OWASP ZAP2 - Revision history

Psiinon at 17:19, 19 June 2012

2012-06-19T17:19:48Z

Psiinon: Blanked the page

2012-06-18T19:17:57Z

Blanked the page

Show changes

Psiinon at 19:16, 18 June 2012

2012-06-18T19:16:22Z

Psiinon at 19:04, 18 June 2012

2012-06-18T19:04:22Z

Psiinon at 18:13, 18 June 2012

2012-06-18T18:13:55Z

Psiinon: Created page with "{{Social Media Links}} = Main = Note that this is a test page for trying out a new homepage for ZAP :) === What is the Zed Attack Proxy (ZAP)? === === [[#Who | Wh..."

2012-06-18T16:58:56Z

Created page with "{{Social Media Links}} = Main = Note that this is a test page for trying out a new homepage for ZAP :) === What is the Zed Attack Proxy (ZAP)? === === [[#Who | Wh..."

New page

{{Social Media Links}}
= Main =
Note that this is a test page for trying out a new homepage for ZAP :)

=== [[#What | What is the Zed Attack Proxy (ZAP)?]] ===
=== [[#Who | Who is ZAP for?]] ===
=== Why is ZAP different? ===
=== What features does it have? ===
=== Where can I get it? ===
=== Where can I find more info? ===

= What =

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.

= Who =

It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.

[[Image:ZAP-Download.png |
link=http://code.google.com/p/zaproxy/downloads/list]]

'''The current version of ZAP is [http://code.google.com/p/zaproxy/wiki/HelpReleases1_4_0 1.4.0].'''

===ZAP is ideal for [http://code.google.com/p/zaproxy/wiki/SecRegTests Security Regression Tests] - see this video on Youtube===

[[Image:ZAP-SecurityTestingDevQa.jpg | link=http://www.youtube.com/watch?v=ZWSLFHpg1So]]

===OWASP ZAP is also the [http://holisticinfosec.blogspot.com/2012/02/2011-toolsmith-tool-of-year-owasp-zap.html Toolsmith Tool of the Year for 2011!]===

There are *3* ZAP related [http://code.google.com/p/zaproxy/wiki/GSoC2012 Google Summer of Code 2012] projects!

Please also see the *new* [http://code.google.com/p/zaproxy/wiki/Supporters Sponsors and Supporters] page.

Want a very quick introduction? See the [http://www.owasp.org/images/e/e3/OWASP_ZAP_Flyer.pdf project pamphlet].

For a slightly longer introduction see the [http://www.owasp.org/images/c/c8/Conference_Style_slides_for_ZAP.ppt project presentation].

For video introductions to ZAP see the links on the [https://code.google.com/p/zaproxy/wiki/Videos wiki videos page].

'''For more details about ZAP, including the full user guide, see the [https://code.google.com/p/zaproxy/wiki/Introduction wiki].'''

<paypal>Zed Attack Proxy</paypal>

'''Some of ZAP's features:'''

* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsIntercept Intercepting Proxy]
* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsAscan Automated scanner]
* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsPscan Passive scanner]
* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsBruteforce Brute Force scanner]
* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsSpider Spider]
* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsFuzz Fuzzer]
* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsPortscan Port scanner]
* [http://code.google.com/p/zaproxy/wiki/HelpUiDialogsOptionsDynsslcert Dynamic SSL certificates]
* [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsApi API]
* [http://code.google.com/p/zaproxy/wiki/HelpUiDialogsBeanshell Beanshell integration]

'''Some of ZAP's characteristics:'''

* Easy to install (just requires java 1.6)
* Ease of use a priority
* [http://code.google.com/p/zaproxy/wiki/HelpIntro Comprehensive help pages]
* Fully internationalized
* Under active development
* [http://www.apache.org/licenses/LICENSE-2.0 Open source]
* Free (no paid for 'Pro' version)
* Cross platform
* Involvement actively encouraged

'''It supports the following languages:'''

* English
* Brazilian Portuguese
* Chinese
* Danish
* French
* German
* Greek
* Indonesian
* Japanese
* Persian
* Polish
* Spanish

ZAP is a fork of the well regarded [http://www.parosproxy.org/ Paros Proxy].

= Roadmap =

Details of previous releases can be found [http://code.google.com/p/zaproxy/wiki/HelpReleasesReleases here]

==Release 1.4.0==
Version [http://code.google.com/p/zaproxy/wiki/HelpReleases1_4_0 1_4_0] has just been released.

Compared to previous releases, the 1.4.0 release adds the following main features:
* Support for ZAP-Extensions (Plugable extensions)
* Syntax highlighting in the Response Panel
* fuzzdb integration
* Parameter analysis
* Enhanced XSS scanner
* Tons of bug-fixes and minor improvements

==Future Releases==

Future releases are likely to include:
* Fuzzing analysis
* API extensions
* Enhancements and fixes logged on the [https://code.google.com/p/zaproxy/issues/list issues page]

= Get Involved =

Involvement in the development of ZAP is actively encouraged!

You do not have to be a security expert in order to contribute.

Some of the ways you can help:

==Feature Requests==

Please raise new feature requests as enhancement requests here: http://code.google.com/p/zaproxy/issues/list

If there are existing requests you are also interested in then please 'star' them - that way we can see which features people are most interested in and can prioritize them accordingly.

==Feedback==

Please use the [http://groups.google.com/group/zaproxy-develop zaproxy-develop Google Group] for feedback:
* What do like?
* What don't you like?
* What features could be made easier to use?
* How could the help pages be improved?

==Log issues==

Have you had a problem using ZAP?

If so and its not already been logged then please [http://code.google.com/p/zaproxy/issues/list report it]

==Localization==

Are you fluent in another language? Can you help translate ZAP into that language?

If so then please get in touch.

==Development==

If you fancy having a go at adding functionality to ZAP then please get in touch via the [http://groups.google.com/group/zaproxy-develop zaproxy-develop Google Group].

Again, you do not have to be a security expert to contribute code - working on ZAP could be great way to learn more about web application security!

If you actively contribute to ZAP then you will be invited to join the project.



= Project About =
{{:Projects/OWASP Zed Attack Proxy Project | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Zed Attack Proxy Project]] [[Category:OWASP_Tool]] [[Category:OWASP_Release_Quality_Tool|OWASP Release Quality Tool]] [[Category:OWASP_Download]]

← Older revision	Revision as of 17:19, 19 June 2012
Line 1:	Line 1:
	+	<div style="font-size:7pt;">

	+	<div align="center"> [[Image:468x60_doorhandle_v1.gif\|http://www.acunetix.com/vulnerability-scanner/download.htm‎]][[Image:Bh12usa_468x60.png‎\|www.blackhat.com]]<owaspbanner/><br>
	+
	+	<b>Disclaimer: Banner ads are not endorsements and reflect the messages of the advertiser only. \| [https://www.owasp.org/index.php/Advertising More Information]</b></div></div>
	+
	+
	+
	+	REPLACE WITH
	+
	+	<div style="font-size:7pt;">
	+
	+	A<owaspbanner>B<br>
	+
	+	<b>Disclaimer: Banner ads are not endorsements and reflect the messages of the advertiser only. \| [https://www.owasp.org/index.php/Advertising More Information]</b></div></div>

@@ Line 31: / Line 31: @@
 </div>
 = Sponsors =
 <div style="font-size:142%;border:none;margin: 0;color:#000">
@@ Line 48: / Line 61: @@
 * [http://secureideas.net SecureIdeas]
 * [http://utilisec.com UtiliSec]
 </div>
 = Features =

@@ Line 1: / Line 1: @@
 {{Social Media Links}}
 = Main =
-<div style="font-size:162%;border:none;margin: 0;color:#000">
+<div style="font-size:142%;border:none;margin: 0;color:#000">
 '''Please note that this is a temporary page for testing out a new ZAP homepage'''
 [[Image:ZAP-ScreenShotAddAlert.png|thumb|300px|right|ZAP Add Alert Screen Shot]]
@@ Line 19: / Line 19: @@
 [[Image:ZAP-SecurityTestingDevQa.jpg | link=http://www.youtube.com/watch?v=ZWSLFHpg1So]]
 Want a very quick introduction? See the [http://www.owasp.org/images/e/e3/OWASP_ZAP_Flyer.pdf project pamphlet].
 For a slightly longer introduction see the [http://www.owasp.org/images/c/c8/Conference_Style_slides_for_ZAP.ppt project presentation].
 For more details about ZAP, including the full user guide, see the [https://code.google.com/p/zaproxy/wiki/Introduction wiki].
@@ Line 31: / Line 31: @@
 </div>
-= News =
+= Sponsors =
-<div style="font-size:162%;border:none;margin: 0;color:#000">
+<div style="font-size:142%;border:none;margin: 0;color:#000">
-There are '''3''' ZAP related [http://code.google.com/p/zaproxy/wiki/GSoC2012 Google Summer of Code 2012] projects!
+ZAP is developed by a worldwide [http://code.google.com/p/zaproxy/people/list team] of volunteers.
-To find out how these are progressing please see their [http://code.google.com/p/zaproxy/wiki/GSoC2012 wiki pages].
+But we have also been helped by many organizations, either either financially or by encouraging their employees to work on ZAP:
-Please also see the '''new''' [http://code.google.com/p/zaproxy/wiki/Supporters Sponsors and Supporters] page.
+* [http://www.owasp.org OWASP]
-OWASP ZAP is also the [http://holisticinfosec.blogspot.com/2012/02/2011-toolsmith-tool-of-year-owasp-zap.html Toolsmith Tool of the Year for 2011!]
+* There are '''3''' ZAP related [http://code.google.com/p/zaproxy/wiki/GSoC2012 Google Summer of Code 2012] projects. To find out how these are progressing please see their [http://code.google.com/p/zaproxy/wiki/GSoC2012 wiki pages].
 </div>
 = Features =
-<div style="font-size:162%;border:none;margin: 0;color:#000">
+<div style="font-size:142%;border:none;margin: 0;color:#000">
-Some of ZAP's features:
+'''Some of ZAP's features:'''
 * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsIntercept Intercepting Proxy]
@@ Line 60: / Line 74: @@
 </div>
 = Characteristics =
-<div style="font-size:162%;border:none;margin: 0;color:#000">
+<div style="font-size:142%;border:none;margin: 0;color:#000">
+'''Some of ZAP's characteristics:'''
 * Easy to install (just requires java 1.6)
@@ Line 78: / Line 91: @@
 </div>
 = Languages =
-<div style="font-size:162%;border:none;margin: 0;color:#000">
+<div style="font-size:142%;border:none;margin: 0;color:#000">
 '''ZAP supports the following languages:'''
@@ Line 97: / Line 110: @@
 </div>
 = Roadmap =
-<div style="font-size:162%;border:none;margin: 0;color:#000">
+<div style="font-size:142%;border:none;margin: 0;color:#000">
 Details of previous releases can be found [http://code.google.com/p/zaproxy/wiki/HelpReleasesReleases here]
@@ Line 121: / Line 134: @@
 </div>
 = Get Involved =
-<div style="font-size:162%;border:none;margin: 0;color:#000">
+<div style="font-size:142%;border:none;margin: 0;color:#000">
 Involvement in the development of ZAP is actively encouraged!