What is Zed Attack Proxy? Last Updated : 12 Jul, 2025 Comments Improve Suggest changes 2 Likes Like Report Zed Attack Proxy is an open-source security software written in Java programming language and released in 2010. It is used to scan web applications and find vulnerabilities in it. It was started as a small project by the Open Web Application Security Project (OWASP) and now it is the most active project maintained by thousands of individuals around the globe. It is available for Linux, Windows, and mac in 29 languages. It can also be used as a proxy server like a burp suite to manipulate the request including the HTTPS request. Daemon mode is also present in it which can later be controlled by REST API. Features: Passive ScannerAutomated ScannerProxy ServerPort IdentificationDirectory SearchingBrute Force AttackWeb CrawlerFuzzerWhy do we use Zed Attack Proxy? Zed Attack Proxy is used to detect vulnerabilities present on any web server and try to remove them. Here is some big vulnerability that could be present in the web server: SQL injectionCross-site scripting (XSS)Broken access controlSecurity miss-configurationBroken authenticationSensitive data exposureCross-site request forgery (CSRF)Using components with known vulnerabilities.Some Important Terminologies: Proxy Server: It is a server that acts as a mediator for clients who want to go through the request and want to alter them.Spider: It is a type of information gathering process in which the application in this case ZAP will go through the whole web page and try to find out all the links and other important details.Passive Scan: In this type of scanning the vulnerability is detected without getting in direct contact with the target machine.Active Scan: In this, the vulnerability is detected by getting in direct contact with the target machine which makes it very easy to be detected by the administrator.Working Process: First we set up the proxy server with any browser. The browser sends website data to the proxy server and then the browser inside the ZAP process the request and perform attacks and generates the report. Configuration Steps: Step 1: Download ZAP from http://www.zaproxy.org/download// by selecting the proper operating system.Step 2: Run the file and follow the instruction until the installation is complete.Steps to Run: Step 1: Open the application through the terminal or by clicking on the icon.Step 2: In the next step, select the first option and click start. Step 3: Now choose a target to scan and enter its web address in the green highlighted box and click attack. Step 4: Now you will have to wait for a few minutes to get the result. Create Quiz Comment G gluttony777 Follow 2 Improve G gluttony777 Follow 2 Improve Article Tags : Ethical Hacking Network-security Cyber-security Explore Introduction to Ethical HackingWhat is Hacktivism ? 11 min read The Hackers Methodology 4 min read Remote Access in Ethical Hacking 5 min read Information Gathering Tools for Kali Linux 5 min read ARIN in Ethical Hacking 3 min read Characteristics of Computer Networks 5 min read Foot Printing and ReconnaissanceWhat is DNS Footprinting? 6 min read Footprinting Through Search Engines 5 min read What is Whois Footprinting? 4 min read Footprinting Using Social Engineering Method 4 min read Scanning NetworksWhat is Credentialed Vulnerability Scan? 4 min read What are Scanning Attacks? 7 min read Malware Scan in Ethical Hacking 5 min read What is Running of a Malware Scan? 5 min read WAScan - web application security scanner in Kali Linux 2 min read What is TCP-ACK Scanning? 2 min read Port Scanning Techniques By Using Nmap 5 min read What is SYN Scanning? 3 min read What is UDP Scanning? 2 min read EnumerationCyber Security - Types of Enumeration 13 min read What is DNS Enumeration? 3 min read SMTP Enumeration 2 min read LDAP Enumeration 6 min read What is NTP Enumeration? 4 min read What is IPsec Enumeration? 4 min read What is NetBIOS Enumeration? 5 min read SNMP Enumeration 7 min read What is Security Testing in Enumeration? 4 min read System HackingWhat is System Hacking in Ethical Hacking? 2 min read What is Windows Hacking ? 6 min read Importance of Physical Security in Ethical Hacking 3 min read What is Non-Electronic Password Attack on a System? 3 min read Password Guessing Attack 5 min read Credential Stuffing in Ethical Hacking 2 min read Reverse Brute Force Attack in System Hacking 4 min read Brute Force Attack 2 min read What is a Default Password Attack Threat? 3 min read USB Drop Attack in System Hacking 5 min read What is Sniffing Attack in System Hacking? 4 min read How to Prevent Man In the Middle Attack? 5 min read How To Generate Rainbow Table Using WinRTGen? 4 min read What is Elcomsoft Distributed Password Recovery? 4 min read pwdump7 in System Hacking 3 min read FGDUMP in System Hacking 5 min read Password Auditing With L0phtcrack 7 Tool 5 min read What is Salted Password Hashing? 4 min read How to Defend Against Password Cracking of Systems? 6 min read How to Defend Against Wi-Fi Pineapple? 6 min read What is DLL Hijacking? 8 min read How to Prevent Privilege Escalation? 4 min read Malware AnalysisMost Popular Methods Used By Hackers to Spread Ransomware 3 min read What is Malvertising? Working and Examples 8 min read How to Find Trojan on Computers? 4 min read Malwares - Malicious Software 8 min read What is WannaCry and How does WannaCry ransomware works 5 min read Working of Stuxnet Virus 6 min read CryptoLocker Ransomware Attack 4 min read Storm Worm 3 min read What is Zeus Malware? 8 min read What is SQL Slammer Virus? 2 min read How to Install Trojan Virus on Any Computer? 5 min read Different Ways to Remove Trojan Horse Malware 5 min read How to Defend Against Botnets ? 5 min read What is Proxy Trojan? 3 min read What are Banking Trojans? 3 min read What is a Computer Virus? 9 min read Virus Hoax 2 min read Difference between Worms and Virus 5 min read Port Scanning Attack 3 min read What is System Integrity Check? 6 min read Code Emulation Technique For Computer Virus Detection 5 min read Heuristic Virus 6 min read How to Prevent Backdoor Attacks? 3 min read SniffingWhat are Active Sniffing Attacks? 6 min read What is Protocol Analyzer? 3 min read What is MAC Spoofing Attack? 5 min read How to Prevent MAC Flooding? 4 min read What is Port Stealing? 3 min read Dynamic Host Configuration Protocol (DHCP) 8 min read DHCP Starvation Attack 4 min read What is Rogue DHCP Server Attack? 4 min read What is ARP Spoofing Attack? 3 min read How to Prevent DNS Poisoning and Spoofing? 6 min read DNS Spoofing or DNS Cache poisoning 3 min read How to Detect Sniffer in Your Network? 5 min read Mitigation of DHCP Starvation Attack 5 min read Social EngineeringWhat is Social Engineering? Working, Types, Prevention and Impact 8 min read What is Insider Attack? 6 min read What is an Impersonation Attack? 6 min read What are Tailgating? 5 min read How Hackers Use Social Engineering to Get Passwords on Facebook? 4 min read Pretexting in Social Engineering 4 min read Credit Card Frauds 2 min read Active Social Engineering Defense (ASED) 6 min read Cyber Crime - Identity Theft 5 min read Penetration Testing - Software Engineering 9 min read Denial-of-ServiceDistributed Denial of Service DDoS attack 6 min read What are Bandwidth Attacks? 6 min read HTTP Flood Attack 9 min read ICMP Flood DDoS Attack 12 min read Ping Flood Attack 6 min read What is a Permanent DoS (PDoS) Attack? 6 min read What is Phlashing? 4 min read Session HijackingTCP/IP Hijacking 3 min read UDP Session Hijacking 3 min read What are Types of Session Hijacking ? 6 min read Difference Between Spoofing and Hijacking 3 min read Application Level Hijacking Using Proxy Hacking 3 min read Man-in-the-Browser Attack 5 min read DOM-Based Cookie Manipulation 6 min read What are Session Replay Attacks? 4 min read What is Cookie Hijacking? 9 min read Session Prediction Software Attack 3 min read What is Session Hijacking? 6 min read Types of Client-Side Attacks 3 min read Difference Between XSS and SQL Injection 4 min read How SYN cookies are used to preventing SYN Flood attack 6 min read IPSec Architecture 2 min read Like