How to Perform a Real Penetration Test (ZAP Tutorial for Beginners)
Welcome to Week 5 of LCI Cloud Guardians Cybersecurity Training 🔐
In this session, we dive into Penetration Testing (Pentest) and demonstrate how to perform real-world vulnerability testing using OWASP ZAP (Zed Attack Proxy).
00:30 Introduction
00:45 Welcome & Class Overview
01:26 Tools to download for practical?
05.30 What is penetration testing?
06:19 Penetration Testing Methodology
10:02 Penetration Testing Workflow
10:26 Ethical Hacking & Legal Considerations
11:19 Introduction to OWASP ZAP
14:20 ZAP Interface Overview
16:15 Attack Simulation
23:03 Attack Report
27:14 Setting Up Browser (Firefox + Proxy)
34:41 FOXY PROXY Configuration
36:21 MITM (Man-in-the-Middle) Demo
37:09 Intercepting Traffic (Practical)
This is a hands-on practical class designed to help beginners understand how ethical hackers identify and exploit vulnerabilities in web applications.
🔍 WHAT YOU WILL LEARN:
What is Penetration Testing (Pentest)
Penetration testing workflow (Recon → Scan → Exploit → Report)
Difference between Vulnerability Assessment vs Pentesting
Ethical hacking principles and legal considerations
💻 PRACTICAL DEMO (LIVE):
Installing and setting up OWASP ZAP
Configuring browser for interception (Firefox + proxy)
Running automated vulnerability scans
Identifying real vulnerabilities (CSP, Clickjacking, headers)
Generating professional scan reports
⚠️ IMPORTANT DISCLAIMER:
This training is for educational purposes only.
Only perform penetration testing on systems you own or have explicit permission to test.
🎯 ASSIGNMENT:
Install OWASP ZAP
Scan a permitted target (e.g., example.com)
Generate and review vulnerability report
🔗 JOIN OUR COMMUNITY:
👉 Subscribe for more cybersecurity content
🙌 SPECIAL THANKS:
Instructor: Ogunsola Emmanuel O
📌 FOLLOW US:
#CyberSecurity #PenetrationTesting #OWASP #ZAP #EthicalHacking #LearnCybersecurity
#lexyletintegritysystemsltd
#lcicloudguardians
#lexyletcyberintelligence