertoVigara\",\"https:\\\/\\\/www.instagram.com\\\/albertovigara\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/alberto-v-29a8251b9\",\"https:\\\/\\\/www.pinterest.es\\\/vigaratimon\\\/alberto-vr\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCNWpOLVGJ_0HT91SkF7zv1w\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/#\\\/schema\\\/person\\\/bb230d80579774cd6154c68090fff429\",\"name\":\"Alberto Vigara Rodriguez\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b961d1f07848285e680d4b4c9803fc830d023d476c145a624d509928cbb9fddf?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b961d1f07848285e680d4b4c9803fc830d023d476c145a624d509928cbb9fddf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b961d1f07848285e680d4b4c9803fc830d023d476c145a624d509928cbb9fddf?s=96&d=mm&r=g\",\"caption\":\"Alberto Vigara Rodriguez\"},\"sameAs\":[\"https:\\\/\\\/albertovr.com\"],\"url\":\"https:\\\/\\\/albertovr.com\\\/blog\\\/author\\\/albertovr\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP - Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/","og_locale":"es_ES","og_type":"article","og_title":"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP - Blog","og_description":"OWASP Hoy os hablaremos de una herramienta de Pentesting muy conocida llamada OWASP ZAP. Zed Attack Proxy (ZAP) es una herramienta gratuita de prueba de penetraci\u00f3n de c\u00f3digo abierto que se mantiene bajo el paraguas del Open Web Application Security Project (OWASP). ZAP est\u00e1 dise\u00f1ado espec\u00edficamente para probar aplicaciones web. OWASP ZAP (Zed Attack Proxy) [&hellip;]","og_url":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/","og_site_name":"Blog","article_publisher":"https:\/\/www.facebook.com\/alberto.vigara","article_published_time":"2023-05-24T16:15:30+00:00","article_modified_time":"2023-05-24T16:48:57+00:00","og_image":[{"width":525,"height":112,"url":"https:\/\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png","type":"image\/png"}],"author":"Alberto Vigara Rodriguez","twitter_card":"summary_large_image","twitter_creator":"@AlbertoVigara","twitter_site":"@AlbertoVigara","twitter_misc":{"Escrito por":"Alberto Vigara Rodriguez","Tiempo de lectura":"9 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#article","isPartOf":{"@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/"},"author":{"name":"Alberto Vigara Rodriguez","@id":"https:\/\/albertovr.com\/blog\/#\/schema\/person\/bb230d80579774cd6154c68090fff429"},"headline":"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP","datePublished":"2023-05-24T16:15:30+00:00","dateModified":"2023-05-24T16:48:57+00:00","mainEntityOfPage":{"@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/"},"wordCount":1359,"commentCount":3,"publisher":{"@id":"https:\/\/albertovr.com\/blog\/#organization"},"image":{"@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1","articleSection":["Informatica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/","url":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/","name":"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP - Blog","isPartOf":{"@id":"https:\/\/albertovr.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#primaryimage"},"image":{"@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1","datePublished":"2023-05-24T16:15:30+00:00","dateModified":"2023-05-24T16:48:57+00:00","breadcrumb":{"@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#primaryimage","url":"https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1","contentUrl":"https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1","width":525,"height":112},{"@type":"BreadcrumbList","@id":"https:\/\/albertovr.com\/blog\/escaneo-de-vulnerabilidades-automatico-con-owasp-zap\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/albertovr.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Escaneo de vulnerabilidades autom\u00e1tico con OWASP ZAP"}]},{"@type":"WebSite","@id":"https:\/\/albertovr.com\/blog\/#website","url":"https:\/\/albertovr.com\/blog\/","name":"Alberto VR","description":"El Blog de Alberto VR -Inform\u00e1tica-","publisher":{"@id":"https:\/\/albertovr.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/albertovr.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/albertovr.com\/blog\/#organization","name":"Alberto VR","url":"https:\/\/albertovr.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/albertovr.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i2.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2021\/02\/avr.jpg?fit=256%2C256&ssl=1","contentUrl":"https:\/\/i2.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2021\/02\/avr.jpg?fit=256%2C256&ssl=1","width":256,"height":256,"caption":"Alberto VR"},"image":{"@id":"https:\/\/albertovr.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/alberto.vigara","https:\/\/x.com\/AlbertoVigara","https:\/\/www.instagram.com\/albertovigara","https:\/\/www.linkedin.com\/in\/alberto-v-29a8251b9","https:\/\/www.pinterest.es\/vigaratimon\/alberto-vr","https:\/\/www.youtube.com\/channel\/UCNWpOLVGJ_0HT91SkF7zv1w"]},{"@type":"Person","@id":"https:\/\/albertovr.com\/blog\/#\/schema\/person\/bb230d80579774cd6154c68090fff429","name":"Alberto Vigara Rodriguez","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/b961d1f07848285e680d4b4c9803fc830d023d476c145a624d509928cbb9fddf?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b961d1f07848285e680d4b4c9803fc830d023d476c145a624d509928cbb9fddf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b961d1f07848285e680d4b4c9803fc830d023d476c145a624d509928cbb9fddf?s=96&d=mm&r=g","caption":"Alberto Vigara Rodriguez"},"sameAs":["https:\/\/albertovr.com"],"url":"https:\/\/albertovr.com\/blog\/author\/albertovr\/"}]}},"featured_image_src":"https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?resize=525%2C112&ssl=1","featured_image_src_square":"https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?resize=525%2C112&ssl=1","author_info":{"display_name":"Alberto Vigara Rodriguez","author_link":"https:\/\/albertovr.com\/blog\/author\/albertovr\/"},"uagb_featured_image_src":{"full":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1",525,112,false],"thumbnail":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?resize=150%2C112&ssl=1",150,112,true],"medium":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=300%2C64&ssl=1",300,64,true],"medium_large":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1",525,112,true],"large":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1",525,112,true],"1536x1536":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1",525,112,true],"2048x2048":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?fit=525%2C112&ssl=1",525,112,true],"ab-block-post-grid-landscape":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?resize=525%2C112&ssl=1",525,112,true],"ab-block-post-grid-square":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?resize=525%2C112&ssl=1",525,112,true],"gb-block-post-grid-landscape":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?resize=525%2C112&ssl=1",525,112,true],"gb-block-post-grid-square":["https:\/\/i0.wp.com\/albertovr.com\/blog\/wp-content\/uploads\/2023\/05\/IMG_0257.png?resize=525%2C112&ssl=1",525,112,true]},"uagb_author_info":{"display_name":"Alberto Vigara Rodriguez","author_link":"https:\/\/albertovr.com\/blog\/author\/albertovr\/"},"uagb_comment_info":0,"uagb_excerpt":"OWASP Hoy os hablaremos de una herramienta de Pentesting muy conocida llamada OWASP ZAP. Zed Attack Proxy (ZAP) es una herramienta gratuita de prueba de penetraci\u00f3n de c\u00f3digo abierto que se mantiene bajo el paraguas del Open Web Application Security Project (OWASP). ZAP est\u00e1 dise\u00f1ado espec\u00edficamente para probar aplicaciones web. OWASP ZAP (Zed Attack Proxy)&hellip;","_links":{"self":[{"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/posts\/718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/comments?post=718"}],"version-history":[{"count":1,"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/posts\/718\/revisions"}],"predecessor-version":[{"id":719,"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/posts\/718\/revisions\/719"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/media\/720"}],"wp:attachment":[{"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/media?parent=718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/categories?post=718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/albertovr.com\/blog\/wp-json\/wp\/v2\/tags?post=718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}