Home > Software > Webdevelopment > Testing > Zed Attack Proxy (ZAP)
Details
- Package ID
- zap
- Version
- 2.17.0
- Downloads
- 139554
- Website
- https://www.zaproxy.org/
Summary
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
Description
Zed Attack Proxy (ZAP)
The Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. Its also a great tool for experienced pentesters to use for manual security testing.
Features
Some of ZAP’s functionality:
- Intercepting Proxy
- Traditional and AJAX spiders
- Automated scanner
- Passive scanner
- Forced browsing
- Fuzzer
- Dynamic SSL certificates
- Smartcard and Client Digital Certificates support
- Web sockets support
- Support for a wide range of scripting languages
- Plug-n-Hack support
- Authentication and session support
- Powerful REST based API
- Automatic updating option
- Integrated and growing marketplace of add-ons
Package Note
ZAP 2.16 or higher requires Java 17 or higher and that the JAVA_HOME environment variable is set. You can install a Chocolatey Java Package or Java from Oracle. One suggestion is the Temurin17jre package. Ensure you install it with the FeatureJavaHome parameter set.
Maintainer’s Note
I produce and maintain Chocolatey packages in my spare time, for free. If you use my packages, and appreciate the time and effort I put into making and maintaining them, please consider making a small donation. Thank-you!