DAST

Walkthrough summary

DAST TryHackMe walkthrough with 15 answered prompts and lab methodology notes.

Sample prompts covered

• Is DAST a replacement for SAST or SCA? (Yea/Nay)
  Open the walkthrough page to inspect the full answer and command flow.
• What is the process of mapping an application's surface and parameters usually called?
  Open the walkthrough page to inspect the full answer and command flow.
• Does DAST check the code of an application for vulnerabilities? (Yea/Nay)
  Open the walkthrough page to inspect the full answer and command flow.
• ZAP can run an AJAX spider by using browsers without a Graphical User Interface(GUI). What are these browsers called?
  Open the walkthrough page to inspect the full answer and command flow.
• Analysing the Sites tab, what HTTP parameters can be passed to login.php using the POST method? (In alphabetical order and separated by commas)
  Open the walkthrough page to inspect the full answer and command flow.