dast-scanner

Automate DAST scanning with OWASP ZAP and nuclei, then import findings into a bug hunter database.

Updated Jul 1, 2026
One-click install
npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill dast-scanner-bpnrockstar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dast-scanner
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/dast-scanner
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill dast-scanner-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires OWASP ZAP, nuclei, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates DAST scanning using OWASP ZAP and nuclei, then imports findings into the bug hunter database for further analysis and reporting.

Core Features & Use Cases

  • Automated DAST Scanning: Integrates OWASP ZAP and nuclei for scanning vulnerabilities in web applications.
  • Findings Import: Imports scanning results into the bug hunter database for easy analysis and reporting.
  • Use Case: A security researcher can use this Skill to automate the scanning of a web application, then import the results into the database for analysis.

Quick Start

Run the dast-scanner skill on the target domain 'https://target.com'.

Frequently Asked Questions about dast-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate DAST scanning and import findings into a database?▼

Automated DAST scanning works by integrating OWASP ZAP and nuclei to scan web applications for vulnerabilities, then imports the results into the bug hunter database for analysis and reporting.

What do I need to set up before running automated DAST scans with OWASP ZAP and nuclei?▼

Before running DAST scans, you need OWASP ZAP and nuclei installed and configured, and you must have access to the bug hunter database to import the scanning results successfully.

Can I use OWASP ZAP and nuclei together for vulnerability scanning?▼

Yes, this Skill integrates OWASP ZAP and nuclei together to perform comprehensive vulnerability scanning on web applications, automating the process of identifying security flaws and recording them.

How do I run a vulnerability scan on a specific target domain?▼

To run a vulnerability scan, execute the Skill on your target domain by specifying the URL, such as 'https://target.com', and the automated process will scan and import the findings.

What is the best way to record web application vulnerabilities for auditing?▼

The best way to record web application vulnerabilities is to automate DAST scanning with OWASP ZAP and nuclei, which directly imports the detected findings into a bug hunter database for auditing and reporting.

Are there limitations when using nuclei and OWASP ZAP for DAST scanning?▼

The primary limitation is that this DAST scanning approach requires both OWASP ZAP and nuclei to be pre-installed and properly configured, alongside active access to the bug hunter database to store results.