The following table lists tools, environments, and their descriptions. Please also refer to the Further reading section for the relevant references:
| Environment and tools | Usage and references |
| Vulnerable website |
This will be the OWASP NodeGoat project, which is a vulnerable web project written in Node.js For the online version, go here: http://nodegoat.herokuapp.com/ For the offline version. go here: https://github.com/OWASP/NodeGoat |
| WebGoat | This is an OWASP vulnerable project in Java |
| ZAP-CLI | This is used to operate OWASP ZAP in console mode |
| ZAP | This is an OWASP web security scanner |
| OWASP DefectDojo | DefectDojo is a security tool that automates application security vulnerability management and provides security findings and metrics in a web-based dashboard |
| Robot Framework | This is an Acceptance Test-Driven Development (ATDD) automation... |