Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions docs/scans/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -197,6 +197,16 @@ <h1 class="text--white">ZAP Scans</h1>
</div>
</div>

<div class="flex">
<div class="circle-arrow mr-20">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 30" width="30px"><g data-name="Layer 2"><circle cx="15" cy="15" r="15" fill="#4389ff"/><path fill="none" stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" d="M12.72 8.64L19.07 15l-6.35 6.36"/></g></svg></div>
<div>

<p> <b><a href="wavsep"> WAVSEP</a></b> - the most comprehensive OSS DAST specific test suite that we know of (maintained by the ZAP team) </p>

</div>
</div>

<div class="flex">
<div class="circle-arrow mr-20">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 30 30" width="30px"><g data-name="Layer 2"><circle cx="15" cy="15" r="15" fill="#4389ff"/><path fill="none" stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-width="3" d="M12.72 8.64L19.07 15l-6.35 6.36"/></g></svg></div>
Expand Down
7 changes: 7 additions & 0 deletions docs/scans/index.xml
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,13 @@
<guid>/docs/scans/crawlmaze/</guid>
<description>&lt;p&gt;Google Security Crawl Maze is a comprehensive testbed for web security crawlers.&lt;/p&gt;&#xA;&lt;p&gt;It is available online at &lt;a href=&#34;https://security-crawl-maze.app/&#34;&gt;https://security-crawl-maze.app/&lt;/a&gt; and the GitHub repo is &lt;a href=&#34;https://github.com/google/security-crawl-maze&#34;&gt;https://github.com/google/security-crawl-maze&lt;/a&gt;&#xA;It does appear to be being actively maintained and has merged a fix that we submitted.&lt;/p&gt;&#xA;&lt;p&gt;As long as one of the ZAP spiders finds the relevant page we count that as a pass, but ideally both spiders will find as many of the URLs as possible.&lt;/p&gt;</description>
</item>
<item>
<title>ZAP vs Wavsep</title>
<link>/docs/scans/wavsep/</link>
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>/docs/scans/wavsep/</guid>
<description>&lt;p&gt;WAVSEP is a vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners.&lt;/p&gt;&#xA;&lt;p&gt;It is the most comprehensive OSS DAST specific test suite that we know of.&lt;/p&gt;&#xA;&lt;p&gt;This version of WAVSEP is now maintained by the ZAP Team: &lt;a href=&#34;https://github.com/zaproxy/wavsep&#34;&gt;https://github.com/zaproxy/wavsep&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Click on the Sections to see the full set of results, which also give the local URL and the scan rule which should find the vulnerability.&lt;/p&gt;</description>
</item>
<item>
<title>ZAP vs Webseclab</title>
<link>/docs/scans/webseclab/</link>
Expand Down
Loading