Tuesday, 5 October 2010

OWASP Zed Attack Proxy

I'm pleased to announce that the Zed Attack Proxy has been accepted as an OWASP project.

Its new homepage is here: http://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

The next release of OWASP ZAP, planned for later this year, is expected to include:
  • OWASP rebranding
  • Improvements to the passive and active automated scanners
  • Improvements the Spider
  • The addition a basic port scanner
  • The ability to brute force files and directories (using components from DirBuster)
  • Further internationalization

2 comments:

  1. he don't like me

    -> ./zap.sh
    : commande introuvable
    Exception in thread "main" java.lang.NoClassDefFoundError: org/zaproxy/zap/ZAP
    Caused by: java.lang.ClassNotFoundException: org.zaproxy.zap.ZAP
    at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
    at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
    . Program will exit.in class: org.zaproxy.zap.ZAP
    -> java -jar zap.jar
    Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/commons/httpclient/protocol/ProtocolSocketFactory
    Caused by: java.lang.ClassNotFoundException: org.apache.commons.httpclient.protocol.ProtocolSocketFactory
    at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
    at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
    Could not find the main class: org.zaproxy.zap.ZAP. Program will exit.


    ubuntu maverick, sun-java6 proprietary, i think you have missing something (or me)(burp work with my settings)

    ReplyDelete
  2. Hi WSC,

    Sorry for the delay in replying - I've been on holiday :)

    I think the issue you've hit in a known bug thats fixed by the file: http://code.google.com/p/zaproxy/downloads/detail?name=zap_1.0.0b.sh
    Try using that file and let me know if you still have problems.

    Many thanks,

    Psiinon

    ReplyDelete