Flagship Projects: ZAP
summary
ZAP 2.11.0 delivers a YAML-driven automation framework with GUI editing and runnable tests (demo spider test expects 100 urls and actually finds 126), a new template-based report add-on replacing the old Paris reports, an out of band testing (OAST) add-on that integrates with public callback services, and a retest add-on that generates focused automation plans to quickly re-verify alerts. Docker images move to monthly dated tags, internationalization is re-enabled, and container detection plus several core fixes are included.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:49About ZAP
- 2:46Automation Framework
- 6:00ZAP Demo
- 11:02Report Generation
- 12:14Report Example
- 15:09Out of Band Testing
- 18:29Retest
- 21:22Docker Changes
- 23:21Core Changes
- 25:49Timeline
- 26:28Wrap Up
related talks
59mZAP Project
47mOWASP ZAP: More Advanced Features
36mLet's take baby steps to security testing
45mSecurity Testing with OWASP ZAP in CI/CD
41mHow Scripting In ZAP Can Bridge The Gap Between Dev Teams And Security
01h 01mOpen Source Pentesting and Security Analysis Tools: the DevOps way… #slideless
40mEvolution of AppSec: Perspectives from a Decade of Building OWASP ZAP
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way