The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to an experienced pen testers toolbox.
You can show your support for ZAP on Openhub:
Interested in a ZAP talk or training event? See the talks page. Not one near you? Contact a ZAP Evangelist to arrange one!
Want a very quick introduction to ZAP? See the project pamphlet.
For a slightly longer introduction see the project presentation.
For video introductions to ZAP see the links on the wiki videos page.
We recently asked our users for feedback about ZAP, you can see their responses (which are separate for each languages) here: English,French, Spanish, Arabic
ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
Some of ZAP's functionality:
Some of ZAP's features:
It supports the following languages:
|   |
No comments:
Post a Comment