Automate two-tier DAST scans with Nuclei and ZAP for web applications.
npx skills add https://github.com/pvillega/claude-templates --skill dast-scan
Please help me install this Agent Skill. Skill: dast-scan Source: https://github.com/pvillega/claude-templates/tree/main/plugins/ct/skills/dast-scan Command: npx skills add https://github.com/pvillega/claude-templates --skill dast-scan
Dynamic Application Security Testing (DAST) using two-tier scanning to detect vulnerabilities in running web apps and APIs. Nuclei provides fast template-based checks, while ZAP performs deep, active scanning via Docker, enabling comprehensive security verification.
Scan your running application with the two-tier DAST to reveal vulnerabilities.
High-intent search queries and answers about installing and using this skill.
DAST scanning automates dynamic security testing of running web apps and APIs by orchestrating two-tier scans. Nuclei provides fast template-based checks, while ZAP performs deep, active analysis via Docker, enabling comprehensive vulnerability discovery in CI pipelines.
Nuclei performs fast template-based vulnerability checks, while ZAP performs deep, active analysis via Docker. Combining both provides a two-tier DAST approach that balances quick vulnerability discovery with thorough security verification across web apps and APIs.
Yes, you need Docker to run ZAP for deep, active analysis. The DAST scan orchestrates two-tier scans where Nuclei handles fast template-based checks and ZAP performs thorough vulnerability verification, with ZAP requiring Docker to execute.
Yes, you can run authenticated DAST scans on staging environments. The scan supports optional authenticated testing alongside its two-tier Nuclei and ZAP approach to perform thorough vulnerability discovery and security verification on running web apps and APIs.
You get structured reporting and triage of findings by orchestrating two-tier DAST scans with Nuclei and ZAP. The process automates dynamic security testing of running web apps and APIs, providing structured reports of discovered vulnerabilities.
Renzo-TognellaAutomate OZAP DAST scans in CI/CD pipelines with GitHub Actions or GitLab CI.
dnvitiGenerate structured remediation tasks from security vulnerability findings with severity classification.
phatblatAutomate web application security assessments with reconnaissance, threat modeling, and vulnerability analysis.
rajyeole6Conduct authorized penetration testing across network, web, and cloud infrastructure.
