organization · inferred from evidence
zaproxy
The organization or project maintaining the ZAP (Zed Attack Proxy) tool and its extensions.
- ZAP Backup File Disclosure false positives on HTTP 400 responses
ZAP raised Backup File Disclosure alerts on responses that were plain HTTP 400s with empty bodies, which are obviously false positives. The backup file scan rule was matching on responses it should have ignored.