Introducing OWASP ZAP as an automated security testing tool
OWASP Zed Attack Proxy (ZAP) is a web application scanner, a flagship project developed and maintained by the OWASP foundation. This tool provides a wide range of features for penetration testing and security analysis and claims to be the world’s most used tool for web application vulnerability testing. ZAP is an open-source project available for Windows, macOS, and Linux operating systems. You can get the last version from https://www.zaproxy.org/download/.
Figure 9.18: OWASP ZAP installers
If you are working on a Linux-based operating system, you could download the following file, https://github.com/zaproxy/zaproxy/releases/download/v2.12.0/ZAP_2.12.0_Linux.tar.gz, and unzip the tar.gz
file in your computer. When you unzip it, you’ll get the following file structure:
$ ls -l
drwxr-xr-x 2 linux linux 4096 2 de gen. 1970 db
-rw-r--r-- 1 linux linux 10488 26 de gen. 20:39 hs_err_pid436060...