OWASP ZAP (Zed Attack Proxy) is a free, high-performance, open-source tool among security testing tools. It is considered essential for detecting vulnerabilities in web applications. With Kali Linux, ...

mcp_server.py - The engine that powers everything. Start this first - it's your security scanning powerhouse that connects to OWASP ZAP. mcp_client.py - The brains behind the operation. A powerful SDK ...

When performing vulnerability scans using diagnostic tools like OWASP ZAP, always obtain written permission (including email) from the owner or administrator of the target server in advance.

45 MCP tools for controlling OWASP ZAP (scanning, alerts, spider, ajax spider, context, authentication, reports, etc.) Built-in Docker Compose management (start/stop ZAP with a single tool call) ...