Simon Bennetts questions

Simon Bennetts answers

• Utilizing ZAP for RESTAPI testing
• ZAP Attack proxy History Request ID is not consecutive
• ZAP keeps scanning unnecessary URLs
• OWASP ZAP can not test API
• Passive Scan in OWASP ZAP
• OWASP's ZAP and the Fuzz ability
• Can ZAP be used for SPA application
• OWASP ZAP - how to "prove" false positives?
• Are there any HTTP/HTTPS interception tools other than Fiddler, Charles, Poster, and Achilles? [closed]