This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Zed Attack Proxy Project"
From OWASP
(Updating prjoect page) (Tag: Visual edit) |
(Continuing to update) (Tag: Visual edit) |
||
| Line 2: | Line 2: | ||
<div style="width:100%;height:90px;border:0,margin:0;overflow: hidden;">[[File: flagship_big.jpg|link=]]</div> | <div style="width:100%;height:90px;border:0,margin:0;overflow: hidden;">[[File: flagship_big.jpg|link=]]</div> | ||
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |- | {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |- | ||
| − | | style="border-right: 1px dotted gray;padding-right:25px;" valign="top" |<blockquote> | + | | style="border-right: 1px dotted gray;padding-right:25px;" valign="top" |<blockquote></blockquote>[[Image:zap128x128.png|right]] |
== The OWASP Zed Attack Proxy (ZAP) == | == The OWASP Zed Attack Proxy (ZAP) == | ||
<div style="font-size:120%;border:none;margin: 0;color:#000"> | <div style="font-size:120%;border:none;margin: 0;color:#000"> | ||
| − | The | + | The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers[[#Justification|*]]. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing. |
| − | + | <blockquote>'''ZAP 2.8.0 is now available! [[Image:ZAP-Download.png | link=https://github.com/zaproxy/zaproxy/wiki/Downloads]]'''</blockquote> | |
{| | {| | ||
|- | |- | ||
| Line 22: | Line 22: | ||
== Features == | == Features == | ||
| − | + | '''Some of ZAP's functionality:''' | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
* [https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsIntercept Man-in-the-middle Proxy] | * [https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsIntercept Man-in-the-middle Proxy] | ||
* [https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsSpider Traditional] and AJAX spiders | * [https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsSpider Traditional] and AJAX spiders | ||
| Line 42: | Line 37: | ||
* [https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsApi Powerful REST based API] | * [https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsApi Powerful REST based API] | ||
* Automatic updating option | * Automatic updating option | ||
| − | * [https://github.com/zaproxy/zap-extensions/wiki Integrated and growing marketplace of add-ons] | + | * [https://github.com/zaproxy/zap-extensions/wiki Integrated and growing marketplace of add-ons]<gallery> |
| + | ZAP-ScreenShotAddAlert.png | ||
| + | ZAP-ScreenShotHelp.png | ||
| + | ZAP-ScreenShotHistoryFilter.png | ||
| + | ZAP-ScreenShotSearchTab.png | ||
| + | </gallery> | ||
| − | ''' | + | '''Why use ZAP?''' |
* [http://www.apache.org/licenses/LICENSE-2.0 Open source] | * [http://www.apache.org/licenses/LICENSE-2.0 Open source] | ||
* Cross platform (it even runs on a [https://github.com/zaproxy/zaproxy/wiki/zappi Raspberry Pi!]) | * Cross platform (it even runs on a [https://github.com/zaproxy/zaproxy/wiki/zappi Raspberry Pi!]) | ||
| Line 55: | Line 55: | ||
* Community based, with involvement actively encouraged | * Community based, with involvement actively encouraged | ||
* Under active development by an international team of volunteers | * Under active development by an international team of volunteers | ||
| + | * ZAP is a fork of the well regarded [http://www.parosproxy.org/ Paros Proxy] | ||
'''Supported Languages''' | '''Supported Languages''' | ||
| Line 80: | Line 81: | ||
You can use [http://crowdin.net/project/owasp-zap Crowdin] to help improve these translations or add new ones right now! | You can use [http://crowdin.net/project/owasp-zap Crowdin] to help improve these translations or add new ones right now! | ||
| − | |||
| − | |||
== Awards & Acknowledgements == | == Awards & Acknowledgements == | ||
| Line 91: | Line 90: | ||
* 2013 [http://www.toolswatch.org/2013/12/2013-top-security-tools-as-voted-by-toolswatch-org-readers/ 1st] | * 2013 [http://www.toolswatch.org/2013/12/2013-top-security-tools-as-voted-by-toolswatch-org-readers/ 1st] | ||
| − | + | *<div style="font-size:120%;border:none;margin: 0;color:#000"> | |
| − | |||
| − | |||
| − | * | ||
| − | |||
| − | |||
| − | |||
| − | |||
<div style="font-size:120%;border:none;margin: 0;color:#000">{{Social Media Links}} | <div style="font-size:120%;border:none;margin: 0;color:#000">{{Social Media Links}} | ||
| Line 186: | Line 178: | ||
If you actively contribute to ZAP then you will be invited to join the project. | If you actively contribute to ZAP then you will be invited to join the project. | ||
| + | |||
| + | * [https://groups.google.com/group/zaproxy-develop Developer Group] - ask questions about the ZAP internals | ||
| + | * [https://crowdin.com/project/owasp-zap Crowdin (GUI)] - help translate the ZAP GUI | ||
| + | * [https://crowdin.com/project/owasp-zap-help Crowdin (User Guide)] - help translate the ZAP User Guide | ||
| + | * [https://www.openhub.net/p/zaproxy OpenHub] - FOSS analytics | ||
| + | * [https://www.bountysource.com/teams/zap/issues BountySource] - Vote on ZAP issues (you can also donate money here, but 10% taken out | ||
=== Localization === | === Localization === | ||
Revision as of 23:45, 21 June 2019
 The OWASP Zed Attack Proxy (ZAP)The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers*. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing. ZAP 2.8.0 is now available! Getting Started
FeaturesSome of ZAP's functionality:
Why use ZAP?
Supported Languages
You can use Crowdin to help improve these translations or add new ones right now! Awards & AcknowledgementsToolsWatch Annual Best Free/Open Source Security Tool Survey: |
Donate to ZAPDownloadSource & DocsSourceDocsChange LogSupport & CollaborationFeedback Mailing List Project LeaderProject LeaderCo-Project Leaders |
