OWASP ZAP HUD WTF?
summary
OWASP ZAP adds a browser Heads Up Display that proxies and scans live sites, runs a spider and active scanner, and lets the user intercept and modify requests in real time. Demo site “Bob’s Discount Diamonds” returns concrete findings: automated scans reveal XSS and SQL injection vulnerabilities, hidden form fields and information leakage, and ZAP generates a full report with remediation hints. ZAP is free, cross‑platform, runs via Docker/Homebrew/Choco, and includes a HUD tutorial plus short training videos.
AI-written summary · about
chapters (4)
related talks
27mHacking with a Heads Up Display
29mZAP Heads Up Display
58mWhiz, Bang, ZAP! An introduction to OWASP's Zed Attack Proxy
45mSecurity Testing with OWASP ZAP in CI/CD
47mOWASP ZAP: More Advanced Features
36mLet's take baby steps to security testing
59mZAP Project
44mHack Yourself: Intro to pentesting with ZAP