OWASP ZAP
Web Security 5 commands

OWASP ZAP

Free security tool for finding vulnerabilities in web applications. One of the most active OWASP projects.

webscannerproxyvulnerability
Official docs

Installation

# Download from zaproxy.org
# Docker: docker run -u zap -p 8080:8080 ghcr.io/zaproxy/zaproxy
sudo snap install zaproxy --classic

Commands & usage

5 entries
  • Quick Start > Automated Scan

    Run automated scan

  • Manual Explore

    Browse site through ZAP proxy

  • Active Scan

    Actively test for vulnerabilities

  • Spider

    Crawl application

  • Fuzzer

    Fuzz requests with payloads

Use cases

Web vulnerability scanningAPI security testingDAST scanningCI/CD integrationSecurity regression testing