I am doing web application testing and mostly performing injections into fields etc. Instead of having to do these manually in each form field how do I go about making this automated against all form fields on a page? I heard this can be done in OWASP-zap but cannot figure out how to do it. Can someone shed some light on this for me?
With ZAP Fuzzing you can specify any number of locations to fuzz in a request.
However if you want to apply specific attacks and know what results you're looking for you might be better off with writing an active scan rule. We have various examples here: https://github.com/zaproxy/community-scripts/tree/master/active