ed requests (via the Authorization panel in the Session
        Properties);
    </li>
    <li>the web-application is explored either manually or via the Spider;</li>
    <li>the tester define the Access Rules for each of the Users associated to the Context, basically letting ZAP know
        which parts of the web application are supposed to be accessed by which users;
    </li>
    <li>an ‘attack’ is performed by ZAP by trying to access every URL of the web-app from the perspective of every
        us