anchor.diff:  Go:
   
   ....
  -wget https://github.com/zaproxy/zaproxy/releases/download/2.4.2/ZAP_2.4.2_Linux.tar.gz
  -tar -xvf ZAP_2.4.2_Linux.tar.gz
  -cd ZAP_2.4.2/
  +wget https://github.com/zaproxy/zaproxy/releases/download/2.4.3/ZAP_2.4.3_Linux.tar.gz
  +tar -xvf ZAP_2.4.3_Linux.tar.gz
  +
  +cd ZAP_2.4.3/
   ./zap.sh -cmd -quickurl http://10.xx.0.15:8080/MainServlet
   ....
   
  -We run this script externally to the machine being tested, and give it the URL. It then probes the URL and the server, as a form of penetration testing. It will again generate a number of findings. Research them and figure out if there is an easy fix.
  +We run this script externally to the machine being tested, and give it the URL. It then probes the URL and the server, as a form of penetration testing. It will again generate a number of findings. Research them and figure out if there is an easy fix. Share with class on Slack.
   
   NOTE: You will get raw XML dumped to the terminal. You can cut and paste this to an HTML document on your workstation and open it with a browser for an easier view.
   
   Now, try
   
  -`./zap.sh -cmd -quickurl http://10.1.0.12:8081/artifactory`
  -
  -More errors than before... why? Discuss.
  +`./zap.sh -cmd -quickurl http://10.xx.0.12:8081/artifactory`
  +
  +More errors than before... why? Discuss. How would you fix these?
   
   == Fixing one or more vulnerabilities
   
  
positive.code: 
  The `run_test.sh` script creates an HTML vulnerability scan report in the current working directory called `results.html`. An easy way to view this report is to install a text-based web browser:
  
    sudo apt-get install lynx-cur
  
  Then, you can view the report in your terminal window by running the command:
  
  
negative.code: 
  To do this, you need to create a team fork in the main Calavera repository. Clone down to a working directory you have write access to on the main server (either your home dir or an `su`'d publicxx dir), vagrant up the virtual server in question, and work the fix. When you are satisfied, submit a pull request.
  
  
  === Optional ITSM process
  Time and instructor lab preparation permitting:
  