Des|Block
banner
desblock.net
Des|Block
@desblock.net
Red Teamer/Pentester/Infrastructure DevOps Person/Accidental Bug Finder/Future Reason for Downtime

https://github.com/DesBlock
Commercially/Professionally I absolutely agree. If I hired someone for a web app testing role and they opened up ZAP I would be very concerned.
November 21, 2024 at 9:41 PM
Additionally, some of the tutorials out there are much easier for newbies to understand compared to ZAP's documentation.

All in all, I feel like ZAP tutorials can at least be somewhat useful still as it's the old trusty of web proxy tools compared to a lot of the others you listed.
November 21, 2024 at 7:32 PM
As someone who has spent a lot of time teaching college kids I have run into issues with certain features not available in BurpSuite's Free Edition that are honestly incredibly annoying to learn without ZAP.

e.g. Spidering webapps to complete HTB Academy's "Information Gathering - Web Edition"
November 21, 2024 at 7:32 PM