Scan web applications for security vulnerabilities using active and passive techniques.
npx skills add https://github.com/zzw4257/security-skills --skill owasp-zap
Please help me install this Agent Skill. Skill: OWASP ZAP Source: https://github.com/zzw4257/security-skills/tree/main/skills/zap Command: npx skills add https://github.com/zzw4257/security-skills --skill owasp-zap
This Skill addresses the need for automated web application security scanning to identify vulnerabilities before they can be exploited.
Run a basic OWASP ZAP scan against the target URL 'http://example.com'.
High-intent search queries and answers about installing and using this skill.
Web vulnerability scanning identifies security flaws in web applications before exploitation. This Skill integrates into a CI/CD pipeline to automatically scan newly deployed web apps for common security flaws like XSS and SQL injection.
Dynamic application security testing (DAST) uses passive techniques to observe traffic without sending payloads, and active techniques to inject payloads and probe web applications for vulnerabilities. This Skill performs both scanning methods.
OWASP ZAP can act as a proxy to intercept and modify web traffic. This proxy functionality allows the scanner to capture application requests and responses for analysis during vulnerability assessments.
You need OWASP ZAP installed and configured for network access to run a vulnerability scan. The Skill requires this external setup to execute active and passive scanning techniques against your target web application.
This vulnerability scanner is applicable to dynamic application security testing in both development and production environments. It performs active and passive scans against target URLs in various network contexts.
SensLiaoRun passive DAST scans on web applications with OWASP ZAP Baseline.
maddhruvScan codebases for security vulnerabilities in dependencies and code.
jokken79Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.
VSF-QC-TTSStandardize dynamic application security testing across web applications and APIs.
