The ZAP by Checkmarx Core project

secureCodeBox (SCB) - continuous secure delivery out of the box

ZAP Add-ons

A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...

Zed Attack Proxy Scripts for finding CVEs and Secrets.

⚡️ Multiple target ZAP Scanning

The source of ZAP website

OWASP ZAP addon for finding vulnerabilities in JWT Implementations

A Docker image for bits of Kali Linux

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

OWASP ZAP add-on for finding vulnerabilities in File Upload functionality.

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

ZAP add-on containing the web-backdoors and attack files from FuzzDB

a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.

OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently

Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs

A Raku module for the OWASP ZAP API.

This project presents a powerful Web Application Firewall (WAF) designed to protects web applications from malicious activities. By leveraging machine learning algorithms, the WAF efficiently filters and detects potentially harmful requests before they reach the website, ensuring robust security.

A Ruby Implementation and Library for Easy Utilization of ZAP API

Setup Android Emulator (Android Studio/Genymotion) with Web Application Security Testing Tools (burp/owasp zap/Fiddler Classic)

A Gradle plugin to (help) build ZAP add-ons

A web app launched with Docker that runs the ZAP security scanner on a user-inputted URL

This repository contains scripts for Zaproxy

Demo repository for the DevSecCon 22 Lightning Talk.

An addon to integrate Project Foxhound with the Zed Attack Proxy (ZAP), enabling precision detection of client-side injection vulnerabilities during dynamic testing.

Fix host header error in zaproxy

ZAP is a Python script for generating ZAP results to file

ZAP implementation for crystal