Scanning Web Apps Using GCP Web Security Scanner

45 minutes
  • 5 Learning Objectives

About this Hands-on Lab

Vulnerability scanning is a critical step in software development security and helps identify security weaknesses within your web app. In this hands-on lab, you’ll use the Web Security Scanner to identify security vulnerabilities within a running web app.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Reserve External Static IP Address
  1. From the GCP console, navigate to the IP Addresses page.
  2. Reserve a static IP address for the newly created VM instance.
Create and Run a Web Security Scanner Scan
  1. Enable the Web Security Scanner service using the GCP console.
  2. Create a Web Security Scanner scan.
  3. Run the newly created Web Security Scanner scan.
Enable Container Registry

Enable the Container Registry service using the GCP console.

Docker Pull, Tag, and Push Image

Using the Cloud Shell, perform the following commands:

  1. Pull the DVWA Docker image.
  2. Tag the DVWA Docker image.
  3. Push the DVWA Docker image.
Create a VM Instance Using the Container

Create a new Compute Engine VM instance, using the newly pushed image, in the GCP console.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?