HelpReleases1_1_0
The following changes were made in this release:
ZAP has been accepted as an OWASP project. Its homepage is now: http://www.owasp.org/index.php/OWASP\_Zed\_Attack\_Proxy\_Project
The ability to brute force files and directories based on code from the OWASP DirBuster project. The new Brute Force tab shows the files and directories found.
The ability to port scan sites. The new Port Scan tab shows the ports found.
The new Active Scan tab shows the requests and responses as a result of actively scanning a site.
The Spider tab now allows you to continue using ZAP while spidering a site. You can also pause and resume the spider.
Smart card support has been added c/o the Andiparos project. The following smartcard devices have been tested on Windows:
| Safeguard | Aladdin eToken | |
| Aladdin eToken Pro | ||
| Omnikey | Omnikey 3121 | |
| CardMan 6121 | ||
| Gemalto | Reflex 20 V2 | |
| Swiss Stick |
The following smartcard devices are reported to work:
| Omnikey | CardMan 4040 |
The new Sites tab right click 'Attack' menu allows you to start various scans.
All of the main tabs and menu items have now been internationalised.
Support for the following languages are built into this version:
| English | The default language | |
| Brazilian Portuguese | ||
| German | ||
| Polish | ||
| Spanish |
On start up you will be prompted to choose the language to use. New languages are automatically detected by the presence of files with names of the form Messages_.properties in the ZAP directory.
The plugins which detect default files are effectively made redundant by the new brute force scanner. These have therefore been disabled.
Counts of the number and types of the current scans are now displayed in the footer.
| Introduction | the introduction to ZAP | |
| Releases | the full set of releases | |
| Credits | the people and groups who have made this release possible |
-
ZAP User Guide
- Introduction
-
Getting Started
- Configuring proxies
-
Features
- Active Scan
- Add-ons
- Alerts
- Anti CSRF Tokens
- API
- Authentication
- Break Points
- Callbacks
- Contexts
- Data Driven Content
- Filters
- Globally Excluded URLs
- HTTP Sessions
- Man-in-the-middle Proxy
- Modes
- Notes
- Passive Scan
- Scan Policies
- Scope
- Session Management
- Spider
- Statistics
- Structural Modifiers
- Structural Parameters
- Tags
- Users
- Scanner Rules
- A Simple Penetration Test
-
The User Interface
- Overview
- The Top Level Menu
- The Top Level Toolbar
- The Tabs
-
The Dialogs
- Active Scan
- Add Alert
- Add Break Point
- Add Note
- Encode/Decode/Hash
- Filter
- Find
- History Filter
- Manual Request Editor
- Manage Add-ons
- Manage Tags
-
Options
- Active Scan
- Active Scan Input Vectors
- Alerts
- Anti CSRF Tokens
- API
- Breakpoints
- Callback Address
- Certificate
- Check for Updates
- Connection
- Database
- Display
- Dynamic SSL Certificates
- Extensions
- Global Exclude URL
- HTTP Sessions
- JVM
- Keyboard
- Language
- Local Proxies
- Passive Scan Rules
- Passive Scan Tags
- Passive Scanner
- Rule Configuration
- Scripts
- Search
- Spider
- Statistics
- Persist Session
- Resend
- Scan Policy Manager
- Scan Progress
- Session
- Spider
- The Footer
- Command Line
- Add Ons
- Releases
- Paros Proxy
- Credits
