Тёмная

🟢 OWASP ZAP Integration

Automatic security scanning with OWASP ZAP

0
Total Alerts
0
High Risk
0
Medium Risk
0
Low Risk
0
Info

🕷️ Spider Scan

Automatic discovery of links and content on the target website

⚡ Active Scan

Active vulnerability testing with attack payloads

🔍 Alerts

View vulnerabilities discovered by ZAP

📄 Reports

Generate security scan reports

🌐 Scanned Sites

List of all sites scanned in this session

🎛️ Controls

Manage running scans and alert data

📚 API Endpoints

GET /api/zap/status - Check ZAP status
POST /api/zap/scan/spider - Start spider scan
POST /api/zap/scan/active - Start active scan
GET /api/zap/scan/progress/:id - Get scan progress
GET /api/zap/alerts - Get all alerts
GET /api/zap/alerts/summary - Get alerts summary
GET /api/zap/report - Generate report
POST /api/zap/stop - Stop all scans
GET /api/zap/sites - Get scanned sites

📖 Instructions

  1. Install OWASP ZAP:
      - Download from https://www.zaproxy.org/
      - Launch ZAP in API mode
      - Configure API key (optional)
  2. Run a scan:
      - Enter target URL
      - Click 'Start Spider' to discover pages
      - Click 'Start Active Scan' to test vulnerabilities
  3. View results:
      - Click 'Load Alerts' to view findings
      - Filter by risk level
      - Export reports in JSON or HTML format