Posted Tuesday January 23, 2024
403 Words
We are introducing a Contributor License Agreement to cover all ZAP contributions.
Posted Friday August 25, 2023
120 Words
News about a community area to contribute ZAP usage tips and tricks.
Posted Tuesday September 13, 2022
658 Words
An overview of ZAP Extender scripts with examples. Use ZAP as a web server, subscribe to internal ZAP events, and more!
Posted Wednesday April 30, 2014
1031 Words
Welcome to a series of blog posts aimed at helping you “hack the ZAP source code”.
The previous post in this series is: Hacking ZAP #3 - Passive scan rules
Active scan rules are another relatively simple way to enhance ZAP. Active scan rules attack the server, and therefore are only run when explicitly invoked by the user.
Posted Thursday April 3, 2014
1253 Words
Welcome to a series of blog posts aimed at helping you “hack the ZAP source code”.
The previous post in this series is: Hacking ZAP #2 - Getting Started
One of the easiest ways to enhance ZAP is to write new passive scan rules.
Passive scan rules are used to warn the user of potential vulnerabilities that can be detected passively - they are not allowed to make any new requests or manipulate the requests or responses in any way.
Posted Thursday March 20, 2014
713 Words
Welcome to a series of blog posts aimed at helping you “hack the ZAP source code”.
The previous post in this series is: Hacking ZAP #1 - Why should you?
In order to change the ZAP source code you will need to set up a development environment.
Requirements The following software is used/required to obtain and build ZAP (core) and the add-ons:
Posted Monday March 10, 2014
956 Words
Welcome to a series of blog posts aimed at helping you “hack the ZAP source code”.
ZAP is an open source tool for finding vulnerabilities in web applications. It is the most active OWASP project and is very community focused - it probably has more contributors than any other web application security tool.
