|
|
| (One intermediate revision by the same user not shown) |
| Line 1: |
Line 1: |
| − | {{Social Media Links}}
| + | <div style="font-size:7pt;"> |
| − | = Main =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000"> | |
| − | '''Please note that this is a temporary page for testing out a new ZAP homepage'''
| |
| − | [[Image:ZAP-ScreenShotAddAlert.png|thumb|300px|right|ZAP Add Alert Screen Shot]]
| |
| − | [[Image:ZAP-ScreenShotHelp.png|thumb|300px|right|ZAP Help Screen Shot]]
| |
| − | [[Image:ZAP-ScreenShotHistoryFilter.png|thumb|300px|right|ZAP History Filter Screen Shot]]
| |
| − | [[Image:ZAP-ScreenShotSearchTab.png|thumb|300px|right|ZAP Search Tab Screen Shot]]
| |
| − | The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
| |
| | | | |
| − | It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.
| + | <div align="center"> [[Image:468x60_doorhandle_v1.gif|http://www.acunetix.com/vulnerability-scanner/download.htm]][[Image:Bh12usa_468x60.png|www.blackhat.com]]<owaspbanner/><br> |
| | | | |
| − | ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
| + | <b>Disclaimer: Banner ads are not endorsements and reflect the messages of the advertiser only. | [https://www.owasp.org/index.php/Advertising More Information]</b></div></div> |
| | | | |
| − | [[Image:ZAP-Download.png | link=http://code.google.com/p/zaproxy/downloads/list]]
| + | |
| − | The current version of ZAP is [http://code.google.com/p/zaproxy/wiki/HelpReleases1_4_0 1.4.0].
| |
| | | | |
| − | ZAP is ideal for [http://code.google.com/p/zaproxy/wiki/SecRegTests Security Regression Tests] - see this video on Youtube
| + | REPLACE WITH |
| | | | |
| − | [[Image:ZAP-SecurityTestingDevQa.jpg | link=http://www.youtube.com/watch?v=ZWSLFHpg1So]]
| + | <div style="font-size:7pt;"> |
| | | | |
| − | For more videos see the links on the [https://code.google.com/p/zaproxy/wiki/Videos wiki videos page].
| + | A<owaspbanner>B<br> |
| | | | |
| − | Want a very quick introduction? See the [http://www.owasp.org/images/e/e3/OWASP_ZAP_Flyer.pdf project pamphlet].
| + | <b>Disclaimer: Banner ads are not endorsements and reflect the messages of the advertiser only. | [https://www.owasp.org/index.php/Advertising More Information]</b></div></div> |
| − | | |
| − | For a slightly longer introduction see the [http://www.owasp.org/images/c/c8/Conference_Style_slides_for_ZAP.ppt project presentation].
| |
| − | | |
| − | For more details about ZAP, including the full user guide, see the [https://code.google.com/p/zaproxy/wiki/Introduction wiki].
| |
| − | | |
| − | <paypal>Zed Attack Proxy</paypal>
| |
| − | </div> | |
| − | | |
| − | = News =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000">
| |
| − | '''Latest News:'''
| |
| − | | |
| − | * 2012/06/13 Using ZAP for Security Regression tests [http://www.youtube.com/watch?v=ZWSLFHpg1So video] published
| |
| − | * 2012/06/04 Version [http://code.google.com/p/zaproxy/wiki/HelpReleases1_4_0 1.4.0] downloaded over 10,000 times
| |
| − | * 2012/05/28 Simon's Introduction to ZAP talk at App Sec USA becomes the most watched OWASP video on [http://vimeo.com/owasp/videos/sort:plays vimeo]
| |
| − | * 2012/04/23 3 ZAP related [http://code.google.com/p/zaproxy/wiki/GSoC2012 Google Summer of Code 2012] projects accepted. To find out how these are progressing please see their [http://code.google.com/p/zaproxy/wiki/GSoC2012 wiki pages].
| |
| − | * 2012/04/08 Version [http://code.google.com/p/zaproxy/wiki/HelpReleases1_4_0 1.4.0] released
| |
| − | * 2012/02/10 Version [http://code.google.com/p/zaproxy/wiki/HelpReleases1_3_4 1.3.4] downloaded over 10,000 times
| |
| − | * 2012/02/01 OWASP ZAP is named the [http://holisticinfosec.blogspot.com/2012/02/2011-toolsmith-tool-of-year-owasp-zap.html Toolsmith Tool of the Year for 2011!]
| |
| − | | |
| − | </div>
| |
| − | = Sponsors =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000">
| |
| − | | |
| − | ZAP is developed by a worldwide [http://code.google.com/p/zaproxy/people/list team] of volunteers.
| |
| − | | |
| − | But we have also been helped by many organizations, either either financially or by encouraging their employees to work on ZAP:
| |
| − | | |
| − | * [http://www.owasp.org OWASP]
| |
| − | * [http://www.mozilla.org Mozilla]
| |
| − | * [http://www.sage.co.uk Sage]
| |
| − | * [http://www.google.com Google]
| |
| − | * [http://www.microsoft.com Microsoft]
| |
| − | * [http://www.hacktics.com/ Hacktics, Ernst & Young]
| |
| − | * [http://www.taddong.com/ Taddong]
| |
| − | * [http://www.denimgroup.com Denim Group]
| |
| − | * [http://secureideas.net SecureIdeas]
| |
| − | * [http://utilisec.com UtiliSec]
| |
| − | </div> | |
| − | = Features =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000">
| |
| − | '''Some of ZAP's features:'''
| |
| − | | |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsIntercept Intercepting Proxy]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsAscan Automated scanner]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsPscan Passive scanner]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsBruteforce Brute Force scanner]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsSpider Spider]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsFuzz Fuzzer]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsPortscan Port scanner]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpUiDialogsOptionsDynsslcert Dynamic SSL certificates]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpStartConceptsApi API]
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpUiDialogsBeanshell Beanshell integration]
| |
| − | | |
| − | </div> | |
| − | = Characteristics =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000">
| |
| − | '''Some of ZAP's characteristics:'''
| |
| − | | |
| − | * Easy to install (just requires java 1.6)
| |
| − | * Ease of use a priority
| |
| − | * [http://code.google.com/p/zaproxy/wiki/HelpIntro Comprehensive help pages]
| |
| − | * Fully internationalized
| |
| − | * Under active development
| |
| − | * [http://www.apache.org/licenses/LICENSE-2.0 Open source]
| |
| − | * Free (no paid for 'Pro' version)
| |
| − | * Cross platform
| |
| − | * Involvement actively encouraged
| |
| − | | |
| − | ZAP is a fork of the well regarded [http://www.parosproxy.org/ Paros Proxy].
| |
| − | | |
| − | </div>
| |
| − | = Languages =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000">
| |
| − | | |
| − | '''ZAP supports the following languages:'''
| |
| − | | |
| − | * English
| |
| − | * Brazilian Portuguese
| |
| − | * Chinese
| |
| − | * Danish
| |
| − | * French
| |
| − | * German
| |
| − | * Greek
| |
| − | * Indonesian
| |
| − | * Japanese
| |
| − | * Persian
| |
| − | * Polish
| |
| − | * Spanish
| |
| − | | |
| − | </div> | |
| − | = Roadmap =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000">
| |
| − | | |
| − | Details of previous releases can be found [http://code.google.com/p/zaproxy/wiki/HelpReleasesReleases here]
| |
| − | | |
| − | ==Release 1.4.0==
| |
| − | Version [http://code.google.com/p/zaproxy/wiki/HelpReleases1_4_0 1_4_0] has just been released.
| |
| − | | |
| − | Compared to previous releases, the 1.4.0 release adds the following main features:
| |
| − | * Support for ZAP-Extensions (Plugable extensions)
| |
| − | * Syntax highlighting in the Response Panel
| |
| − | * fuzzdb integration
| |
| − | * Parameter analysis
| |
| − | * Enhanced XSS scanner
| |
| − | * Tons of bug-fixes and minor improvements
| |
| − | | |
| − | ==Future Releases==
| |
| − | | |
| − | Future releases are likely to include:
| |
| − | * Fuzzing analysis
| |
| − | * API extensions
| |
| − | * Enhancements and fixes logged on the [https://code.google.com/p/zaproxy/issues/list issues page]
| |
| − | | |
| − | </div>
| |
| − | = Get Involved =
| |
| − | <div style="font-size:142%;border:none;margin: 0;color:#000">
| |
| − | | |
| − | Involvement in the development of ZAP is actively encouraged!
| |
| − | | |
| − | You do not have to be a security expert in order to contribute.
| |
| − | | |
| − | Some of the ways you can help:
| |
| − | | |
| − | ==Feature Requests==
| |
| − | | |
| − | Please raise new feature requests as enhancement requests here: http://code.google.com/p/zaproxy/issues/list
| |
| − | | |
| − | If there are existing requests you are also interested in then please 'star' them - that way we can see which features people are most interested in and can prioritize them accordingly.
| |
| − | | |
| − | ==Feedback==
| |
| − | | |
| − | Please use the [http://groups.google.com/group/zaproxy-develop zaproxy-develop Google Group] for feedback:
| |
| − | * What do like?
| |
| − | * What don't you like?
| |
| − | * What features could be made easier to use?
| |
| − | * How could the help pages be improved?
| |
| − | | |
| − | ==Log issues==
| |
| − | | |
| − | Have you had a problem using ZAP?
| |
| − | | |
| − | If so and its not already been logged then please [http://code.google.com/p/zaproxy/issues/list report it]
| |
| − | | |
| − | ==Localization==
| |
| − | | |
| − | Are you fluent in another language? Can you help translate ZAP into that language?
| |
| − | | |
| − | If so then please get in touch.
| |
| − | | |
| − | ==Development==
| |
| − | | |
| − | If you fancy having a go at adding functionality to ZAP then please get in touch via the [http://groups.google.com/group/zaproxy-develop zaproxy-develop Google Group].
| |
| − | | |
| − | Again, you do not have to be a security expert to contribute code - working on ZAP could be great way to learn more about web application security!
| |
| − | | |
| − | If you actively contribute to ZAP then you will be invited to join the project.
| |
| − | | |
| − | | |
| − | <!---- = Project About =
| |
| − | {{:GPC_Project_Details/OWASP_ZAP | OWASP Project Identification Tab}} --->
| |
| − | </div>
| |
| − | = Project About =
| |
| − | {{:Projects/OWASP Zed Attack Proxy Project | Project About}}
| |
| − | | |
| − | | |
| − | __NOTOC__ <headertabs />
| |
| − | | |
| − | [[Category:OWASP_Project|Zed Attack Proxy Project]] [[Category:OWASP_Tool]] [[Category:OWASP_Release_Quality_Tool|OWASP Release Quality Tool]] [[Category:OWASP_Download]]
| |
<owaspbanner/>
