맥에서 OWASP ZAP

Open-source web-app security scanner (DAST) — spider, active scan, proxy · Security Tools

OWASP ZAP (Zed Attack Proxy) is the leading free, open-source web-application security scanner (DAST) — an intercepting proxy that spiders a site, runs passive and active scans for injection, XSS, misconfigurations and other OWASP-style issues, fuzzes inputs, and reports findings. Use the desktop GUI (brew install --cask zap), run it headless as a daemon (zap.sh -daemon -host 0.0.0.0 -port 8080) and drive it via its REST API / Automation Framework, or run it in CI with the Docker image (ghcr.io/zaproxy/zaproxy — baseline & full-scan). Point your browser at its proxy (127.0.0.1:8080) and trust its CA to inspect HTTPS. Complements the in-app Security Audit and the threat-intel tools here. Use ONLY against systems you're authorized to test.

FrontierStack으로 OWASP ZAP 실행하기

OWASP ZAP을(를) 설치하거나 연결한 뒤 FrontierStack에서 상태, 포트, 인증서를 확인하십시오. 해당되는 경우 같은 화면에서 방화벽 점검, 악성코드 감사, 백업으로 이동할 수 있습니다.

관련 Security Tools

• Fail2ban
• Zenarmor
• pfBlockerNG
• Suricata
• Snort
• Wireshark
• CrowdSec
• OSSEC