Proxy OWASP ZAP through a VPS

jack@jacktaylor.tech (Jack Taylor) — Sat, 02 Apr 2022 11:45:00 +0900

If you do any kind of penetration testing or bug bounty hunting from your home PC, then as a necessity you will be sending malicious-looking traffic to your target. If your target happens to be protected by Akamai or CloudFlare, and you don’t take any special precautions, then unfortunate things may happen. Unfortunate, as in your home IP gets blocked from half the sites on the internet.

To avoid this, you need to make your web traffic look like it came from a different IP address than it actually did. This means using some kind of proxy server. There are a few different ways you can do this, but my preferred way is to use a virtual private server (VPS) rented out from a cloud provider.

VPS on Jack Taylor

Proxy OWASP ZAP through a VPS