Day 0: Recon
Of course, any good project starts with enumeration so you have to make sure well equipped for the task at and if your tool of choice burp suite or OWASP zap, you will find you have to set up very similar things to get started. Burp suite starts with setting up the scope section, ZAP also does the same but names it “contexts”. Make sure you configure this correctly or you might run out of scope without intending to do so which can have legal repercussions. Sometimes the programs determine the scope themselves while other times it might be governed by law for example…
