Skip to content

NexurAI

NexurAI

Blue-team labs for defenders. Investigate real evidence, submit findings, and climb the ranks.

Train

Labs
Paths
Challenges
Investigations
Pro Range

Compete

Leaderboard
Seasons
Campaigns

Learn

Learning Hub
Glossary
Tools Directory
CVE Center
Threat Briefings

Community

Teams
Certifications
Pricing

Company

For Institutions
Contact

© NexurAI · blue-team labs

Contact Terms Privacy Character art: DiceBear

Tools Directory/Web Security

🌐Web Security

OWASP ZAP

Official

Free web app scanner and intercepting proxy from OWASP.

BeginnerOpen SourceLinuxWindowsmacOS

Used for:Web ExploitationVulnerability Scanning

Visit official site

Practice this on NexurAI

Work web-exploitation labs

Related Web Security tools

The leading web app testing proxy - intercept, fuzz and exploit.

Automated SQL injection detection and database takeover.

Fast web fuzzer for content discovery, params and virtual hosts.

Brute-force URIs, DNS subdomains and vhosts.

Commercial DAST for web app, API and network-exposure vulnerabilities.

WordPress security scanner for vulnerable plugins, themes and users.

Link goes to the official source. We never mirror or host binaries. Use only on systems you own or are authorized to test.