Title: Tools of the trade
Course: Information and Software Security 101 > Section: OWASP Top 10 > Forum: Security Education

Discussion related to tools that can be used to exploit the OWASP Top 10, how-to videos, tips and tricks on writing your own tools, etc.

Remember, only test tools locally, or where you have permission!

One very popular tool is Portswigger's Burpsuite proxy: https://portswigger.net/burp/communitydownload

OWASP also offer their own similar open source tool, called Zed Attack Proxy (ZAP).

Has anyone used those before?

I almost forgot, the link to ZAP is here: https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

I have used ZAP and quite liked it's new HUD feature.