ZAP Project
summary
ZAP claims wide real‑world use — about 3 million check-for-updates in a month — and runs on any JVM (even a Raspberry Pi). Recent work replaces the old networking stack with Netty to add HTTP/2, adds passive‑scan threading in dev, and ships weekly Docker images and GitHub Actions. The desktop now builds an automation framework plan (exportable as YAML) and demos show concrete results: 132 URLs found, 110 authenticated requests. There are bounties via the StackHawk ZAP fund and a Google Summer of Code port of ParamMiner in flight.
AI-written summary · about
chapters (6)
- 0:00Introduction and speaker bio
- 1:58Overview of the ZAP project
- 11:15Release cycles and Q&A
- 14:40Work in progress
- 21:48Live demo and configuration
- 47:30Q&A and closing
related talks
47mOWASP ZAP: More Advanced Features
12mOWASP ZAP HUD WTF?
27mFlagship Projects: ZAP
27mHacking with a Heads Up Display
40mEvolution of AppSec: Perspectives from a Decade of Building OWASP ZAP
29mZAP Heads Up Display
58mWhiz, Bang, ZAP! An introduction to OWASP's Zed Attack Proxy
45mSecurity Testing with OWASP ZAP in CI/CD