$ man zap
ZAP
Open-source web app scanner and proxy. The baseline scan is safe for CI.
test itsends requests to the targetvia awesome-security
⚠ Recon your own assets, or targets you have written permission to test. Passive OSINT reads public data, but using it to target someone else's systems can still be illegal or against their terms. Examples on this site use example.com placeholders.
## why a developer should care
The baseline scan only spiders and watches responses - missing headers, cookie flags, info leaks, error messages. The full scan actively attacks and belongs on staging.
## install
$ # runs from Docker - nothing to installOther platforms and pre-built binaries: official install guide ↗
Check it worked: open a new terminal and run docker --version. "command not found" means it isn't installed or isn't on your PATH yet.
## shortcuts
# Passive baseline scan
$ docker run --rm -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py -t {{target}}# Scan an API from its OpenAPI spec
$ docker run --rm -t ghcr.io/zaproxy/zaproxy:stable zap-api-scan.py -t {{target}}/openapi.json -f openapi