The ZAP by Checkmarx Core project

secureCodeBox (SCB) - continuous secure delivery out of the box

ZAP Add-ons

A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!

OWASP VulnerableApp Project: Break it. Scan it. Reproduce it. Benchmark against it. Improve it.

Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...

Zed Attack Proxy Scripts for finding CVEs and Secrets.

⚡️ Multiple target ZAP Scanning

The source of ZAP website

OWASP ZAP addon for finding vulnerabilities in JWT Implementations

A Docker image for bits of Kali Linux

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

OWASP ZAP add-on for finding vulnerabilities in File Upload functionality.

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

ZAP add-on containing the web-backdoors and attack files from FuzzDB

a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.

OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently

Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs

This project presents a powerful Web Application Firewall (WAF) designed to protects web applications from malicious activities. By leveraging machine learning algorithms, the WAF efficiently filters and detects potentially harmful requests before they reach the website, ensuring robust security.