can we test injection attacks in API parameters with owasp zap?
With Owasp Zap I am trying to scan APIs. Provided Bearer token with a script and Swagger API definition file. I am getting results related to weak Certificates and Transport headers vulnerabilities.
My expectation was something kind of testing API parameters with injection attacks and results like SQL or command injection type of vulnerability
Does OWASP Zap has this capability?
New contributor
viks is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.