skills.rest
seb1n
seb1nCOMMUNITY
Explore all skills by this author →
GitHub

dynamic-application-security-testing

Probe live web applications and APIs for vulnerabilities using OWASP ZAP and Nuclei.

147|32|Updated Feb 11, 2026
Search Tags:#security testing#api security#web application security#vulnerability scanning#nuclei#dast#owasp zap
One-click install
npx skills add https://github.com/seb1n/awesome-ai-agent-skills --skill dynamic-application-security-testing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dynamic-application-security-testing
Source: https://github.com/seb1n/awesome-ai-agent-skills/tree/main/security/dynamic-application-security-testing
Command: npx skills add https://github.com/seb1n/awesome-ai-agent-skills --skill dynamic-application-security-testing

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of finding security vulnerabilities in live web applications and APIs, helping to protect them from attacks.

Core Features & Use Cases

  • Dynamic Security Testing: Actively probes running applications for common vulnerabilities like SQL injection and XSS.
  • Authenticated Scanning: Handles applications that require login credentials.
  • Vulnerability Reporting: Generates detailed reports with remediation advice.
  • Use Case: Secure your staging environment by running a DAST scan to identify and fix critical vulnerabilities before they are exposed to the public.

Quick Start

Run a DAST scan against the staging application at https://staging.example.com using OWASP ZAP and provide the login credentials.

Frequently Asked Questions about dynamic-application-security-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a DAST scan against a live web application?▼

Dynamic application security testing scans live web applications by actively probing for vulnerabilities. You can initiate a scan against a running target URL using supported tools like OWASP ZAP or Nuclei.

Can I perform authenticated vulnerability scanning on applications that require login?▼

Yes, authenticated vulnerability scanning is fully supported. You can provide login credentials to handle applications requiring form-based or token-based authentication before probing for vulnerabilities.

Does this tool detect API security vulnerabilities and common web flaws like SQL injection?▼

Yes, it discovers API security vulnerabilities and common web application flaws like SQL injection and XSS through active fuzzing and dynamic probing of running endpoints.

What is the best way to generate vulnerability remediation reports after scanning?▼

Vulnerability remediation reports are generated automatically after scanning. The tool outputs detailed reports in multiple formats, providing specific remediation advice for discovered vulnerabilities.

When should I use OWASP ZAP versus Nuclei for web application security testing?▼

Both OWASP ZAP and Nuclei are supported for web application security testing. OWASP ZAP excels at active probing for common flaws, while Nuclei is effective for targeted fuzzing across running applications.

Related Skills

Explore More Software Engineering Skills→
h4vzzh4vzz
33

dynamic-application-security-testing

Probe running web apps and APIs for runtime vulnerabilities using OWASP ZAP, Burp Suite, or Nuclei.

Community
Advanced
zapabobzapabob
2

sec-audit

Scan dependencies and custom code for security vulnerabilities.

Community
Advanced
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced
api7api7
1

a6-recipe-health-check

Configure active and passive upstream health checks for APISIX via the a6 CLI.

Official
Intermediate