HUNT

HUNT Suite Proxy Extensions What is HUNT Suite? HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions. Identifies common parameters vulnerable to certain vulnerability classes Burp Suite Pro and OWASP ZAP. Organize testing methodologies Burp Suite Pro and Free. HUNT Parameter...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

zap-hud

ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...

ssh-audit

ssh-audit...

archerysec

...

FiddleZAP

FiddleZAP FiddleZAP es una versión simplificada de EKFiddle para OWASP ZAP. Con ZAP como tu proxy web, puedes marcar tráfico malicioso basado en expresiones regulares predefinidas. Ejemplo: Alerta, resaltado y etiquetado cuando una expresión regular coincide con una cadena dentro del código fuent...

seccubus

Acerca de Seccubus Seccubus automatiza los escaneos periódicos de vulnerabilidades con varias herramientas y ayuda al personal de seguridad en el análisis rápido de sus resultados, tanto en el primer escaneo como en los escaneos repetidos. En los escaneos repetidos, los informes delta garantizan...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

adapt

Resumen ADAPT es una herramienta que realiza Pruebas de Penetración de Aplicaciones Dinámicas Automatizadas para aplicaciones web. Está diseñada para aumentar la precisión, velocidad y confianza en los esfuerzos de pruebas de penetración. ADAPT prueba automáticamente múltiples vulnerabilidades...

purpleteam-s2-containers

Contenedores de la Etapa Dos de purpleteam Contenedores de la Etapa Dos de purpleteam Estos contenedores se inician dinámicamente según la configuración del usuario Build Job proporcionada a la CLI de purpleteam, específicamente el número de testSessions que definas. Las siguientes configuracione...

Open-Worldwide-Application-Security-Project-OWASP-

Open-Worldwide-Application-Security-Project-OWASP- Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution CVE-2012-1823...

DVWA-ZAP-PENTEST

DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...

web-threat-mitigation

web-threat-mitigation Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF with OWASP CRS. Case study: Spring4Shell CVE-2022-22965. Local Docker-based setup. Web Threat Mitigation Lab – OWASP ZAP, ModSecurity & CVE Exploitation This repository...

Vulnerabilty-Assessment-Detection-Lab

Vulnerability Assessment & Detection Lab End-to-end vulnerabi...

Vulnerability_Assessment_and_Exploitation

VulnerabilityAssessmentandExploitation This assessment was...

Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE

Jenkins OWASP ZAP Plugin 1.0.7 and earlier does not support distributed builds, causing the file operations and build process of its "Automatically build ZAP" feature to be performed on the Jenkins controller rather than on the agent the build is assigned to. This allows attackers with...

CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...

CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...

CVE-2026-57301

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...