The ZAP core project

ZAP Add-ons

Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...

Zed Attack Proxy Scripts for finding CVEs and Secrets.

⚡️ Multiple target ZAP Scanning

A Docker image for bits of Kali Linux

OWASP ZAP addon for finding vulnerabilities in JWT Implementations

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

OWASP ZAP add-on for finding vulnerabilities in File Upload functionality.

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.

ZAP add-on containing the web-backdoors and attack files from FuzzDB

OWASP ZAP add-on to help find reflected parameter vulnerabilities

Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs

A Raku module for the OWASP ZAP API.

A Ruby Implementation and Library for Easy Utilization of ZAP API

This repository contains scripts for Zaproxy

Demo repository for the DevSecCon 22 Lightning Talk.

A Gradle plugin to (help) build ZAP add-ons

Fix host header error in zaproxy