68 matches found
ssh-audit
ssh-audit...
web-threat-mitigation
web-threat-mitigation Laboratorio práctico sobre detección y mitigación de amenazas web utilizando OWASP ZAP, Burp Suite y ModSecurity WAF con OWASP CRS. Caso de estudio: Spring4Shell CVE-2022-22965. Configuración local basada en Docker. Laboratorio de Mitigación de Amenazas Web – OWASP ZAP,...
zap-hud
ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...
seccubus
Acerca de Seccubus Seccubus automatiza los escaneos periódicos de vulnerabilidades con varias herramientas y ayuda al personal de seguridad en el análisis rápido de sus resultados, tanto en el primer escaneo como en los escaneos repetidos. En los escaneos repetidos, los informes delta garantizan...
seccubus
About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...
Open-Worldwide-Application-Security-Project-OWASP-
Open-Worldwide-Application-Security-Project-OWASP- Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution CVE-2012-1823...
adapt
Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...
adapt
概述 ADAPT 是一款对 Web 应用执行自动化动态应用渗透测试的工具。它旨在提升渗透测试工作的准确性、速度和信心。ADAPT 自动检测多种行业标准 OWASP Top 10 漏洞，并根据这些潜在漏洞输出分类结果。ADAPT 还利用 OWASP ZAP 的功能执行自动化的主动与被动扫描以及自动爬取。由于 ADAPT 工具的灵活性，所有这些功能和测试都可以通过配置文件启用或禁用。有关测试和配置的更多信息，请访问 ADAPT wiki。 工作原理 ADAPT 使用 Python 构建自动化框架，利用行业标准工具（如 OWASP ZAP 和...
zaproxy
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
FiddleZAP
FiddleZAP FiddleZAP 是 EKFiddle 的简化版本，专为 OWASP ZAP 设计。 以 ZAP 作为 Web 代理，您可以根据预定义的正则表达式标记恶意流量。 示例：当正则表达式匹配到受感染网站的 HTML 源代码中的字符串时，发出警告、高亮并打标签 安装 下载并安装 ZAP：https://www.zaproxy.org/download/ 将 FiddleZAP 目录下载或克隆到您的 Documents 文件夹中。 其结构应如下所示： 共有 2 个脚本（独立脚本、被动规则脚本）。前者用于手动对当前加载的会话（网络流量）运行，后者则会在录制流量时自动运行。 独立...
HUNT
Extensiones de Proxy de HUNT Suite ¿Qué es HUNT Suite? HUNT Suite es una colección de extensiones para Burp Suite Pro/Free y OWASP ZAP. Identifica parámetros comunes vulnerables a ciertas clases de vulnerabilidad Burp Suite Pro y OWASP ZAP. Organiza metodologías de prueba Burp Suite Pro y Free...
purpleteam-s2-containers
purpleteam 第二阶段容器 purpleteam 的第二阶段容器 这些容器是根据构建用户配置（任务）输入（即您定义的 testSession 数量）动态启动的。 如果您打算在 local 环境中运行 purpleteam 后端，以下配置是相关的。在 cloud 环境中，这些操作会自动完成。 克隆此仓库。 定义环境变量 app-slave Zap 我们在 app-slave 目录中直接使用 .env 文件进行测试。 ZAPAPIKEY 确保您已为 ZAPAPIKEY 环境变量赋值。 ZAPAPIKEY 可以任意选择，只要确保除了为 app-slave 定义该变量外，还要将其添加到...
DVWA-ZAP-PENTEST
DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...
Vulnerability_Assessment_and_Exploitation
VulnerabilityAssessmentandExploitation This assessment was...
CVE-2026-57301
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...
CVE-2026-57301
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...
CVE-2026-57301
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...
