A comprehensive web application security testing tool using OWASP ZAP for vulnerability scanning. Read Tutorial.md for more details.
- Automated vulnerability scanning with OWASP ZAP
- Detailed HTML report generation
- AI-powered vulnerability analysis
- Clone this repository
- Install dependencies:
pip install -r requirements.txt - Configure targets in
config/targets.yaml - Configure OWASP ZAP settings in
config/zap_config.yaml
Run the main script:
python main.pyReports will be generated in the reports directory and can be viewed using the Python HTTP server.
- Start the local server:
python -m http.server 8000 --directory reports- Open
http://localhost:8000in your browser
.
├── analyzers/ # Vulnerability analysis modules
├── config/ # Configuration files
├── data/ # Scan data storage
├── reporters/ # Report generation modules
├── scanners/ # Vulnerability scanning modules
├── utils/ # Utility functions
├── main.py # Main entry point
├── README.md # This file
└── requirements.txt # Python dependencies