HelpStartConceptsAddons
Add-ons add additional functionality to ZAP. They have full access to all of the ZAP internals, and so can provide very powerful new features. You can dynamically install add-ons from the online Add-on Marketplace via the Manage Add-ons dialog. You can typically add and remove add-ons to and from the ZAP UI without having to restart it.
Add-ons can provide context sensitive help which is dynamically integrated with the help file. If you are reading this page via a ZAP help file (as opposed to reading it online) then any help pages associated with the add-ons you have installed will be available under here.
Add-ons are assigned a status which may be one of:
| Release | which indicates they are of high quality and fit for purpose | |
| Beta | which indicates they are of reasonable quality but may be incomplete or need further testing | |
| Alpha | which indicates they are at an early stage of development |
| UI Overview | for an overview of the user interface | |
| Features | provided by ZAP | |
| https://code.google.com/p/zap-extensions/ | to browse the add-ons online |
-
ZAP User Guide
- Introduction
-
Getting Started
- Configuring proxies
-
Features
- Active Scan
- Add-ons
- Alerts
- Anti CSRF Tokens
- API
- Authentication
- Break Points
- Callbacks
- Contexts
- Data Driven Content
- Filters
- Globally Excluded URLs
- HTTP Sessions
- Man-in-the-middle Proxy
- Modes
- Notes
- Passive Scan
- Scan Policies
- Scope
- Session Management
- Spider
- Statistics
- Structural Modifiers
- Structural Parameters
- Tags
- Users
- Scanner Rules
- A Simple Penetration Test
-
The User Interface
- Overview
- The Top Level Menu
- The Top Level Toolbar
- The Tabs
-
The Dialogs
- Active Scan
- Add Alert
- Add Break Point
- Add Note
- Encode/Decode/Hash
- Filter
- Find
- History Filter
- Manual Request Editor
- Manage Add-ons
- Manage Tags
-
Options
- Active Scan
- Active Scan Input Vectors
- Alerts
- Anti CSRF Tokens
- API
- Breakpoints
- Callback Address
- Certificate
- Check for Updates
- Connection
- Database
- Display
- Dynamic SSL Certificates
- Extensions
- Global Exclude URL
- HTTP Sessions
- JVM
- Keyboard
- Language
- Local Proxies
- Passive Scan Rules
- Passive Scan Tags
- Passive Scanner
- Rule Configuration
- Scripts
- Search
- Spider
- Statistics
- Persist Session
- Resend
- Scan Policy Manager
- Scan Progress
- Session
- Spider
- The Footer
- Command Line
- Add Ons
- Releases
- Paros Proxy
- Credits
