Tools / ZAP

Tool · short entry

ZAP

An open-source web testing tool with an intercepting proxy, passive analysis and active scanning.

Before you use it

Active scanning sends test requests that can affect the target. Use your own isolated lab, or targets and actions covered by explicit permission.

Taught in

This is a short entry. The lessons above are where the idea is taught with evidence and checks.