ZAP Vs Test Apps on ZAP

AltoroJ / testfire.net

Mon, 01 Jan 0001 00:00:00 +0000

AltoroJ, also known as Altoro Mutual and Testfire, is an open source sample banking J2EE web application maintained by HCL Software.

Mon, 01 Jan 0001 00:00:00 +0000

Gin & Juice Shop is a closed source vulnerable app maintained by PortSwigger.

Despite claiming to be a modern app is is actually relatively traditional (it is not a Single Page App), which makes it easier to scan.

Mon, 01 Jan 0001 00:00:00 +0000

OWASP crAPI the “completely ridiculous API”.

It is open source, and maintained by OWASP and the community. It’s fairly well documented:

Mon, 01 Jan 0001 00:00:00 +0000

OWASP Juice Shop is “probably the most modern and sophisticated insecure web application”.

It is open source, well maintained by independent volunteers, and well documented.