CCYNARKS LearnLogin
← All tools

OWASP ZAP

Web Proxy / DAST · Beginner

Open-source web proxy and automated scanner for finding web vulnerabilities.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • Manual explore
  • Spidering
  • Passive vs active scan
  • Automation framework

Legitimate use

Frequently used in CI pipelines for automated DAST.

Official docs →

Example commands (lab VMs only)

  • Automated Scan → http://localhost:3000
    Scan your local Juice Shop instance