Taking it to a new level with Burp Suite

OWASP ZAP is a great open source introduction to proxy-based scanning and fuzzing. That being said, most testers have already found that additional tools are necessary to carry out a complete test, for reasons like having the ability to cover more input vectors, cover additional content types like Flash and Webservice vulnerabilities, and automate more report and audit processes. More can be learned about the many toolsets at SecToolMarket.com (http://www.sectoolmarket.com/price-and-feature-comparison-of-web-application-scanners-unified-list.html ). The effort to coordinate with outside toolsets to complete anything more than a small penetration test is more trouble that is worth. A large number of newer proxy-based Dynamic Application Security Testing (DAST) frameworks have sprung up to answer the call. These solutions range from free...