Practical Security for developers, using OWASP ZAP

" summary

Introduces the OWASP Zed Attack Proxy (ZAP) as a free, open-source, cross-platform penetration testing tool for finding web application vulnerabilities. Covers using ZAP interactively and via its REST API for automated inclusion in continuous integration, demonstrates finding vulnerabilities manually and in automated builds, and outlines advanced ZAP features for more complex testing.

AI-written summary · about

" related talks

• 35mAutomated Security TestingAlan Parkinson · SeleniumConf 2012 London
• 45mSecurity Testing with OWASP ZAP in CI/CDSimon Bennetts · Codemotion Amsterdam 2017
• 58mWhiz, Bang, ZAP! An introduction to OWASP's Zed Attack ProxyBen Walther · AppSec California 2014
• 12mOWASP ZAP HUD WTF?Robin Minto · NDC London 2020
• 45mOWASP for DevelopersMatteo Meucci · Codemotion Rome 2016
• 36mLet's take baby steps to security testingChristina Thalayasingam · SeleniumConf London 2019
• 40mEvolution of AppSec: Perspectives from a Decade of Building OWASP ZAPSimon Bennetts · RSAC 2021
• 47mOWASP ZAP: More Advanced FeaturesSimon Bennetts · OWASP AppSec Research (AppSecEU) 2015