OWASP ZAP

Description

OWASP Zed Attack Proxy (ZAP) is the world's most widely used free web application security scanner, maintained by the OWASP Foundation. It provides automated scanners, passive scanning, intercepting proxy, fuzzer, and API testing capabilities suitable for both beginners and experienced testers.

Use Cases

• Automated scanning of web applications for common vulnerabilities
• Integrate security testing into CI/CD pipelines
• Perform authenticated scanning and API security testing

Attack Phases

MITRE ATT&CK Techniques (2)