���� JFIF  XX �� �� �     $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222�� ��" �� 4     ��   �� �,�PG"Z_�4�˷����kjز�Z�,F+��_z�,�© �����zh6�٨�ic�fu��� #ډb���_�N� ?� �wQ���5-�~�I���8��� �TK<5o�Iv-� ����k�_U_����� ~b�M��d��� �Ӝ�U�Hh��?]��E�w��Q���k�{��_}qFW7HTՑ��Y��F� ?_�'ϔ��_�Ջt� �=||I �� 6�έ"�����D���/[�k�9�� �Y�8 ds|\���Ҿp6�Ҵ���]��.����6� z<�v��@]�i% �� $j��~ �g��J>��no����pM[me�i$[�� �� s�o�ᘨ�˸ nɜG-�ĨU�ycP� 3.DB�li�;� �hj���x 7Z^�N�h��� ���N3u{�:j �x�힞��#M &��jL P@ _���� P�� &��o8 ������9 �����@Sz 6�t7#O�ߋ � s}Yf�T� ��lmr����Z)'N��k�۞p ����w\�T ȯ?�8` �O��i{wﭹW�[�r�� ��Q4F�׊�� �3m&L�=��h3� ���z~��#� \�l :�F,j@�� ʱ�wQT����8�"kJO��� 6�֚l���� }��� R�>ډK���]��y����&����p�}b�� ;N�1�m�r$� |��7�>e�@ B�TM*-i H��g�D�)� E�m�|�ؘbҗ�a ��Ҿ���� t4��� o���G��*oCN�rP���Q��@z,|?W[0 �����:�n,j WiE��W� �$~/�hp\��?��{(�0���+�Y8rΟ�+����>S-S�� ��VN;� }�s?.����� w �9��˟<���Mq4�Wv' ��{)0�1mB ��V����W[� ����8�/<� �%���wT^�5���b��)iM� p g�N�&ݝ� �VO~� q���u���9� ����!��J27��� �$ O-���! �: �%H��� ـ ����y�ΠM=t{!S�� oK8������ t<����è :a�� ����[���� �ա�H���~��w��Qz`�p o�^ �� ��Q��n�  �,uu�C� $ ^���,� �����8�#��:�6��e�|~� ��!�3� 3.�\0�� q��o�4`.|� ����y�Q�`~;�d�ׯ,��O�Zw�������`73�v�܋�< ���Ȏ�� ـ4k��5�K�a�u�=9Yd��$>x�A�&�� j0� ���vF��� Y� |�y��� ~�6�@c��1vOp �Ig�� ��4��l�OD� ��L����� R���c���j�_�uX 6��3?nk��Wy�f;^*B� ��@ �~a�`��Eu������ +� �� 6�L��.ü>��}y���}_�O�6�͐�:�Yr G�X��kG�� ���l^w�� �~㒶sy� �Iu�!� W ��X��N�7BV��O��!X�2����wvG�R�f�T#�����t�/?���%8�^�W�aT ��G�cL�M���I��(J����1~�8�?aT ���]����AS�E��(��*E}� 2�� #I/�׍qz��^t�̔��� b�Yz4x ���t�){ OH� �+(E��A&�N�������XT��o��"�XC�� '���)}�J�z�p� ��~5�}�^����+�6����w��c��Q�| Lp�d�H��}�(�.|����k��c4^� "�����Z?ȕ ��a< �L�!0 39C� �Eu� C�F�Ew�ç ;�n?�*o���B�8�bʝ���'#Rqf�� �M}7����]��� �s2tcS{�\icTx;�\��7K���P ���ʇ Z O-��~�� c>"��?�� �����P ��E��O�8��@�8��G��Q�g�a�Վ���󁶠 �䧘��_%#r�>� 1�z�a�� eb��qcP ѵ��n���#L��� =��׀t� L�7�` ��V��� A{�C:�g���e@ �w1 Xp 3�c3�ġ���� p��M"'-�@n4���fG� �B3�DJ�8[Jo�ߐ���gK)ƛ��$���� � ��8�3�����+���� �����6�ʻ���� ���S�kI�*KZlT _`�� �?��K� ���QK�d ����B`�s}�>���` ��*�>��,*@J�d�oF*� ���弝��O}�k��s��]��y�ߘ ��c1G�V���<=�7��7����6 �q�PT��tXԀ�!9*4�4Tހ 3XΛex�46�� �Y��D ����� �BdemDa����\�_l,� �G�/���֌7���Y�](�xTt^%�GE�����4�}bT ���ڹ�����; Y)���B�Q��u��>J/J � ⮶.�XԄ��j�ݳ� +E��d ��r�5�_D �1 �� o�� �B�x�΢�#� ��<��W�����8���R6�@ g�M�.��� dr�D��>(otU��@ x=��~v���2� ӣ�d�oBd ��3�eO�6�㣷�� ���ݜ 6��6Y��Qz`�� S��{���\P �~z m5{J/L��1������<�e�ͅPu� b�]�ϔ ���'�� ����f�b� Zpw��c`"��i���BD@:)ִ�:�]��h v�E� w���T�l ��P� ��"Ju�}��وV J��G6��. J/�Qgl߭�e�����@�z�Zev2u� )]կ��� ��7x�� �s�M�-<ɯ�c��r� v�����@��$�ޮ}lk���a�� �'����>x��O\�Z Fu>��� ��ck#��&:��`�$ �ai�>2Δ����l���oF[h� �lE�ܺ�Π k:)���` �� $[6�����9�����kOw�\|��� 8}������ބ:��񶐕� �I�A1/� =�2[�,�!��.}gN#�u����b ��� ~� �݊��}34q��� �d�E��L c��$ ��"�[q�U�硬g^��%B � z���r�p J�ru%v\h 1Y�ne` ǥ:g�� �pQM~�^� Xi� ��`S�:V2 9.�P���V� ?B�k�� AEvw%�_�9C�Q����wKekP ؠ�\� ;Io d�{ ߞo�c1eP��� �\� `����E=���@K<�Y�� �eڼ�J ���w����{av�F�'�M�@ /J��+9p ���|]���� �Iw &` ��8���& M�hg ��[�{ ��Xj�� %��Ӓ� $��(��� �ʹN��� <>�I���RY� ��K2�NPlL�ɀ )��&e� ���B+ь����( � �JTx ���_?EZ� }@ 6�U���뙢ط�z��dWI� n` D����噥�[��uV��"�G& Ú����2 g�}&m� �?ċ �"����Om#� ������� � ��{� ON��"S�X ��Ne��ysQ���@ Fn��Vg��� dX�~nj� ]J�<�K]: ��FW�� b�������62 �=��5f����JKw� �bf�X� 55��~J �%^� ���:�-�QIE��P��v�nZum� z � ~ə ���� ���ة����;�f��\v��� g�8�1��f2 4;�V���ǔ�)��� �9���1\�� c��v�/'Ƞ�w����� ��$�4�R-��t�� �� e�6�/�ġ �̕Ecy�J���u�B���<�W�ַ~�w[B1L۲�-JS΂�{���΃���� ��A��20�c# �� @    0!1@AP"#2Q`$3V�%45a6�FRUq���   � ���^7ׅ,$n� ������+��F�`��2X'��0vM��p�L=������ 5��8������u�p~���.�`r�����\��� O��,ư�0oS ��_�M�����l���4�kv\JSd���x���SW�<��Ae�IX����������$I���w�:S���y���›R��9�Q[���,�5�;�@]�%���u�@ *ro�lbI �� ��+���%m:�͇ZV�����u�̉����θau<�fc�.����{�4Ա� �Q����*�Sm��8\ujqs]{kN���)qO�y�_*dJ�b�7���yQqI&9�ԌK!�M}�R�;�� ����S�T���1���i[U�ɵz�]��U)V�S6���3$K{� ߊ<�(� E]Զ[ǼENg�����'�\?#)Dkf��J���o��v���'�%ƞ�&K�u� !��b�35LX�Ϸ��63$K�a�;�9>,R��W��3�3� d�JeTYE.Mϧ��-�o�j3+y��y^�c�������VO�9NV\nd�1 ��!͕_)a�v;����թ�M�lWR1��)El��P;��yوÏ�u 3�k�5Pr6<�⒲l�!˞*��u־�n�!�l:����UNW ��%��Chx8vL'��X�@��*��)���̮��ˍ��� � ��D-M�+J�U�kvK����+�x8��cY������?�Ԡ��~3mo��|�u@[XeY�C�\Kp�x8�oC�C�&����N�~3-H���� ��MX�s�u<`���~"WL��$8ξ��3���a�)|:@�m�\���^�`�@ҷ)�5p+��6���p�%i)P M���ngc�����#0Aruz���RL+xSS?���ʮ}()#�t��mˇ!��0}}y����<�e� �-ή�Ԩ��X������ MF���ԙ~l L.3���}�V뽺�v��� ��멬��Nl�)�2����^�Iq��a��M��qG��T�����c3#������3U�Ǎ���}��לS�|qa��ڃ�+���-��2�f����/��bz��ڐ�� �ݼ[2�ç����k�X�2�* �Z�d���J�G����M*9W���s{��w���T��x��y,�in�O�v��]���n����P�$� JB@=4�OTI�n��e�22a\����q�d���%�$��(���:���: /*�K[PR�fr\nڙdN���F�n�$�4� [�� U�zƶ����� �mʋ���,�ao�u 3�z� �x��Kn����\[��VFmbE;�_U��&V�Gg�]L�۪&#n%�$ɯ� dG���D�TI=�%+AB�Ru#��b4�1�»x�cs�YzڙJG��f��Il� �d�eF'T� iA��T���uC�$����Y��H?����[!G`}���ͪ� �纤Hv\������j�Ex�K���!���OiƸ�Yj�+u-<���'q����uN�*�r\��+�]���<�wOZ.fp�ێ��,-*)V?j-kÊ#�`�r��dV����(�ݽBk�����G�ƛk�QmUڗe��Z���f}|����8�8��a���i��3'J�����~G_�^���d�8w������ R�`(�~�.��u���l�s+g�bv���W���lGc}��u���afE~1�Ue������Z�0�8�=e�� f@/�jqEKQQ�J� �oN��J���W5~M>$6�Lt�;$ʳ{���^��6�{����v6���ķܰg�V�cnn �~z�x�«�,2�u�?cE+Ș�H؎�%�Za�)���X>uW�Tz�Nyo����s���FQƤ��$��*�&�LLXL)�1�" L��eO��ɟ�9=���:t��Z���c��Ž���Y?�ӭV�wv�~,Y��r�ۗ�|�y��GaF�����C�����.�+� ���v1���fήJ�����]�S��T��B��n5sW}y�$��~z�'�c ��8 ��� ,! �p��VN�S��N�N�q��y8z˱�A��4��*��'������2n<�s���^ǧ˭P�Jޮɏ�U�G�L�J�*#��<�V��t7�8����TĜ>��i}K%,���)[��z�21z ?�N�i�n1?T�I�R#��m-�����������������1����lA�`��fT5+��ܐ�c�q՝��ʐ��,���3�f2U�եmab��#ŠdQ�y>\��)�SLY����w#��.���ʑ�f��� ,"+�w�~�N�'�c�O�3F�������N<���)j��&��,-� �љ���֊�_�zS���TǦ����w�>��?�������n��U仆�V���e�����0���$�C�d���rP �m�׈e�Xm�Vu� �L��.�bֹ��� �[Դaզ���*��\y�8�Է:�Ez\�0�Kq�C b��̘��cө���Q��=0Y��s�N��S.��� 3.���O�o:���#���v7�[#߫ ��5�܎�L���Er4���9n��COWlG�^��0k�%<���ZB���aB_���������'=��{i�v�l�$�uC���mƎҝ{�c㱼�y]���W�i ��ߧc��m�H� m�"�"�����;Y�ߝ�Z�Ǔ�����:S#��|}�y�,/k�Ld� TA�(�AI$+I3��;Y*���Z��}|��ӧO��d�v��..#:n��f>�>���ȶI�TX��� 8��y����"d�R�|�)0���=���n4��6ⲑ�+��r<�O�܂~zh�z����7ܓ�HH�Ga롏���nCo�>������a ���~]���R���̲c?�6(�q�;5%� |�uj�~z8R =X��I�V=�|{v�Gj\gc��q����z�؋%M�ߍ����1y��#��@f^���^�>N��� ��#x#۹��6�Y~�?�dfPO��{��P�4��V��u1E1J �*|���%�� �JN��`eWu�zk M6���q t[�� ��g�G���v��WIG��u_ft����5�j�"�Y�:T��ɐ���*�;� e5���4����q$C��2d�}���� _S�L#m�Yp��O�.�C�;��c����Hi#֩%+) �Ӎ��ƲV���SYź��g |���tj��3�8���r|���V��1#;.SQ�A[���S������#���`n�+���$��$ I �P\[�@�s��(�ED�z���P��])8�G#��0B��[ى��X�II�q<��9�~[Z멜�Z�⊔IWU&A>�P~�#��dp<�?����7���c��'~���5 ��+$���lx@�M�dm��n<=e�dyX��?{�|Aef ,|n3�<~z�ƃ�uۧ�����P��Y,�ӥQ�*g�#먙R�\���;T��i,��[9Qi歉����c>]9�� ��"�c��P�� �Md?٥��If�ت�u��k��/����F��9�c*9��Ǎ:�ØF���z�n*�@|I�ށ9����N3{'��[�'ͬ�Ҳ4��#}��!�V� Fu��,�,mTIk���v C�7v���B�6k�T9��1�*l� '~��ƞF��lU��'�M ����][ΩũJ_�{�i�I�n��$�� �L�� j��O�dx�����kza۪��#�E��Cl����x˘�o�����V���ɞ�ljr��)�/,�߬h�L��#��^��L�ф�,íMƁe�̩�NB�L�����iL����q�}��(��q��6IçJ$�W�E$��:������=#����(�K�B����zђ <��K(�N�۫K�w��^O{!����) �H���>x�������lx�?>Պ�+�>�W���,Ly!_�D���Ō�l���Q�!�[ �S����J��1��Ɛ�Y}��b,+�Lo�x�ɓ)����=�y�oh�@�꥟/��I��ѭ=��P�y9��� �ۍYӘ�e+�p�Jnϱ?V\SO%�(�t� ���=?MR�[Ș�����d�/ ��n�l��B�7j� ��!�;ӥ�/�[-���A�>� dN�sLj ��,ɪv��=1c�.SQ�O3�U���ƀ�ܽ�E����������̻��9G�ϷD�7(�}��Ävӌ\� y�_0[w ���<΍>����a_��[0+�L��F.�޺��f�>oN�T����q;���y\��bՃ��y�jH�<|q-eɏ�_?_9+P���Hp$�����[ux�K w�Mw��N�ی'$Y2�=��q���KB��P��~�� ����Yul:�[<����F1�2�O���5=d����]Y�sw:���Ϯ���E��j,_Q��X��z`H1,#II ��d�wr��P˂@�ZJV����y$�\y�{}��^~���[:N����ߌ�U�������O��d�����ؾe��${p>G��3c���Ė�lʌ�� ת��[��`ϱ�-W����dg�I��ig2��� ��}s ��ؤ(%#sS@���~���3�X�nRG�~\jc3�v��ӍL��M[JB�T��s3}��j�Nʖ��W����;7� �ç?=X�F=-�=����q�ߚ���#���='�c��7���ڑW�I(O+=:uxq�������������e2�zi+�kuG�R��������0�&e�n���iT^J����~\jy���p'dtG��s����O��3����9* �b#Ɋ�� p������[Bws�T�>d4�ۧs���nv�n���U���_�~,�v����ƜJ1��s�� �QIz�� )�(lv8M���U=�;����56��G���s#�K���MP�=��LvyGd��}�VwWBF�'�à �?MH�U�g2�� ����!�p�7Q��j��ڴ����=��j�u��� Jn�A s���uM������e��Ɔ�Ҕ�!) '��8Ϣ�ٔ� �ޝ(��Vp���צ֖d=�IC�J�Ǡ{q������kԭ�߸���i��@K����u�|�p=..�*+����x�����z[Aqġ#s2a�Ɗ���RR�)*HRsi�~�a &f��M��P����-K�L@��Z��Xy�'x�{}��Zm+���:�)�) IJ�-i�u���� ���ܒH��'� L(7�y�GӜq���� j��� 6ߌg1�g�o���,kر���tY�?W,���p���e���f�OQS��!K�۟cҒA�|ս�j�>��=⬒��˧L[�� �߿2JaB~R��u�:��Q�] �0H~���]�7��Ƽ�I���( }��cq '�ήET���q�?f�ab���ӥvr� �)o��-Q��_'����ᴎo��K������;��V���o��%���~OK ����*��b�f:���-ťIR��`B�5!RB@���ï�� �u �̯e\�_U�_������� g�ES��3������� QT��a�� ��x����U<~�c?�*�#]�MW,[8O�a�x��]�1bC|踤�P��lw5V%�)�{t�<��d��5���0i�XSU��m:��Z�┵�i�"��1�^B�-��P�hJ��&)O��*�D��c�W��vM��)����}���P��ܗ-q����\mmζZ-l@�}��a��E�6��F�@��&Sg@���ݚ�M����� ȹ 4����#p�\H����dYDo�H���"��\��..R�B�H�z_�/5˘����6��KhJR��P�mƶi�m���3� ,#c�co��q�a)*P t����R�m�k�7x�D�E�\Y�閣_X�<���~�)���c[[�BP����6�Yq���S��0����%_����;��Àv�~�| VS؇ ��'O0��F0��\���U�-�d@�����7�SJ*z��3n��y��P����O��������� m�~�P�3|Y��ʉr#�C�<�G~�.,! ���bqx���h~0=��!ǫ�jy����l� O,�[B��~��|9��ٱ����Xly�#�i�B��g%�S��������tˋ���e���ې��\[d�t)��.+u�|1 ������#�~Oj����hS�%��i.�~X���I�H�m��0n���c�1uE�q��cF�RF�o���7� �O�ꮧ� ���ۛ{��ʛi5�rw?׌#Qn�TW��~?y$��m\�\o����%W� ?=>S�N@�� �Ʈ���R����N�)�r"C�:��:����� �����#��qb��Y�. �6[��2K����2u�Ǧ�HYR��Q�MV��� �G�$��Q+.>�����nNH��q�^��� ����q��mM��V��D�+�-�#*�U�̒ ���p욳��u:�������IB���m� ��PV@O���r[b= �� ��1U�E��_Nm�yKbN�O���U�}�the�`�|6֮P>�\2�P�V���I�D�i�P�O;�9�r�mAHG�W�S]��J*�_�G��+kP�2����Ka�Z���H�'K�x�W�MZ%�O�YD�Rc+o��?�q��Ghm��d�S�oh�\�D�|:W������UA�Qc yT�q� �����~^�H��/��#p�CZ���T�I�1�ӏT����4��"�ČZ�����}��`w�#�*,ʹ�� ��0�i��課�Om�*�da��^gJ݅{���l�e9uF#T�ֲ��̲�ٞC"�q���ߍ ոޑ�o#�XZTp����@ o�8��(jd��xw�]�,f���`~� |,s��^����f�1���t��|��m�򸄭/ctr��5s��7�9Q�4�H1꠲BB@ l9@���C�����+�wp�xu�£Yc�9��?`@#�o�mH�s2��)�=��2�.�l����jg�9$�Y�S�%*L������R�Y������7Z���,*=�䷘$�������arm�o�ϰ���UW.|�r�uf����IGw�t����Zwo��~5 ��YյhO+=8fF�)�W�7�L9lM�̘·Y���֘YLf�큹�pRF���99.A �"wz��=E\Z���'a� 2��Ǚ�#;�'}�G���*��l��^"q��+2FQ� hj��kŦ��${���ޮ-�T�٭cf�|�3#~�RJ����t��$b�(R��(����r���dx� >U b�&9,>���%E\� Ά�e�$��'�q't��*�א���ެ�b��-|d���SB�O�O��$�R+�H�)�܎�K��1m`;�J�2�Y~9��O�g8=vqD`K[�F)k�[���1m޼c��n���]s�k�z$@��)!I �x՝"v��9=�ZA=`Ɠi �:�E��)` 7��vI��}d�YI�_ �o�:ob���o ���3Q��&D&�2=�� �Ά��;>�h����y.*ⅥS������Ӭ�+q&����j|UƧ��� �}���J0��WW< ۋS�)jQR�j���Ư��rN)�Gű�4Ѷ(�S)Ǣ�8��i��W52���No˓� ۍ%�5brOn�L�;�n��\G����=�^U�dI���8$�&���h��'���+�(������cȁ߫k�l��S^���cƗjԌE�ꭔ��gF���Ȓ��@���}O���*;e�v�WV���YJ\�]X'5��ղ�k�F��b 6R�o՜m��i N�i���� >J����?��lPm�U��}>_Z&�KK��q�r��I�D�Չ~�q�3fL�:S�e>���E���-G���{L�6p�e,8��������QI��h��a�Xa��U�A'���ʂ���s�+טIjP�-��y�8ۈZ?J$��W�P� ��R�s�]��|�l(�ԓ��sƊi��o(��S0 ��Y� 8�T97.�����WiL��c�~�dxc�E|�2!�X�K�Ƙਫ਼�$((�6�~|d9u+�qd�^3�89��Y�6L�.I�����?���iI�q���9�)O/뚅����O���X��X�V��ZF[�یgQ�L��K1���RҖr@v�#��X�l��F���Нy�S�8�7�kF!A��sM���^rkp�jP�DyS$N���q�� nxҍ!U�f�!eh�i�2�m ���`�Y�I�9r�6� �TF���C}/�y�^���Η���5d�'��9A-��J��>{�_l+�`��A���[�'��յ�ϛ#w:݅�%��X�}�&�PSt�Q�"�-��\縵�/����$Ɨh�Xb�*�y��BS����;W�ջ_mc�����vt?2}1�;qS�d�d~u:2k5�2�R�~�z+|HE!)�Ǟl��7`��0�<�,�2*���Hl-��x�^����'_TV�gZA�'j� ^�2Ϊ��N7t�����?w�� �x1��f��Iz�C-Ȗ��K�^q�;���-W�DvT�7��8�Z�������� hK�(P:��Q- �8�n�Z���܃e貾�<�1�YT<�,�����"�6{ / �?�͟��|1�:�#g��W�>$����d��J��d�B�� =��jf[��%rE^��il:��B���x���Sּ�1հ��,�=��*�7 fcG��#q� �eh?��2�7�����,�!7x��6�n�LC�4x��},Geǝ�tC.��vS �F�43��zz\��;QYC,6����~;RYS/6���|2���5���v��T��i����������mlv��������&� �nRh^ejR�LG�f���? �ۉҬܦƩ��|��Ȱ����>3����!v��i�ʯ�>�v��オ�X3e���_1z�Kȗ\<������!�8���V��]��?b�k41�Re��T�q��mz��TiOʦ�Z��Xq���L������q"+���2ۨ��8}�&N7XU7Ap�d�X��~�׿��&4e�o�F��� �H�� ��O���č�c�� 懴�6���͉��+)��v;j��ݷ�� �UV�� i��� j���Y9GdÒJ1��詞�����V?h��l�� ��l�cGs�ځ�������y�Ac���� �\V3�? �� ܙg�>qH�S,�E�W�[�㺨�uch�⍸�O�}���a��>�q�6�n6� ���N6�q�� ���� N    ! 1AQaq�0@����"2BRb�#Pr���3C`��Scst���$4D���%Td��  ? � ��N����a��3��m���C���w��������xA�m�q�m��� m������$����4n淿t'��C"w��zU=D�\R+w�p+Y�T�&�պ@��ƃ��3ޯ?�Aﶂ��aŘ���@-�����Q�=���9D��ռ�ѻ@��M�V��P��܅�G5�f�Y<�u=,EC)�<�Fy'�"�&�չ�X~f��l�KԆV��?�� �W�N����=(� �;���{�r����ٌ�Y���h{�١������jW����P���Tc�����X�K�r��}���w�R��%��?���E��m�� �Y�q|����\lEE4� ��r���}�lsI�Y������f�$�=�d�yO����p�����yBj8jU�o�/�S��?�U��*������ˍ�0����� �u�q�m [�?f����a�� )Q�>����6#������� ?����0UQ����,IX���(6ڵ[�DI�MNލ�c&���υ�j\��X�R|,4��� j������T�hA�e��^���d���b<����n�� �즇�=!���3�^�`j�h�ȓr��jẕ�c�,ٞX����-����a�ﶔ���#�$��]w�O��Ӫ�1y%��L�Y<�wg#�ǝ�̗`�x�xa�t�w��»1���o7o5��>�m뭛C���Uƃߜ}�C���y1Xνm�F8�jI���]����H���ۺиE@I�i;r�8ӭ���� V�F�Շ| ��&?�3|x�B�MuS�Ge�=Ӕ�#BE5G�� ���Y!z��_e��q�р/W>|-�Ci߇�t�1ޯќd�R3�u��g�=0 5��[?�#͏��q�cf���H��{ ?u�=?�?ǯ���}Z��z���hmΔ�BFTW�����<�q� (v� ��!��z���iW]*�J�V�z��gX֧A�q�&��/w���u�gYӘa���; �i=����g:��?2�dž6�ى�k�4�>�Pxs����}������G�9� �3 ���)gG�R<>r h�$��'nc�h�P��Bj��J�ҧH� -��N1���N��?��~��}-q!=��_2hc�M��l�vY%UE�@|�v����M2�.Y[|y�"Eï��K�ZF,�ɯ?,q�?v�M 80jx�"�;�9vk�����+ ֧�� �ȺU��?�%�vcV��mA�6��Qg^M��� �A}�3�nl� QRN�l8�kkn�'�����(��M�7m9و�q���%ޟ���*h$Zk"��$�9��: �?U8�Sl��,,|ɒ��xH(ѷ����Gn�/Q�4�P��G�%��Ա8�N��!� �&�7�;���eKM7�4��9R/%����l�c>�x;������>��C�:�����t��h?aKX�bhe�ᜋ^�$�Iհ �hr7%F$�E��Fd���t��5���+�(M6�t����Ü�UU|zW�=a�Ts�Tg������dqP�Q����b'�m���1{|Y����X�N��b �P~��F^F:����k6�"�j!�� �I�r�`��1&�-$�Bevk:y���#y w��I0��x��=D�4��tU���P�ZH��ڠ底taP��6����b>�xa� ���Q�#� WeF��ŮNj�p�J* mQ�N��� �*I�-*�ȩ�F�g�3 �5��V�ʊ�ɮ�a��5F���O@{���NX��?����H�]3��1�Ri_u��������ѕ�� ����0��� F��~��:60�p�͈�S��qX#a�5>���`�o&+�<2�D����: �������ڝ�$�nP���*)�N�|y�Ej�F�5ټ�e���ihy�Z �>���k�bH�a�v��h�-#���!�Po=@k̆IEN��@��}Ll?j�O������߭�ʞ���Q|A07x���wt!xf���I2?Z��<ץ�T���cU�j��]�� 陎Ltl �}5�ϓ��$�,��O�mˊ�;�@O��jE��j(�ا,��LX���LO���Ц�90�O �.����a��nA���7������j4 ��W��_ٓ���zW�jcB������y՗+EM�)d���N�g6�y1_x��p�$Lv :��9�"z��p���ʙ$��^��JԼ*�ϭ����o���=x�Lj�6�J��u82�A�H�3$�ٕ@�=Vv�]�'�qEz�;I˼��)��=��ɯ���x �/�W(V���p�����$ �m�������u�����񶤑Oqˎ�T����r��㠚x�sr�GC��byp�G��1ߠ�w e�8�$⿄����/�M{*}��W�]˷.�CK\�ުx���/$�WP w���r� |i���&�}�{�X� �>��$-��l���?-z���g����lΆ���(F���h�vS*���b���߲ڡn,|)mrH[���a�3�ר�[1��3o_�U�3�TC�$��(�=�)0�kgP���� ��u�^=��4 �WYCҸ:��vQ�ר�X�à��tk�m,�t*��^�,�}D*� �"(�I��9R����>`�`��[~Q]�#af��i6l��8���6�:,s�s�N6�j"�A4���IuQ��6E,�GnH��zS�HO�uk�5$�I�4��ؤ�Q9�@��C����wp �BGv[]�u�Ov��� 0I4���\��y�����Q�Ѹ��~>Z��8�T��a��q�ޣ;z��a���/��S��I:�ܫ_�|������>=Z����8:�S��U�I�J��"IY���8%b8���H��:�QO�6�;7�I�S��J��ҌAά3��>c���E+&jf$eC+�z�;��V����� �r���ʺ������my�e���aQ�f&��6�ND ��.:��NT�vm�<- u���ǝ\MvZY�N�NT��-A�>jr!S��n�O 1�3�Ns�%�3D@���`������ܟ 1�^c<���� �a�ɽ�̲�Xë#�w�|y�cW�=�9I*H8�p�^(4���՗�k��arOcW�tO�\�ƍR��8����'�K���I�Q�����?5�>[�}��yU�ײ -h��=��% q�ThG�2�)���"ו3]�!kB��*p�FDl�A���,�eEi�H�f�Ps�����5�H:�Փ~�H�0Dت�D�I����h�F3�������c��2���E��9�H��5�zԑ�ʚ�i�X�=:m�xg�hd(�v����׊�9iS��O��d@0ڽ���:�p�5�h-��t�&���X�q�ӕ,��ie�|���7A�2���O%P��E��htj��Y1��w�Ѓ!����  ���� ࢽ��My�7�\�a�@�ţ�J �4�Ȼ�F�@o�̒?4�wx��)��]�P��~�����u�����5�����7X ��9��^ܩ�U;Iꭆ 5 �������eK2�7(�{|��Y׎ �V��\"���Z�1� Z�����}��(�Ǝ"�1S���_�vE30>���p;� ΝD��%x�W�?W?v����o�^V�i�d��r[��/&>�~`�9Wh��y�;���R�� � ;;ɮT��?����r$�g1�K����A��C��c��K��l:�'��3 c�ﳯ*"t8�~l��)���m��+U,z��`( �>yJ�?����h>��]��v��ЍG*�{`��;y]��I�T� ;c��NU�fo¾h���/$���|NS���1�S�"�H��V���T���4��uhǜ�]�v;���5�͠x��'C\�SBpl���h}�N����� A�Bx���%��ޭ�l��/����T��w�ʽ]D�=����K���ž�r㻠l4�S�O?=�k �M:� ��c�C�a�#ha���)�ѐxc�s���gP�iG�� {+���x���Q���I= �� z��ԫ+ �8"�k�ñ�j=|����c ��y��CF��/ ��*9ж�h{ �?4�o� ��k�m�Q�N�x��;�Y��4膚�a�w?�6�> e]�����Q�r�:����g�,i"�����ԩA� *M�<�G��b�if��l^M��5� �Ҩ�{����6J��ZJ�����P�*�����Y���ݛu�_4�9�I8�7���������,^ToR���m4�H��?�N�S�ѕw��/S��甍�@�9H�S�T��t�ƻ���ʒU��*{Xs�@����f��� ��֒Li�K{H�w^���������Ϥm�tq���s� ���ք��f:��o~s��g�r��ט� �S�ѱC�e]�x���a��) ���(b-$(�j>�7q�B?ӕ�F��hV25r[7 Y� }L�R��}����*sg+��x�r�2�U=�*'WS��ZDW]�WǞ�<��叓���{�$�9Ou4��y�90-�1�'*D`�c�^o?(�9��u���ݐ��'PI&� f�Jݮ�������:wS����jfP1F:X �H�9dԯ�� �˝[�_54 �}*;@�ܨ�� ð�yn�T���?�ןd�#���4rG�ͨ��H�1�|-#���Mr�S3��G�3�����)�.᧏3v�z֑��r����$G"�`j �1t��x0<Ɔ�Wh6�y�6��,œ�Ga��gA����y��b��)� �h�D��ß�_�m��ü �gG;��e�v��ݝ�nQ� ��C����-�*��o���y�a��M��I�>�<���]obD��"�:���G�A��-\%LT�8���c�)��+y76���o�Q�#*{�(F�⽕�y����=���rW�\p���۩�c���A���^e6��K������ʐ�cVf5$�'->���ՉN"���F�"�UQ@�f��Gb~��#�&�M=��8�ט�JNu9��D��[̤�s�o�~��� ��� G��9T�tW^g5y$b��Y'��س�Ǵ�=��U-2 #�MC�t(�i� �lj�@Q 5�̣i�*�O����s�x�K�f��}\��M{E�V�{�υ��Ƈ�����);�H����I��fe�Lȣr�2��>��W� I�Ȃ6������i��k�� �5�YOxȺ����>��Y�f5'��|��H+��98pj�n�.O�y�������jY��~��i�w'������l�;�s�2��Y��:'lg�ꥴ)o#'Sa�a�K��Z� �m��}�`169�n���"���x��I ��*+� }F<��cГ���F�P�������ֹ*�PqX�x۩��,� ��N�� �4<-����%����:��7����W���u�`����� $�?�I��&����o��o��`v�>��P��"��l���4��5'�Z�gE���8���?��[�X�7(��.Q�-��*���ތL@̲����v��.5���[��=�t\+�CNܛ��,g�SQnH����}*F�G16���&:�t��4ُ"A��̣��$�b �|����#rs��a�����T�� ]�<�j��B S�('$�ɻ� �wP;�/�n��?�ݜ��x�F��yUn�~mL*-�������Xf�wd^�a�}��f�,=t�׵i�.2/wpN�Ep8�OР���•��R�FJ� 55TZ��T �ɭ�<��]��/�0�r�@�f��V��V����Nz�G��^���7hZi����k��3�,kN�e|�vg�1{9]_i��X5y7� 8e]�U����'�-2,���e"����]ot�I��Y_��n�(JҼ��1�O ]bXc���Nu�No��pS���Q_���_�?i�~�x h5d'�(qw52] ��'ޤ�q��o1�R!���`ywy�A4u���h<קy���\[~�4�\ X�Wt/� 6�����n�F�a8��f���z �3$�t(���q��q�x��^�XWeN'p<-v�!�{�(>ӽDP7��ո0�y)�e$ٕv�Ih'Q�EA�m*�H��RI��=:��� ���4牢) �%_iN�ݧ�l]� �Nt���G��H�L��� ɱ�g<���1V�,�J~�ٹ�"K��Q�� 9�HS�9�?@��k����r�;we݁�]I�!{ �@�G�[�"��`���J:�n]�{�cA�E����V��ʆ���#��U9�6����j�#Y�m\��q�e4h�B�7��C�������d<�?J����1g:ٳ���=Y���D�p�ц� ׈ǔ��1�]26؜oS�'��9�V�FVu�P�h�9�xc�oq�X��p�o�5��Ա5$�9W�V(�[Ak�aY錎qf;�'�[�|���b�6�Ck��)��#a#a˙��8���=äh�4��2��C��4tm^ �n'c� ��]GQ$[Wҿ��i���vN�{Fu ��1�gx��1┷���N�m��{j-,��x�� Ūm�ЧS�[�s���Gna���䑴�� x�p 8<������97�Q���ϴ�v�aϚG��Rt�Һ׈�f^\r��WH�JU�7Z���y)�vg=����n��4�_)y��D'y�6�]�c�5̪ �\� �PF�k����&�c;��cq�$~T�7j ���nç]�<�g ":�to�t}�159�<�/�8������m�b�K#g'I'.W����� 6��I/��>v��\�MN��g���m�A�yQL�4u�Lj�j9��#44�t��l^�}L����n��R��!��t��±]��r��h6ٍ>�yҏ�N��fU�� ���� Fm@�8}�/u��jb9������he:A�y�ծw��GpΧh�5����l}�3p468��)U��d��c����;Us/�֔�YX�1�O2��uq�s��`hwg�r~�{ R��mhN��؎*q 42�*th��>�#���E����#��Hv�O����q�}����� 6�e��\�,Wk�#���X��b>��p}�դ��3���T5��†��6��[��@ �P�y*n��|'f�֧>�lư΂�̺����SU�'*�q�p�_S�����M�� '��c�6��� ��m�� ySʨ;M��r���Ƌ�m�Kxo,���Gm�P��A�G�:��i��w�9�}M(�^�V��$ǒ�ѽ�9���|���� �a����J�SQ�a���r�B;����}���ٻ֢�2�%U���c�#�g���N�a�ݕ�'�v�[�OY'��3L�3�;,p�]@�S��{ls��X�'���c�jw� k'a�.��}�}&�� �dP�*�bK=ɍ!����;3n�gΊU�ߴmt�'*{,=SzfD� A��ko~�G�aoq�_mi}#�m�������P�Xhύ��� �mxǍ�΂���巿zf��Q���c���|kc�����?���W��Y�$���_Lv����l߶��c���`?����l�j�ݲˏ!V��6����U�Ђ(A���4y)H���p�Z_�x��>���e�� R��$�/�`^'3qˏ�-&Q�=?��CFVR �D�fV�9��{�8g�������n�h�(P"��6�[�D���< E�����~0<@�`�G�6����Hг�cc�� �c�K.5��D��d�B���`?�XQ��2��ٿyqo&+�1^� DW�0�ꊩ���G�#��Q�nL3��c���������/��x ��1�1 [y�x�პCW��C�c�UĨ80�m�e�4.{�m��u���I=��f�����0QRls9���f���������9���~f�����Ǩ��a�"@�8���ȁ�Q����#c�ic������G��$���G���r/$W�(��W���V�"��m�7�[m�A�m����bo��D� j����۳� l���^�k�h׽����� ��#� iXn�v��eT�k�a�^Y�4�BN�� ĕ�� 0    !01@Q"2AaPq3BR������ ? � ��@4�Q�����T3,���㺠�W�[=JK�Ϟ���2�r^7��vc�:�9 �E�ߴ�w�S#d���Ix��u��:��Hp��9E!�� V 2;73|F��9Y���*ʬ�F��D����u&���y؟��^EA��A��(ɩ���^��GV:ݜDy�`��Jr29ܾ�㝉��[���E;Fzx��YG��U�e�Y�C���� ����v-tx����I�sם�Ę�q��Eb�+P\ :>�i�C'�;�����k|z�رn�y]�#ǿb��Q��������w�����(�r|ӹs��[�D��2v-%��@;�8<a���[\o[ϧw��I!��*0�krs)�[�J9^��ʜ��p1)� "��/_>��o��<1����A�E�y^�C��`�x1'ܣn�p��s`l���fQ��):�l����b>�Me�jH^?�kl3(�z:���1ŠK&?Q�~�{�ٺ�h�y���/�[��V�|6��}�KbX����mn[-��7�5q�94�������dm���c^���h� X��5��<�eޘ>G���-�}�دB�ޟ� ��|�rt�M��V+�]�c?�-#ڛ��^ǂ}���Lkr���O��u�>�-D�ry� D?:ޞ�U��ǜ�7�V��?瓮�"�#���r��չģVR;�n���/_� ؉v�ݶe5d�b9��/O��009�G���5n�W����JpA�*�r9�>�1��.[t���s�F���nQ� V 77R�]�ɫ8����_0<՜�IF�u(v��4��F�k�3��E)��N:��yڮe��P�`�1}�$WS��J�SQ�N�j �ٺ��޵�#l���ј(�5=��5�lǏmoW�v-�1����v,W�mn��߀$x�<����v�j(����c]��@#��1������Ǔ���o'��u+����;G�#�޸��v-lη��/(`i⣍Pm^� ��ԯ̾9Z��F��������n��1��� ��]�[��)�'������ :�֪�W��FC����� �B9،!?���]��V��A�Վ�M��b�w��G F>_DȬ0¤�#�QR�[V��kz���m�w�"��9ZG�7'[��=�Q����j8R?�zf�\a�=��O�U����*oB�A�|G���2�54 �p��.w7� �� ��&������ξxGHp� B%��$g�����t�Џ򤵍z���HN�u�Я�-�'4��0�� ;_�� 3     !01"@AQa2Pq#3BR������ ? � �ʩca��en��^��8���<�u#��m*08r��y�N"�<�Ѳ0��@\�p��� �����Kv�D��J8�Fҽ� �f�Y��-m�ybX�NP����}�!*8t(�OqѢ��Q�wW�K��ZD��Δ^e��!� ��B�K��p~�����e*l}z#9ң�k���q#�Ft�o��S�R����-�w�!�S���Ӥß|M�l޶V��!eˈ�8Y���c�ЮM2��tk���� ������J�fS����Ö*i/2�����n]�k�\���|4yX�8��U�P.���Ы[���l��@"�t�<������5�lF���vU�����W��W��;�b�cД^6[#7@vU�xgZv��F�6��Q,K�v��� �+Ъ��n��Ǣ��Ft���8��0��c�@�!�Zq s�v�t�;#](B��-�nῃ~���3g������5�J�%���O������n�kB�ĺ�.r��+���#�N$?�q�/�s�6��p��a����a��J/��M�8��6�ܰ"�*������ɗud"\w���aT(����[��F��U՛����RT�b���n�*��6���O��SJ�.�ij<�v�MT��R\c��5l�sZB>F��<7�;EA��{��E���Ö��1U/�#��d1�a�n.1ě����0�ʾR�h��|�R��Ao�3�m3 ��%�� ���28Q� ��y��φ���H�To�7�lW>����#i`�q���c����a��� �m,B�-j����݋�'mR1Ήt�>��V��p���s�0IbI�C.���1R�ea�����]H�6�������� ��4B>��o��](��$B���m�����a�!=� �?�B� K�Ǿ+�Ծ"�n���K��*��+��[T#�{ E�J�S����Q�����s�5�:�U�\wĐ�f�3����܆&�)��� �I���Ԇw��E T�lrTf6Q|R�h:��[K�� �z��c֧�G�C��%\��_�a �84��HcO�bi��ؖV��7H �)*ģK~Xhչ0��4?�0��� �E<���}3���#���u�?�� ��|g�S�6ꊤ�|�I#Hڛ� �ա��w�X��9��7���Ŀ%�SL��y6č��|�F�a 8���b� �$�sק�h���b9RAu7�˨p�Č�_\*w��묦��F ����4D~�f����|(�"m���NK��i�S�>�$d7SlA��/�²����SL��|6N�}���S�˯���g��]6��; �#�.��<���q'Q�1|KQ$�����񛩶"�$r�b:���N8�w@��8$�� �AjfG|~�9F ���Y��ʺ��Bwؒ������M:I岎�G��`s�YV5����6��A �b:�W���G�q%l�����F��H���7�������Fsv7� �k�� 403WebShell
403Webshell
Server IP : 127.0.0.1  /  Your IP : 10.100.1.254
Web Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
System : Windows NT WIZC-EXTRANET 10.0 build 19045 (Windows 10) AMD64
User : SYSTEM ( 0)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Users/owner/ZAP/plugin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : C:/Users/owner/ZAP/plugin/ZapVersions.xml
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<ZAP>
    <core>
        <version>2.16.1</version>
        <daily-version>D-2021-10-18</daily-version>
        <daily>
            <url>https://github.com/zaproxy/zaproxy/releases/download/w2021-10-18/ZAP_WEEKLY_D-2021-10-18.zip</url>
            <file>ZAP_WEEKLY_D-2021-10-18.zip</file>
            <hash>SHA-256:9d4bcb12e47293f3cbc4c32285b8469e620f092bb2519e65e12e5e528a25a8ad</hash>
            <size>188556676</size>
        </daily>
        <windows32>
            <url>https://github.com/zaproxy/zaproxy/releases/download/v2.16.1/ZAP_2_16_1_windows-x32.exe</url>
            <file>ZAP_2_16_1_windows-x32.exe</file>
            <hash>SHA-256:8437978b03c88f83933e07319dccb3c958c9db97ef8abc571e56c30938797e1a</hash>
            <size>245210624</size>
        </windows32>
        <windows>
            <url>https://github.com/zaproxy/zaproxy/releases/download/v2.16.1/ZAP_2_16_1_windows.exe</url>
            <file>ZAP_2_16_1_windows.exe</file>
            <hash>SHA-256:d9aca657be405d5ac3cc82af576ea71cd9b35894c81e4a8dd696d56a69ce861d</hash>
            <size>245386752</size>
        </windows>
        <linux>
            <url>https://github.com/zaproxy/zaproxy/releases/download/v2.16.1/ZAP_2.16.1_Linux.tar.gz</url>
            <file>ZAP_2.16.1_Linux.tar.gz</file>
            <hash>SHA-256:5b2eb8319b085121a6e8ad50d69d67dbef8c867166f71a937bfc888d247a2ac1</hash>
            <size>234364899</size>
        </linux>
        <mac>
            <url>https://github.com/zaproxy/zaproxy/releases/download/v2.16.1/ZAP_2.16.1.dmg</url>
            <file>ZAP_2.16.1.dmg</file>
            <hash>SHA-256:79d7bc6db7e9583d3d90549791843998f0cf170ed975cfa01fac657f2e0d9120</hash>
            <size>262910572</size>
        </mac>
        <relnotes>Bug fix and enhancement release.</relnotes>
        <relnotes-url>https://www.zaproxy.org/docs/desktop/releases/2.16.1/</relnotes-url>
    </core>
    <addon>accessControl</addon>
    <addon_accessControl>
        <name>Access Control Testing</name>
        <description>Adds a set of tools for testing access control in web applications.</description>
        <author>ZAP Dev Team</author>
        <version>10</version>
        <file>accessControl-alpha-10.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.14.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Link website alert pages and help (Issues 8189).&lt;/li&gt;
&lt;li&gt;The results table now presents the same context menu as other similar tables (History, Search, etc) facilitating copying URLs, etc (Issue 8356).&lt;/li&gt;
&lt;li&gt;Now has a table export button (Issue 8356).&lt;/li&gt;
&lt;li&gt;Adjusted some labels/titles to use title caps (Issue 2000 &amp;amp; 8356).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Now uses the General Font (Issue 8356), as set in the Display options.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/accessControl-v10/accessControl-alpha-10.zap</url>
        <hash>SHA-256:8e068a789650cd31a5a4592cf57af3dbcb04b98f6fcd20bf752889c3843cbce8</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/access-control-testing/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-03-25</date>
        <size>597028</size>
        <not-before-version>2.14.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.17.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_accessControl>
    <addon>alertFilters</addon>
    <addon_alertFilters>
        <name>Alert Filters</name>
        <description>Allows you to automate the changing of alert risk levels.</description>
        <author>ZAP Dev Team</author>
        <version>24</version>
        <file>alertFilters-release-24.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Use the alert reference for statistics.&lt;/li&gt;
&lt;li&gt;Workaround core issue that prevents the filters to be correctly applied (Issue 8888).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Added parameter descriptions for the ZAP API.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/alertFilters-v24/alertFilters-release-24.zap</url>
        <hash>SHA-256:33ca1609f8b63501d0e55c1c3a12ed3c9fadb63e1877b7142fde28aaad6cc4ff</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/alert-filters/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>569827</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>pscan</id>
                    <version>&gt;= 0.1.0 &amp; &lt; 1.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_alertFilters>
    <addon>allinonenotes</addon>
    <addon_allinonenotes>
        <name>All In One Notes</name>
        <description>A simple extension to view all notes in one pane.</description>
        <author>David Vassallo</author>
        <version>2</version>
        <file>allinonenotes-alpha-2.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add info and repo URLs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Update link to repository.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/allinonenotes-v2/allinonenotes-alpha-2.zap</url>
        <hash>SHA-256:9e70d6e76b72692e9c0cb64002a692b710710e688ea2d8834818086300632d2a</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/all-in-one-notes/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>249532</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_allinonenotes>
    <addon>ascanrules</addon>
    <addon_ascanrules>
        <name>Active scanner rules</name>
        <description>The release status Active Scanner rules</description>
        <author>ZAP Dev Team</author>
        <version>72</version>
        <file>ascanrules-release-72.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Some Postgres error messages in the SQL Injection scan rule.&lt;/li&gt;
&lt;li&gt;All rules have been tagged of interest to Penetration Testers.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;SQL Injection scan rule to start using ComparableResponse - part of the work to reduce False Positives.&lt;/li&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;li&gt;Due to it being 2025 and the mass adoption of HTTPS: De-prioritized plain HTTP payloads in the External Redirect scan rule.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;SQL Injection scan rule to treat a 500 response to an SQLi attack as a likely vulnerability.&lt;/li&gt;
&lt;li&gt;Use location header in SQL injection response comparisons (Issue 8651).&lt;/li&gt;
&lt;li&gt;Addressed False Negative with simple allow list handling in the External Redirect scan rule.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/ascanrules-v72/ascanrules-release-72.zap</url>
        <hash>SHA-256:421f1f2275c2f0d2904f83ea59e3991b5c0f94cf600e2a996a89933ec1e5fe8e</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/active-scan-rules/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>3291496</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;= 0.3.0</version>
                </addon>
                <addon>
                    <id>oast</id>
                    <version>&gt;= 0.7.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_ascanrules>
    <addon>ascanrulesAlpha</addon>
    <addon_ascanrulesAlpha>
        <name>Active scanner rules (alpha)</name>
        <description>The alpha status Active Scanner rules</description>
        <author>ZAP Dev Team</author>
        <version>49</version>
        <file>ascanrulesAlpha-alpha-49.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;All rules (except examples) have been tagged of interest to Penetration Testers.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/ascanrulesAlpha-v49/ascanrulesAlpha-alpha-49.zap</url>
        <hash>SHA-256:2be5e3162a41edfe99b03d54cd1f92b913ca0a4f9b8b86954d86d2b0571c91f9</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/active-scan-rules-alpha/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>406428</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_ascanrulesAlpha>
    <addon>ascanrulesBeta</addon>
    <addon_ascanrulesBeta>
        <name>Active scanner rules (beta)</name>
        <description>The beta status Active Scanner rules</description>
        <author>ZAP Dev Team</author>
        <version>59</version>
        <file>ascanrulesBeta-beta-59.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The extension now has a user friendly name for use in the GUI.&lt;/li&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;All rules have been tagged of interest to Penetration Testers.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/ascanrulesBeta-v59/ascanrulesBeta-beta-59.zap</url>
        <hash>SHA-256:9320a087f184f0eecdad4066d1ee0cf1bc11dffebe2e72d7ed53c6714635fab6</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/active-scan-rules-beta/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>1778891</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>database</id>
                    <version>&gt;= 0.1.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;= 0.3.0</version>
                </addon>
                <addon>
                    <id>oast</id>
                    <version>&gt;= 0.7.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_ascanrulesBeta>
    <addon>attacksurfacedetector</addon>
    <addon_attacksurfacedetector>
        <name>Attack Surface Detector</name>
        <description>The Attack Surface Detector analyzes web application source code to generate endpoints that can be used for penetration testing.</description>
        <author>Secure Decisions (Matthew DeLetto)</author>
        <version>1.1.4</version>
        <file>attacksurfacedetector-alpha-1.1.4.zap</file>
        <status>alpha</status>
        <changes>Various incremental changes (see https://github.com/secdec/attack-surface-detector-zap/releases)&lt;br&gt;
        Fix un-handled exception when target unavailable &amp; address various "house keeping" tasks.&lt;br&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/2.7/attacksurfacedetector-alpha-1.1.4.zap</url>
        <hash>SHA1:e21758c2cdcbc7806f44cc986a88360457eff82e</hash>
        <info>https://github.com/secdec/attack-surface-detector-zap/wiki</info>
        <repo>https://github.com/secdec/attack-surface-detector-zap/</repo>
        <date>2019-03-07</date>
        <size>15604948</size>
        <not-before-version>2.7.0</not-before-version>
    </addon_attacksurfacedetector>
    <addon>authhelper</addon>
    <addon_authhelper>
        <name>Authentication Helper</name>
        <description>Helps identify and set up authentication handling</description>
        <author>ZAP Dev Team</author>
        <version>0.26.0</version>
        <file>authhelper-beta-0.26.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add configuration support for the wait time after Client Script Based Authentication.&lt;/li&gt;
&lt;li&gt;Include the Web Element being interacted with in the Client Script Based Authentication diagnostics.&lt;/li&gt;
&lt;li&gt;Allow to enable authentication diagnostics for Client Script and Browser Based Authentication through the GUI.&lt;/li&gt;
&lt;li&gt;Automation Framework errors to the Authentication Report.&lt;/li&gt;
&lt;li&gt;Replace TOTP token during Client Script Based Authentication.&lt;/li&gt;
&lt;li&gt;Include more diagnostics in Client Script and Browser Based Authentication methods.&lt;/li&gt;
&lt;li&gt;Improve Authentication Report:
&lt;ul&gt;
&lt;li&gt;Add the ID of the step to make it easier to match with extracted screenshots.&lt;/li&gt;
&lt;li&gt;Include the script used by the Client Script Based Authentication.&lt;/li&gt;
&lt;li&gt;Add the initiator to the HTTP Messages to know what those messages correspond to.&lt;/li&gt;
&lt;li&gt;Include the tag name of the Web Element, now collecting &lt;code&gt;button&lt;/code&gt;s along with &lt;code&gt;input&lt;/code&gt;s.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Detection of session tokens in non standard headers.&lt;/li&gt;
&lt;li&gt;Search for username/password fields under shadow DOMs with Browser Based Authentication.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Warn when the recorded script used with Client Script Based Authentication does not launch a browser.&lt;/li&gt;
&lt;li&gt;Updated to depend on Zest add-on 48.6.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Depend on reports 0.39.0 to include AF errors.&lt;/li&gt;
&lt;li&gt;Use Header Based Session Management configuration to find a better candidate authentication message with Client Script and Browser Based Authentication methods.&lt;/li&gt;
&lt;li&gt;Client Script authentication to refresh the page of no suitable verification URL found.&lt;/li&gt;
&lt;li&gt;Wait for the detection of the session method in Client Script Based Authentication method.&lt;/li&gt;
&lt;li&gt;Include the name of the interaction in the Client Script Based Authentication diagnostics.&lt;/li&gt;
&lt;li&gt;Clear fields before sending keys for Browser Based Authentication, including when using steps.&lt;/li&gt;
&lt;li&gt;Do not add an empty line to the start of the Other Info of Session Management Response Identified scan rule's alerts.&lt;/li&gt;
&lt;li&gt;Update the Client Script Based Authentication help page with the new Automation Framework &lt;code&gt;scriptInline&lt;/code&gt; field.&lt;/li&gt;
&lt;li&gt;The Authentication Request Detection and Session Management Detection scan rules now skip resources (images, css, js, etc) which are unlikely to be relevant.&lt;/li&gt;
&lt;li&gt;The Verification Detection scan rule now skips messages that seem related to login/logout/registration functionality.&lt;/li&gt;
&lt;li&gt;Now depends on minimum Common Library version 1.33.0.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Correct descriptions of the Zest script steps in the Authentication Report.&lt;/li&gt;
&lt;li&gt;Fix loading/saving of Client Script Based Authentication through the GUI.&lt;/li&gt;
&lt;li&gt;Inject user credentials into the script when running the Client Script Based Authentication browser integration.&lt;/li&gt;
&lt;li&gt;Delay when recording diagnostics.&lt;/li&gt;
&lt;li&gt;Allow to use zero login page wait for Client Script and Browser Based Authentication methods through the GUI.&lt;/li&gt;
&lt;li&gt;Ensure Client Script Based Authentication method has a clean state when reauthenticating.&lt;/li&gt;
&lt;li&gt;Handle missing username field in Browser Based Authentication.&lt;/li&gt;
&lt;li&gt;Correct the processing of cookies with the same name in Header Based Session Management method.&lt;/li&gt;
&lt;li&gt;Correct redirection handling when checking verification URLs.&lt;/li&gt;
&lt;li&gt;Verification URL comparison.&lt;/li&gt;
&lt;li&gt;Use the session token from JSON string response.&lt;/li&gt;
&lt;li&gt;Do not auto configure the Header Based Session Management method with duplicated session tokens.&lt;/li&gt;
&lt;li&gt;Ensure that auth messages with both known and unknown Session tokens are correctly processed.&lt;/li&gt;
&lt;li&gt;Respect Client Script Based Authentication's Login Page Wait when authenticating in browsers (e.g. AJAX Spider).&lt;/li&gt;
&lt;li&gt;Correct handling of JSON arrays in the Authentication Request Identified scan rule.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/authhelper-v0.26.0/authhelper-beta-0.26.0.zap</url>
        <hash>SHA-256:b1f803d8faa1355e523cd1e59e13fd3d6519a7b673f36c2b9ad9ff5d166686eb</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/authentication-helper/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>1317779</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.33.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>database</id>
                    <version>&gt;=0.8.0 &amp; &lt; 1.0.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.6.0</version>
                </addon>
                <addon>
                    <id>pscan</id>
                    <version>&gt;= 0.1.0 &amp; &lt; 1.0.0</version>
                </addon>
                <addon>
                    <id>selenium</id>
                    <version>15.*</version>
                </addon>
                <addon>
                    <id>zest</id>
                    <version>&gt;=48.6.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_authhelper>
    <addon>authstats</addon>
    <addon_authstats>
        <name>Authentication Statistics</name>
        <description>Records logged in/out statistics for all contexts in scope.</description>
        <author>ZAP Dev Team</author>
        <version>2</version>
        <file>authstats-alpha-2.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add repo URL.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Dynamically unload the add-on.&lt;/li&gt;
&lt;li&gt;Change info URL to link to the site.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/authstats-v2/authstats-alpha-2.zap</url>
        <hash>SHA-256:cfb604c27f3a7a58e7b5aa55fe9f19a9ce5561fab3ef7d3f6c72845671fb5dcf</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/authentication-statistics/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>247499</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_authstats>
    <addon>automation</addon>
    <addon_automation>
        <name>Automation Framework</name>
        <description>Automation Framework.</description>
        <author>ZAP Dev Team</author>
        <version>0.50.0</version>
        <file>automation-beta-0.50.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add support for the wait time of the Client Script Based Authentication.&lt;/li&gt;
&lt;li&gt;Allow to inline scripts for Script and Client Script Based Authentication.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Adjusted further dialog, progress, and log messages with regard to preventing inclusion of commas in scan rule ID numbers. As well as ensuring consistency in use of ID (full caps) for table column headings, and the Add Add-ons dialog.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Correctly handle missing script engines.&lt;/li&gt;
&lt;li&gt;Correct error messages of the statistics test.&lt;/li&gt;
&lt;li&gt;Allow to use zero login page wait for Client Script and Browser Based Authentication methods.&lt;/li&gt;
&lt;li&gt;Ensure log and progress messages related to scripts and script engines are not all referred to as session management related.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.50.0/automation-beta-0.50.0.zap</url>
        <hash>SHA-256:8ceefb34a122d9dbe3fc56874013a757617388c7b2f32054973a323a0ba9ef54</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/automation-framework/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>1997816</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.31.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;= 0.15.0 &amp; &lt; 1.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_automation>
    <addon>beanshell</addon>
    <addon_beanshell>
        <name>BeanShell Console</name>
        <description>Provides a BeanShell Console</description>
        <author>ZAP Dev Team</author>
        <version>7</version>
        <file>beanshell-beta-7.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add info and repo URLs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Improve permissions and space handling when saving.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/beanshell-v7/beanshell-beta-7.zap</url>
        <hash>SHA-256:0a83cb7d0369ccef50768ccbda1e6c6d82b9f4e3bd9372b38fd32cc21f6a30fb</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/bean-shell/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>577838</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_beanshell>
    <addon>browserView</addon>
    <addon_browserView>
        <name>Browser View</name>
        <description>Adds an option to render HTML responses like a browser</description>
        <author>ZAP Dev Team</author>
        <version>6</version>
        <file>browserView-alpha-6.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add info and repo URLs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.12.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Make missing JavaFX logging less verbose in regular use.&lt;/li&gt;
&lt;li&gt;Update help with the requirements to use the add-on.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/browserView-v6/browserView-alpha-6.zap</url>
        <hash>SHA-256:e53cfde3a009a4be2e40c84ac02e05114505160bd2bab6cbb42416ab9a65b16c</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/browser-view/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2023-03-13</date>
        <size>197667</size>
        <not-before-version>2.12.0</not-before-version>
    </addon_browserView>
    <addon>bruteforce</addon>
    <addon_bruteforce>
        <name>Forced Browse</name>
        <description>Forced browsing of files and directories using code from the OWASP DirBuster tool</description>
        <author>ZAP Dev Team</author>
        <version>17</version>
        <file>bruteforce-beta-17.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/bruteforce-v17/bruteforce-beta-17.zap</url>
        <hash>SHA-256:4c5828447d69da32e450e65a6b082284b56538383d5cf4036b743805115a9a90</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/forced-browse/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>552468</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.23.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_bruteforce>
    <addon>bugtracker</addon>
    <addon_bugtracker>
        <name>Bug Tracker</name>
        <description>Bug Tracker extension.</description>
        <author>ZAP Dev Team</author>
        <version>4</version>
        <file>bugtracker-alpha-4.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.1.&lt;/li&gt;
&lt;li&gt;Dependency updates.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Updated to use PAT not password (https://github.blog/changelog/2021-08-12-git-password-authentication-is-shutting-down/).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/bugtracker-v4/bugtracker-alpha-4.zap</url>
        <hash>SHA-256:37c57f8e7f4a1608500527ac1831f8b078427f804ea04ad5790a2970e3e1b722</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/bug-tracker/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2022-09-23</date>
        <size>3707425</size>
        <not-before-version>2.11.1</not-before-version>
    </addon_bugtracker>
    <addon>callgraph</addon>
    <addon_callgraph>
        <name>Call Graph</name>
        <description>Allows the user to view a call graph of the selected resources</description>
        <author>Colm O'Flaherty</author>
        <version>5</version>
        <file>callgraph-alpha-5.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help.&lt;/li&gt;
&lt;li&gt;Add info and repo URLs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/callgraph-v5/callgraph-alpha-5.zap</url>
        <hash>SHA-256:0874ce5aad0c4bbf28f72627a4940759d328396e12b7d6a5596f2e41bf24dc4e</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/call-graph/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>925930</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_callgraph>
    <addon>callhome</addon>
    <addon_callhome>
        <name>Call Home</name>
        <description>Handles all of the calls to ZAP services.</description>
        <author>ZAP Dev Team</author>
        <version>0.14.0</version>
        <file>callhome-release-0.14.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Network stats to telemetry.&lt;/li&gt;
&lt;li&gt;Sequence stats to telemetry.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/callhome-v0.14.0/callhome-release-0.14.0.zap</url>
        <hash>SHA-256:100870954c18d9f9c9ed2db5348eb069262a7c177bfbe158355c1b20e9fa5cef</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/call-home/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>322668</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_callhome>
    <addon>client</addon>
    <addon_client>
        <name>Client Side Integration</name>
        <description>Exposes client (browser) side information in ZAP using Firefox and Chrome extensions.</description>
        <author>ZAP Dev Team</author>
        <version>0.16.0</version>
        <file>client-alpha-0.16.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Client Spider scope check.&lt;/li&gt;
&lt;li&gt;Added optional parameters for Page Load Time and Max Crawl Depth to the Client Spider API.&lt;/li&gt;
&lt;li&gt;Recording advice and guidance.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated Chrome and Firefox extensions to v0.1.3.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Client Spider to allow all requests while authenticating.&lt;/li&gt;
&lt;li&gt;Ensure that the &lt;code&gt;clientSpider&lt;/code&gt; API endpoint &lt;code&gt;status&lt;/code&gt; returns 100(%) only when finished.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/client-v0.16.0/client-alpha-0.16.0.zap</url>
        <hash>SHA-256:a26420e71737faa67e3a7b70d6ebfbc5216f4680ab4ba3dbf09343072028c21c</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/client-side-integration/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>2624539</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.23.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.8.0</version>
                </addon>
                <addon>
                    <id>selenium</id>
                    <version>&gt;=15.14.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_client>
    <addon>commonlib</addon>
    <addon_commonlib>
        <name>Common Library</name>
        <description>A common library, for use by other add-ons.</description>
        <author>ZAP Dev Team</author>
        <version>1.33.0</version>
        <file>commonlib-release-1.33.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Constants related to authentication.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/commonlib-v1.33.0/commonlib-release-1.33.0.zap</url>
        <hash>SHA-256:07f9cf5358f4407a91e4fc7bde87c2a01acc49ec57d80d3b5a317cabf3e4cc67</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/common-library/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>15250049</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_commonlib>
    <addon>communityScripts</addon>
    <addon_communityScripts>
        <name>Community Scripts</name>
        <description>Useful ZAP scripts written by the ZAP community.</description>
        <author>ZAP Community</author>
        <version>19</version>
        <file>communityScripts-alpha-19.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;extender/arpSyndicateSubdomainDiscovery.js - uses the API of &lt;a href="https://www.subdomain.center/"&gt;ARPSyndicate's Subdomain Center&lt;/a&gt;
to find and add subdomains to the Sites Tree.&lt;/li&gt;
&lt;li&gt;passive/JavaDisclosure.js - Passive scan for Java error messages leaks&lt;/li&gt;
&lt;li&gt;httpsender/RsaEncryptPayloadForZap.py - A script that encrypts requests using RSA&lt;/li&gt;
&lt;li&gt;selenium/FillOTPInMFA.js - A script that fills the OTP in MFA&lt;/li&gt;
&lt;li&gt;authentication/KratosApiAuthentication.js - A script to authenticate with Kratos using the API flow&lt;/li&gt;
&lt;li&gt;authentication/KratosBrowserAuthentication.js - A script to authenticate with Kratos using the browser flow&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.15.0.&lt;/li&gt;
&lt;li&gt;Use Prettier to format all JavaScript scripts.&lt;/li&gt;
&lt;li&gt;Update the following scripts to implement the &lt;code&gt;getMetadata()&lt;/code&gt; function with revised metadata:
&lt;ul&gt;
&lt;li&gt;active/Cross Site WebSocket Hijacking.js&lt;/li&gt;
&lt;li&gt;active/cve-2019-5418.js&lt;/li&gt;
&lt;li&gt;active/gof_lite.js&lt;/li&gt;
&lt;li&gt;active/JWT None Exploit.js&lt;/li&gt;
&lt;li&gt;active/SSTI.js&lt;/li&gt;
&lt;li&gt;passive/clacks.js&lt;/li&gt;
&lt;li&gt;passive/CookieHTTPOnly.js&lt;/li&gt;
&lt;li&gt;passive/detect_csp_notif_and_reportonly.js&lt;/li&gt;
&lt;li&gt;passive/detect_samesite_protection.js&lt;/li&gt;
&lt;li&gt;passive/f5_bigip_cookie_internal_ip.js&lt;/li&gt;
&lt;li&gt;passive/find base64 strings.js&lt;/li&gt;
&lt;li&gt;passive/Find Credit Cards.js&lt;/li&gt;
&lt;li&gt;passive/Find Emails.js&lt;/li&gt;
&lt;li&gt;passive/Find Hashes.js&lt;/li&gt;
&lt;li&gt;passive/Find HTML Comments.js&lt;/li&gt;
&lt;li&gt;passive/Find IBANs.js&lt;/li&gt;
&lt;li&gt;passive/Find Internal IPs.js&lt;/li&gt;
&lt;li&gt;passive/find_reflected_params.py&lt;/li&gt;
&lt;li&gt;passive/HUNT.py&lt;/li&gt;
&lt;li&gt;passive/Mutliple Security Header Check.js&lt;/li&gt;
&lt;li&gt;passive/google_api_keys_finder.js&lt;/li&gt;
&lt;li&gt;passive/JavaDisclosure.js&lt;/li&gt;
&lt;li&gt;passive/Report non static sites.js&lt;/li&gt;
&lt;li&gt;passive/RPO.js&lt;/li&gt;
&lt;li&gt;passive/s3.js&lt;/li&gt;
&lt;li&gt;passive/Server Header Disclosure.js&lt;/li&gt;
&lt;li&gt;passive/SQL injection detection.js&lt;/li&gt;
&lt;li&gt;passive/Telerik Using Poor Crypto.js&lt;/li&gt;
&lt;li&gt;passive/Upload form discovery.js&lt;/li&gt;
&lt;li&gt;passive/X-Powered-By_header_checker.js&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;httpsender/Alert on Unexpected Content Types.js now checks for common content-types (&lt;code&gt;json&lt;/code&gt;, &lt;code&gt;xml&lt;/code&gt;, and &lt;code&gt;yaml&lt;/code&gt;) more consistently.&lt;/li&gt;
&lt;li&gt;targeted/request_to_xml.js no longer uses deprecated method to show the message in the editor dialogue.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/community-scripts/releases/download/v19/communityScripts-alpha-19.zap</url>
        <hash>SHA-256:f96502b471dd349ae2fceba4a68bde9465091580040ad8798e13bb176030bbba</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/community-scripts/</info>
        <repo>https://github.com/zaproxy/community-scripts/</repo>
        <date>2024-07-01</date>
        <size>475346</size>
        <not-before-version>2.15.0</not-before-version>
    </addon_communityScripts>
    <addon>coreLang</addon>
    <addon_coreLang>
        <name>Core Language Files</name>
        <description>Translations of the core language files</description>
        <author>ZAP Dev Team</author>
        <version>15</version>
        <file>coreLang-release-15.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update the languages files from Crowdin.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.1.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/coreLang-v15/coreLang-release-15.zap</url>
        <hash>SHA-256:d8258b914ffc95820dd045acf56677668a8cbbfc759290f72e30210056dfb88c</hash>
        <info>https://crowdin.com/project/zaproxy</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2022-02-14</date>
        <size>4616009</size>
        <not-before-version>2.11.1</not-before-version>
    </addon_coreLang>
    <addon>custompayloads</addon>
    <addon_custompayloads>
        <name>Custom Payloads</name>
        <description>Ability to add, edit or remove payloads that are used i.e. by active scanners</description>
        <author>ZAP Dev Team</author>
        <version>0.14.0</version>
        <file>custompayloads-release-0.14.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Promoted to Release status.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;The superfluous/unused ID element of the custom payloads has been removed from the GUI and config.&lt;/li&gt;
&lt;li&gt;Now depends on the Common Library add-on.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help button to Options panel and add further detailed Help content.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The add-on will no longer attempt to save or load Payloads for which there is no Category.&lt;/li&gt;
&lt;li&gt;Ensure file is selected, exists, and is readable when attempting to import multiple payloads.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/custompayloads-v0.14.0/custompayloads-release-0.14.0.zap</url>
        <hash>SHA-256:fe99e67a3a456c70a25c35e5d25961c1dca417d2c94124316c2ea26965009ec2</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/custom-payloads/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-15</date>
        <size>292156</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.17.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_custompayloads>
    <addon>database</addon>
    <addon_database>
        <name>Database</name>
        <description>Provides database engines and related infrastructure.</description>
        <author>ZAP Dev Team</author>
        <version>0.8.0</version>
        <file>database-alpha-0.8.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Allow other add-ons to use Flyway for database migration tasks.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/database-v0.8.0/database-alpha-0.8.0.zap</url>
        <hash>SHA-256:c8e89451c763b1b399d9f801c8f230979d4569f849ff670d004dc2007399ba19</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/database/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-03-04</date>
        <size>23094734</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_database>
    <addon>dev</addon>
    <addon_dev>
        <name>Dev Add-on</name>
        <description>An add-on to help with development of ZAP.</description>
        <author>ZAP Dev Team</author>
        <version>0.10.0</version>
        <file>dev-alpha-0.10.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Basic CSRF test app.&lt;/li&gt;
&lt;li&gt;Page with input elements that appear after a delay and off the displayed screen.&lt;/li&gt;
&lt;li&gt;Auth app which uses multiple (faked) domains.&lt;/li&gt;
&lt;li&gt;An auth example where there's a div that may obscure the login fields.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/dev-v0.10.0/dev-alpha-0.10.0.zap</url>
        <hash>SHA-256:f749b0ec8d593fc16ec5798ce1e3668ceeb7d965dcaf029ae039acf5ebabe09a</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/dev-add-on/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-05-15</date>
        <size>182901</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.17.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.7.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_dev>
    <addon>diff</addon>
    <addon_diff>
        <name>Diff</name>
        <description>Displays a dialog showing the differences between 2 requests or responses. It uses diffutils and diff_match_patch</description>
        <author>ZAP Dev Team</author>
        <version>17</version>
        <file>diff-beta-17.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/diff-v17/diff-beta-17.zap</url>
        <hash>SHA-256:6629fdcd55e509dfaf1e1004204b3dca5a75bfb1593c11bd8281bd7c7fd367b9</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/diff/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>693148</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.23.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_diff>
    <addon>directorylistv1</addon>
    <addon_directorylistv1>
        <name>Directory List v1.0</name>
        <description>List of directory names to be used with Forced Browse or Fuzzer add-on.</description>
        <author>ZAP Dev Team</author>
        <version>9</version>
        <file>directorylistv1-release-9.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/directorylistv1-v9/directorylistv1-release-9.zap</url>
        <hash>SHA-256:71e5b57bcf89774267375426f2e67f789cf13a4b69c97c8946a325fa321d18ce</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/directory-list-v1.0/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>961164</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_directorylistv1>
    <addon>directorylistv2_3</addon>
    <addon_directorylistv2_3>
        <name>Directory List v2.3</name>
        <description>Lists of directory names to be used with Forced Browse or Fuzzer add-on.</description>
        <author>ZAP Dev Team</author>
        <version>4</version>
        <file>directorylistv2_3-release-4.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help.&lt;/li&gt;
&lt;li&gt;Add repo URL.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Change info URL to link to the site.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/directorylistv2_3-v4/directorylistv2_3-release-4.zap</url>
        <hash>SHA-256:3a8b04b9363b57acd9cf8cd67abce4c630f986e2b492a1ebd01eaa9587a0a199</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/directory-list-v2.3/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>8722229</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_directorylistv2_3>
    <addon>directorylistv2_3_lc</addon>
    <addon_directorylistv2_3_lc>
        <name>Directory List v2.3 LC</name>
        <description>Lists of lower case directory names to be used with Forced Browse or Fuzzer add-on.</description>
        <author>ZAP Dev Team</author>
        <version>4</version>
        <file>directorylistv2_3_lc-release-4.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help.&lt;/li&gt;
&lt;li&gt;Add repo URL.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Change info URL to link to the site.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/directorylistv2_3_lc-v4/directorylistv2_3_lc-release-4.zap</url>
        <hash>SHA-256:2603580ba53673c31800ef7373e7cc09de759369b6f8fb43cc9e5024ad5d9af4</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/directory-list-v2.3-lc/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>7569974</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_directorylistv2_3_lc>
    <addon>domxss</addon>
    <addon_domxss>
        <name>DOM XSS Active scanner rule</name>
        <description>DOM XSS Active scanner rule</description>
        <author>Aabha Biyani, ZAP Dev Team</author>
        <version>21</version>
        <file>domxss-release-21.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Handle exceptions while obtaining the XPath of an element.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/domxss-v21/domxss-release-21.zap</url>
        <hash>SHA-256:4902e5d519c7b4a68441d9fb3ae2edc1df3d1c4086333a2e4844279e65ea96ec</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/dom-xss-active-scan-rule/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>284336</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.29.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.1.0</version>
                </addon>
                <addon>
                    <id>selenium</id>
                    <version>&gt;= 15.13.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_domxss>
    <addon>encoder</addon>
    <addon_encoder>
        <name>Encoder</name>
        <description>Adds encode/decode/hash dialog and support for scripted processors as well</description>
        <author>ZAP Dev Team</author>
        <version>1.7.0</version>
        <file>encoder-release-1.7.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Address malformed HTML in the help.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/encoder-v1.7.0/encoder-release-1.7.0.zap</url>
        <hash>SHA-256:8ef98c344fc5ebd3362d9a4fc4bda9ebaffb0d35136a40499a2fda21cadb5715</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/encode-decode-hash/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>504247</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.23.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_encoder>
    <addon>evalvillain</addon>
    <addon_evalvillain>
        <name>Eval Villain</name>
        <description>Adds the Eval Villain extension to Firefox when launched from ZAP.</description>
        <author>Dennis Goodlett and the ZAP Dev Team</author>
        <version>0.4.0</version>
        <file>evalvillain-alpha-0.4.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with new version of Eval Villain.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.15.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/evalvillain-v0.4.0/evalvillain-alpha-0.4.0.zap</url>
        <hash>SHA-256:dedb6245cee2383b13eb4c0c58301ee2518c6e0af36359559f2e1638a8a076e3</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/eval-villain/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-11-25</date>
        <size>4957040</size>
        <not-before-version>2.15.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>selenium</id>
                    <version>&gt;=15.5.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_evalvillain>
    <addon>exim</addon>
    <addon_exim>
        <name>Import/Export</name>
        <description>Import and Export functionality</description>
        <author>ZAP Dev Team &amp; thatsn0tmysite</author>
        <version>0.14.0</version>
        <file>exim-beta-0.14.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Caps fix in Import menu (Issue 2000).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Sites Tree export now correctly handles node names with newlines and special characters (Issue 8858).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/exim-v0.14.0/exim-beta-0.14.0.zap</url>
        <hash>SHA-256:82502ddb13af4cf434f5f821a3df274cc505dc93f512574cf28cee77de3edb4d</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/import-export/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-03-25</date>
        <size>1054064</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.28.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_exim>
    <addon>fileupload</addon>
    <addon_fileupload>
        <name>FileUpload</name>
        <description>Detect File upload requests and scan them to find related vulnerabilities</description>
        <author>KSASAN preetkaran20@gmail.com</author>
        <version>1.2.1</version>
        <file>fileupload-alpha-1.2.1.zap</file>
        <status>alpha</status>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/2.7/fileupload-alpha-1.2.1.zap</url>
        <hash>SHA-256:84734320ed04f6e287cc0458897e99e80fe16d632d071e73187e446448b5fa7f</hash>
        <info>https://www.zaproxy.org/blog/2021-08-20-zap-fileupload-addon/</info>
        <repo>https://github.com/SasanLabs/owasp-zap-fileupload-addon/</repo>
        <date>2023-10-23</date>
        <size>78272</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_fileupload>
    <addon>formhandler</addon>
    <addon_formhandler>
        <name>Value Generator</name>
        <description>This Value Generator Add-on allows a user to define field names and values to be used when submitting values to an app. Fields can be added, modified, enabled/disabled, and deleted.</description>
        <author>ZAP Dev Team</author>
        <version>6.7.0</version>
        <file>formhandler-beta-6.7.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Depend on Common Library add-on, to provide the default/custom values to the other add-ons (Issue 8016).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Fixed an issue in the help which may cause images to be displayed inline impacting the flow of the text.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/formhandler-v6.7.0/formhandler-beta-6.7.0.zap</url>
        <hash>SHA-256:2adb0a7f60f7c43861cdeac14d0d72cde139abcaf12fdd6cb82cf4739e52bd81</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/value-generator/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>2128203</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.29.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_formhandler>
    <addon>fuzz</addon>
    <addon_fuzz>
        <name>Fuzzer</name>
        <description>Advanced fuzzer for manual testing</description>
        <author>ZAP Dev Team</author>
        <version>13.16.0</version>
        <file>fuzz-beta-13.16.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Use a scrollbar in the Default Category combo box instead of making the options panel larger (Issue 8923).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/fuzz-v13.16.0/fuzz-beta-13.16.0.zap</url>
        <hash>SHA-256:c39125db01a774b19b5f224d504a301a0f25a213e87a3ce58d90306a79a70701</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/fuzzer/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>2014901</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.23.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_fuzz>
    <addon>fuzzai</addon>
    <addon_fuzzai>
        <name>FuzzAI Files</name>
        <description>FuzzAI files which can be used with the ZAP fuzzer</description>
        <author>ZAP Dev Team</author>
        <version>0.0.1</version>
        <file>fuzzai-release-0.0.1.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;First version&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/fuzzai-v0.0.1/fuzzai-release-0.0.1.zap</url>
        <hash>SHA-256:7d60565b5814b8523514c5d8001d0bdf1f30f6d96cae9b4ac0abb45ee7abcaea</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/fuzzai-files/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-09-24</date>
        <size>50063</size>
        <not-before-version>2.15.0</not-before-version>
    </addon_fuzzai>
    <addon>fuzzdb</addon>
    <addon_fuzzdb>
        <name>FuzzDB Files</name>
        <description>FuzzDB files which can be used with the ZAP fuzzer</description>
        <author>ZAP Dev Team</author>
        <version>9</version>
        <file>fuzzdb-release-9.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated RAFT lists based on more recent SecLists contributions&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.1.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/fuzzdb-v9/fuzzdb-release-9.zap</url>
        <hash>SHA-256:c79537362cd6b383f447359685e3bd51795600b97ca0c1fadc4ba74828a7d4f4</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/fuzzdb-files/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2022-09-23</date>
        <size>6167205</size>
        <not-before-version>2.11.1</not-before-version>
    </addon_fuzzdb>
    <addon>fuzzdboffensive</addon>
    <addon_fuzzdboffensive>
        <name>FuzzDB Offensive</name>
        <description>FuzzDB web backdoors and attack files which can be used with the ZAP fuzzer or for manual penetration testing - contains files that may well be flagged by anti-virus tools</description>
        <author>ZAP Dev Team</author>
        <version>5</version>
        <file>fuzzdboffensive-release-5.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.14.0.&lt;/li&gt;
&lt;li&gt;Updated help and description to say this may cause problems with anti-virus tools (Issue 8297).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/fuzzdb-offensive/releases/download/v5/fuzzdboffensive-release-5.zap</url>
        <hash>SHA-256:9d7bf6f8df62e5ee56e72b47785e6027674127ae70604d9c4f6dc0cea1f536dc</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/fuzzdb-offensive/</info>
        <repo>https://github.com/zaproxy/fuzzdb-offensive/</repo>
        <date>2024-01-11</date>
        <size>523693</size>
        <not-before-version>2.14.0</not-before-version>
    </addon_fuzzdboffensive>
    <addon>gettingStarted</addon>
    <addon_gettingStarted>
        <name>Getting Started with ZAP Guide</name>
        <description>A short Getting Started with ZAP Guide</description>
        <author>ZAP Dev Team</author>
        <version>19</version>
        <file>gettingStarted-release-19.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update Getting Started Guide for 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/gettingStarted-v19/gettingStarted-release-19.zap</url>
        <hash>SHA-256:74ca76fbe518917005828d3b4f4392d8d91b5e11d1d6517a1ae9fc19f16bfd9b</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/getting-started-guide/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>968572</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_gettingStarted>
    <addon>graaljs</addon>
    <addon_graaljs>
        <name>GraalVM JavaScript</name>
        <description>Provides the GraalVM JavaScript engine for ZAP scripting.</description>
        <author>ZAP Dev Team</author>
        <version>0.9.0</version>
        <file>graaljs-alpha-0.9.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/graaljs-v0.9.0/graaljs-alpha-0.9.0.zap</url>
        <hash>SHA-256:8abec96df1ff90177953d5fffd4dfd57228c1a8d8e140a521e81ea80a256ca19</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/graalvm-javascript/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>24540532</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.24.0</version>
                </addon>
                <addon>
                    <id>scripts</id>
                    <version>&gt;=45.2.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_graaljs>
    <addon>graphql</addon>
    <addon_graphql>
        <name>GraphQL Support</name>
        <description>Inspect and attack GraphQL endpoints.</description>
        <author>ZAP Dev Team</author>
        <version>0.28.0</version>
        <file>graphql-alpha-0.28.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;A Null Pointer Exception which occurred when installing the add-on when Tech Detection (Wappalyzer) add-on was already installed (Issue 8902).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/graphql-v0.28.0/graphql-alpha-0.28.0.zap</url>
        <hash>SHA-256:f71725838a911988ce76cc2f188fa27b6e899e1fae900f5e75996a9ccf605db9</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/graphql-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-03-26</date>
        <size>5524748</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.29.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_graphql>
    <addon>groovy</addon>
    <addon_groovy>
        <name>Groovy Support</name>
        <description>Adds Groovy support to ZAP</description>
        <author>ZAP Dev Team</author>
        <version>3.2.0</version>
        <file>groovy-beta-3.2.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.14.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Replace usage of singletons with injected variables (e.g. &lt;code&gt;model&lt;/code&gt;, &lt;code&gt;control&lt;/code&gt;) in scripts.&lt;/li&gt;
&lt;li&gt;Dependency updates.&lt;/li&gt;
&lt;li&gt;Update Active and Passive Script Templates to include a &lt;code&gt;getMetadata&lt;/code&gt; function. This will allow them to be used as regular scan rules.&lt;/li&gt;
&lt;li&gt;Depend on the &lt;code&gt;commonlib&lt;/code&gt; and &lt;code&gt;scripts&lt;/code&gt; add-ons for scan rule scripts.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated encode-decode script template to conform to the latest method signatures.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/groovy-v3.2.0/groovy-beta-3.2.0.zap</url>
        <hash>SHA-256:2603bcff3728308c6dab09135def96a1209ce8219b0d1f9d861c59b5a8fc522e</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/groovy-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-04-11</date>
        <size>20168743</size>
        <not-before-version>2.14.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.24.0</version>
                </addon>
                <addon>
                    <id>scripts</id>
                    <version>&gt;=45.2.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_groovy>
    <addon>grpc</addon>
    <addon_grpc>
        <name>gRPC Support</name>
        <description>Inspect, attack gRPC endpoints, and decode protobuf messages.</description>
        <author>ZAP Dev Team</author>
        <version>0.2.0</version>
        <file>grpc-alpha-0.2.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;gRPC WebSocket Support Added&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Do not try to decode non-gRPC responses when active scanning, which would lead to unnecessary warnings.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/grpc-v0.2.0/grpc-alpha-0.2.0.zap</url>
        <hash>SHA-256:028464ebc6c80f36fd32088c7aede870f68940dcbb2064a0ed6bfe2bb93f37e1</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/grpc-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-07-02</date>
        <size>8202269</size>
        <not-before-version>2.15.0</not-before-version>
    </addon_grpc>
    <addon>help</addon>
    <addon_help>
        <name>Help - English</name>
        <description>English version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>20</version>
        <file>help-release-20.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Remove TOC entries that no longer exist.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated for 2.16.1.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help-v20/help-release-20.zap</url>
        <hash>SHA-256:851d68575d96abcfc1bc24307b4d83c0f697383785b3107251d85b95e887b929</hash>
        <info>https://www.zaproxy.org/docs/desktop/</info>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2025-03-25</date>
        <size>639618</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_help>
    <addon>help_ar_SA</addon>
    <addon_help_ar_SA>
        <name>Help - Arabic</name>
        <description>Arabic version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>1</version>
        <file>help_ar_SA-alpha-1.zap</file>
        <status>alpha</status>
        <changes>&lt;ul&gt;
&lt;li&gt;First version.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_ar_SA-v1/help_ar_SA-alpha-1.zap</url>
        <hash>SHA-256:8208b0c788d5e29a2bb34f3c44c07db613faefb17d8d9cfb60adc02629c2b3f1</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>649333</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_ar_SA>
    <addon>help_bs_BA</addon>
    <addon_help_bs_BA>
        <name>Help - Bosnian</name>
        <description>Bosnian version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>9</version>
        <file>help_bs_BA-alpha-9.zap</file>
        <status>alpha</status>
        <changes>Updated with the latest files from crowdin</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/2.7/help_bs_BA-alpha-9.zap</url>
        <hash>SHA1:d33a3277e877da4734e6bf9c911c61c4e6ce2f3f</hash>
        <date>2018-02-08</date>
        <size>747536</size>
        <not-before-version>2.7.0</not-before-version>
    </addon_help_bs_BA>
    <addon>help_es_ES</addon>
    <addon_help_es_ES>
        <name>Help - Spanish</name>
        <description>Spanish version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>10</version>
        <file>help_es_ES-release-10.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_es_ES-v10/help_es_ES-release-10.zap</url>
        <hash>SHA-256:63cc24e180374cf038d6aefe31b3f62e170437958ad61d2d3e65d2722fbedc1a</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>697066</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_es_ES>
    <addon>help_fil_PH</addon>
    <addon_help_fil_PH>
        <name>Help - Filipino</name>
        <description>Filipino version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>3</version>
        <file>help_fil_PH-alpha-3.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_fil_PH-v3/help_fil_PH-alpha-3.zap</url>
        <hash>SHA-256:64bbeb0f9404b70c0d49e9fd5da789b8d3902a20f518c7305eb412242831a180</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>710027</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_fil_PH>
    <addon>help_fr_FR</addon>
    <addon_help_fr_FR>
        <name>Help - French</name>
        <description>French version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>10</version>
        <file>help_fr_FR-alpha-10.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_fr_FR-v10/help_fr_FR-alpha-10.zap</url>
        <hash>SHA-256:f1ede9441e5de48170fdef598eb543ef6ad0813eed2e838d2c4803ea114fcb1a</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>646717</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_fr_FR>
    <addon>help_id_ID</addon>
    <addon_help_id_ID>
        <name>Help - Indonesian</name>
        <description>Indonesian version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>3</version>
        <file>help_id_ID-beta-3.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_id_ID-v3/help_id_ID-beta-3.zap</url>
        <hash>SHA-256:ef50363872d783c3c49417bc821b28256cf35d8390004c48f6d4e030ceb8a7c5</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>671009</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_id_ID>
    <addon>help_ja_JP</addon>
    <addon_help_ja_JP>
        <name>Help - Japanese</name>
        <description>Japanese version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>10</version>
        <file>help_ja_JP-beta-10.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_ja_JP-v10/help_ja_JP-beta-10.zap</url>
        <hash>SHA-256:11d310352e8719fe50587c5b97dd5eeb3a2e2ab23e450a7c1d0fad013d003536</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>661964</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_ja_JP>
    <addon>help_ms_MY</addon>
    <addon_help_ms_MY>
        <name>Help - Malay</name>
        <description>Malay version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>1</version>
        <file>help_ms_MY-alpha-1.zap</file>
        <status>alpha</status>
        <changes>&lt;ul&gt;
&lt;li&gt;First version.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_ms_MY-v1/help_ms_MY-alpha-1.zap</url>
        <hash>SHA-256:6407990b8ebaa2e401c3addc47081c742ab7fce25cec107ef49b4e627ad3ceae</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>636908</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_ms_MY>
    <addon>help_pt_BR</addon>
    <addon_help_pt_BR>
        <name>Help - Portuguese, Brazilian</name>
        <description>Portuguese, Brazilian version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>11</version>
        <file>help_pt_BR-release-11.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_pt_BR-v11/help_pt_BR-release-11.zap</url>
        <hash>SHA-256:3fdf92763c1c851848df6b3588c97bbeb22837002351fd00c8208d8ab01ff710</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>682092</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_pt_BR>
    <addon>help_ru_RU</addon>
    <addon_help_ru_RU>
        <name>Help - Russian</name>
        <description>Russian version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>2</version>
        <file>help_ru_RU-release-2.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Promote to Release&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_ru_RU-v2/help_ru_RU-release-2.zap</url>
        <hash>SHA-256:3fd5d8e6af7453a3a16e7c38a19ec941a330d0fd050f562ecebdc4638ae52c80</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-02-24</date>
        <size>779171</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_ru_RU>
    <addon>help_tr_TR</addon>
    <addon_help_tr_TR>
        <name>Help - Turkish</name>
        <description>Turkish version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>2</version>
        <file>help_tr_TR-release-2.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_tr_TR-v2/help_tr_TR-release-2.zap</url>
        <hash>SHA-256:a92b43beab5e196341d8ddf40d594f1596c225c74f0f5b9280e223acc9a8535c</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>710766</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_tr_TR>
    <addon>help_zh_CN</addon>
    <addon_help_zh_CN>
        <name>Help - Chinese Simplified</name>
        <description>Chinese Simplified version of the ZAP help file.</description>
        <author>ZAP Crowdin Team</author>
        <version>3</version>
        <file>help_zh_CN-beta-3.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with the latest files from crowdin&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-core-help/releases/download/help_zh_CN-v3/help_zh_CN-beta-3.zap</url>
        <hash>SHA-256:959b718a307ca32c7807c0d327533765eeb6a0a799b9bc98a2a1e22b3b47bc5a</hash>
        <repo>https://github.com/zaproxy/zap-core-help/</repo>
        <date>2022-01-18</date>
        <size>656718</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_help_zh_CN>
    <addon>highlighter</addon>
    <addon_highlighter>
        <name>Highlighter</name>
        <description>Allows you to highlight strings in the request and response tabs.</description>
        <author>ZAP Dev Team</author>
        <version>8</version>
        <file>highlighter-alpha-8.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help.&lt;/li&gt;
&lt;li&gt;Add info and repo URLs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/highlighter-v8/highlighter-alpha-8.zap</url>
        <hash>SHA-256:4c4852bb2f42eb20dbe19a091e9025667947c73967a65770658333bedd01fccf</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/highlighter/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>115527</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_highlighter>
    <addon>hud</addon>
    <addon_hud>
        <name>HUD - Heads Up Display</name>
        <description>Display information from ZAP in browser.</description>
        <author>ZAP Dev Team</author>
        <version>0.19.0</version>
        <file>hud-beta-0.19.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.15.0.&lt;/li&gt;
&lt;li&gt;Disable the HUD by default - it still works but its flaky, and currently not a focus for us.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-hud/releases/download/v0.19.0/hud-beta-0.19.0.zap</url>
        <hash>SHA-256:737239ce1b765ff32f9351a647594f22d725d319b94f7a2ef2cb153aadf832df</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/hud/</info>
        <repo>https://github.com/zaproxy/zap-hud/</repo>
        <date>2024-05-07</date>
        <size>1382692</size>
        <not-before-version>2.15.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>network</id>
                    <version>&gt;= 0.1.0</version>
                </addon>
                <addon>
                    <id>websocket</id>
                </addon>
            </addons>
        </dependencies>
    </addon_hud>
    <addon>imagelocationscanner</addon>
    <addon_imagelocationscanner>
        <name>Image Location and Privacy Scanner</name>
        <description>Image Location and Privacy Passive Scanner</description>
        <author>Jay Ball (@veggiespam) and the ZAP Dev Team</author>
        <version>6</version>
        <file>imagelocationscanner-beta-6.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated to Image Location and Privacy Scanner version 1.2; merged from &lt;a href="https://github.com/veggiespam/ImageLocationScanner"&gt;source&lt;/a&gt;
&lt;ul&gt;
&lt;li&gt;Updated dependency Metadata Extractor to 2.19.0&lt;/li&gt;
&lt;li&gt;Added support for scanning HEIF image format used by modern iPhone images&lt;/li&gt;
&lt;li&gt;Added support for Samsung, more Reconyxs, &amp;amp; Sony camera proprietary privacy leakage&lt;/li&gt;
&lt;li&gt;Added detection for a few new information leakage tags in currently supported cameras.&lt;/li&gt;
&lt;li&gt;Added GPS elevation detection&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;The rule has been tagged of interest to Penetration Testers and QA.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Removed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;No longer support XMP as it was too unreliable.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/imagelocationscanner-v6/imagelocationscanner-beta-6.zap</url>
        <hash>SHA-256:1f2ec1b0f05617ba5d6c4078751ddb2ddbd23ae4aa47b9c7520bacc61d2c85e8</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/image-location-and-privacy-scanner/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-19</date>
        <size>1392553</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_imagelocationscanner>
    <addon>invoke</addon>
    <addon_invoke>
        <name>Invoke Applications</name>
        <description>Invoke external applications passing context related information such as URLs and parameters</description>
        <author>ZAP Dev Team</author>
        <version>16</version>
        <file>invoke-beta-16.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/invoke-v16/invoke-beta-16.zap</url>
        <hash>SHA-256:439fd2ff1d090779bc9f874696286d1685dffa7b83624254c2b92a2daa943464</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/invoke-applications/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>323503</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.23.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_invoke>
    <addon>jruby</addon>
    <addon_jruby>
        <name>Ruby Scripting</name>
        <description>Allows Ruby to be used for ZAP scripting - templates included</description>
        <author>ZAP Dev Team</author>
        <version>8</version>
        <file>jruby-beta-8.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update links to zaproxy repo.&lt;/li&gt;
&lt;li&gt;Rename reliability to confidence in active/passive templates.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/jruby-v8/jruby-beta-8.zap</url>
        <hash>SHA-256:f5bb450a165f6c407b8d24f7b2776bdc7a2edb0b4b42aea385f8a6ad1ae605ca</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/ruby-scripting/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>21968128</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_jruby>
    <addon>jsonview</addon>
    <addon_jsonview>
        <name>JSON View</name>
        <description>Adds a view that shows JSON messages nicely formatted</description>
        <author>Juha Kivekäs</author>
        <version>3</version>
        <file>jsonview-alpha-3.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.13.0.&lt;/li&gt;
&lt;li&gt;Depend on Common Library add-on to reuse libraries (Issue 7961).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Use other library to format the JSON bodies (Issue 7798).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/jsonview-v3/jsonview-alpha-3.zap</url>
        <hash>SHA-256:ddafbbced033cc937ef37182e3650119dee3c7e5f1ac4ded73ea42125467184d</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/json-view/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2023-09-07</date>
        <size>120558</size>
        <not-before-version>2.13.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.16.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_jsonview>
    <addon>jwt</addon>
    <addon_jwt>
        <name>JWT Support</name>
        <description>Detect JWT requests and scan them to find related vulnerabilities</description>
        <author>KSASAN preetkaran20@gmail.com</author>
        <version>1.0.3</version>
        <file>jwt-alpha-1.0.3.zap</file>
        <status>alpha</status>
        <changes>&lt;ul&gt;
&lt;li&gt;First version of JWT Support.
&lt;ul&gt;
&lt;li&gt;Contains scanning rules for basic JWT related vulnerabilities.&lt;/li&gt;
&lt;li&gt;Contains JWT Fuzzer for fuzzing the JWT's present in the request.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/2.7/jwt-alpha-1.0.3.zap</url>
        <hash>SHA-256:d3df8480010ad2df230cbdb99619aafdb869861349455c3da0129a99b132d204</hash>
        <repo>https://github.com/SasanLabs/owasp-zap-jwt-addon/</repo>
        <date>2023-01-02</date>
        <size>751748</size>
        <not-before-version>2.11.1</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                </addon>
                <addon>
                    <id>fuzz</id>
                    <version>13.*</version>
                </addon>
            </addons>
        </dependencies>
    </addon_jwt>
    <addon>jython</addon>
    <addon_jython>
        <name>Python Scripting</name>
        <description>Allows Python to be used for ZAP scripting - templates included</description>
        <author>ZAP Dev Team</author>
        <version>15</version>
        <file>jython-beta-15.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Update Active and Passive Script Templates to include a &lt;code&gt;getMetadata&lt;/code&gt; function. This will allow them to be used as regular scan rules.&lt;/li&gt;
&lt;li&gt;Depend on the &lt;code&gt;commonlib&lt;/code&gt; add-on for scan rule scripts.&lt;/li&gt;
&lt;li&gt;Update minimum &lt;code&gt;scripts&lt;/code&gt; add-on version to 45.1.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/jython-v15/jython-beta-15.zap</url>
        <hash>SHA-256:019a64ba85cc9021a841e7253ae14f619129b603ab2048bec9593f5d59c1da02</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/python-scripting/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-04-11</date>
        <size>43315501</size>
        <not-before-version>2.14.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.24.0</version>
                </addon>
                <addon>
                    <id>scripts</id>
                    <version>&gt;=45.2.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_jython>
    <addon>kotlin</addon>
    <addon_kotlin>
        <name>Kotlin Support</name>
        <description>Allows Kotlin to be used for ZAP scripting</description>
        <author>StackHawk Engineering</author>
        <version>1.1.0</version>
        <file>kotlin-alpha-1.1.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Use appropriate syntax style for highlighting of code.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/kotlin-v1.1.0/kotlin-alpha-1.1.0.zap</url>
        <hash>SHA-256:85a47ea7199b77cfb09081302c277de2ba5e2102ef79907573ebcfa6425302e9</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/kotlin-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>48865539</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_kotlin>
    <addon>levoai</addon>
    <addon_levoai>
        <name>Levo.ai</name>
        <description>Build OpenAPI Specs with ZAP traffic using Levo.ai.</description>
        <author>Levo.ai</author>
        <version>0.3.0</version>
        <file>levoai-zap-addon-alpha-0.3.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Option to configure an organization ID that is added as a header in the requests made to the Satellite.&lt;/li&gt;
&lt;li&gt;Option to specify the environment under which the discovered apps will be shown in the Levo dashboard.&lt;/li&gt;
&lt;li&gt;Set the sensor type in the requests made to the Satellite.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/levoai/levoai-zap-addon/releases/download/v0.3.0/levoai-zap-addon-alpha-0.3.0.zap</url>
        <hash>SHA-256:1a86d7c288bf4284e83f54203f4ed8dd7d40b2bd47fbb8f8f853da67676269d2</hash>
        <info>https://levo.ai</info>
        <repo>https://github.com/levoai/levoai-zap-addon</repo>
        <date>2024-07-10</date>
        <size>2465951</size>
        <not-before-version>2.12.0</not-before-version>
    </addon_levoai>
    <addon>maplocal</addon>
    <addon_maplocal>
        <name>Map Local</name>
        <description>Allows mapping of responses to content of a chosen local file.</description>
        <author>Keindel (Andrey Maksimov)</author>
        <version>0.0.1</version>
        <file>maplocal-alpha-0.0.1.zap</file>
        <status>alpha</status>
        <changes>&lt;ul&gt;
&lt;li&gt;First version of Map Local extension. Provides feature to map Response Body to a content of chosen local file.
&lt;ul&gt;
&lt;li&gt;Has status panel in UI with 3 columns: Enabled / URL / Local Path.&lt;/li&gt;
&lt;li&gt;Has add / edit dialog with browse button to choose file.&lt;/li&gt;
&lt;li&gt;Has file choice verification check.&lt;/li&gt;
&lt;li&gt;Popup menus in sites and history, edit / remove - popups in status panel.&lt;/li&gt;
&lt;li&gt;Persists to session DB.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/2.7/maplocal-alpha-0.0.1.zap</url>
        <hash>SHA-256:d3ecd2a6e23b06ffed8646ee2314d921a1c1925c3ab08070a624a090734ebdca</hash>
        <repo>https://github.com/Keindel/owasp-zap-maplocal-addon</repo>
        <date>2023-10-05</date>
        <size>49040</size>
        <not-before-version>2.12.0</not-before-version>
    </addon_maplocal>
    <addon>neonmarker</addon>
    <addon_neonmarker>
        <name>Neonmarker</name>
        <description>Colors history table items based on tags</description>
        <author>Juha Kivekäs, Kingthorin</author>
        <version>1.8.0</version>
        <file>neonmarker-alpha-1.8.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Adjust initialization of the Tags list&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/kingthorin/neonmarker/releases/download/v1.8.0/neonmarker-alpha-1.8.0.zap</url>
        <hash>SHA-256:b4a52ab49d887fa1772b4b371d9ec9e48f2bb5dd0add25f21130b9e58e053e0b</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/neonmarker/</info>
        <repo>https://github.com/kingthorin/neonmarker</repo>
        <date>2025-02-14</date>
        <size>35958</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>pscan</id>
                    <version>&gt;=0.2.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_neonmarker>
    <addon>network</addon>
    <addon_network>
        <name>Network</name>
        <description>Provides core networking capabilities.</description>
        <author>ZAP Dev Team</author>
        <version>0.22.0</version>
        <file>network-beta-0.22.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;A typo in the help with regard to Transparent Proxying.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Default Global Exclusions patterns:
&lt;ul&gt;
&lt;li&gt;All case insensitive (Issue 8930).&lt;/li&gt;
&lt;li&gt;Fix a naming mistake in &amp;quot;ExtParam - .NET adx resources (SR/WR.adx?d=)&amp;quot; adx should have been axd.&lt;/li&gt;
&lt;li&gt;Extend Image related patterns to include svg and webp.&lt;/li&gt;
&lt;li&gt;Extend Audio/Video patterns to include webm.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Change default log level of cookies processing to error to avoid flooding the logs with warnings when the cookies are rejected/invalid.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/network-v0.22.0/network-beta-0.22.0.zap</url>
        <hash>SHA-256:cfcd202ca42e8b99c1c87a23c1661293181fc20fd95073decac757b0e47bc687</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/network/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>28129285</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_network>
    <addon>oast</addon>
    <addon_oast>
        <name>OAST Support</name>
        <description>Allows you to exploit out-of-band vulnerabilities</description>
        <author>ZAP Dev Team</author>
        <version>0.22.0</version>
        <file>oast-beta-0.22.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Link to repositories/documentation instead of service URLs in the help content.&lt;/li&gt;
&lt;li&gt;No longer provide a default server URL for Interactsh due to (random) unavailability.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/oast-v0.22.0/oast-beta-0.22.0.zap</url>
        <hash>SHA-256:7ddbcda77b9f58a0b7b3f4db4bf3aaa7b7bf87c4ee578d343e748a5b8c077a0e</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/oast-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>904262</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>database</id>
                    <version>&gt;= 0.6.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;= 0.1.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_oast>
    <addon>onlineMenu</addon>
    <addon_onlineMenu>
        <name>Online menus</name>
        <description>ZAP Online menu items</description>
        <author>ZAP Dev Team</author>
        <version>14</version>
        <file>onlineMenu-release-14.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/onlineMenu-v14/onlineMenu-release-14.zap</url>
        <hash>SHA-256:da47b95478c008545f403ffc20640c12c6215211e93727118f0854a2e40c5794</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/online-menu/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-09</date>
        <size>208647</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_onlineMenu>
    <addon>openapi</addon>
    <addon_openapi>
        <name>OpenAPI Support</name>
        <description>Imports and spiders OpenAPI definitions.</description>
        <author>ZAP Dev Team plus Joanna Bona, Nathalie Bouchahine, Artur Grzesica, Mohammad Kamar, Markus Kiss, Michal Materniak, Marcin Spiewak, and SDA SE Open Industry Solutions</author>
        <version>45</version>
        <file>openapi-beta-45.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Correct definition detection while spidering.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Clarified an error message which occurs in automation if there's a problem importing.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/openapi-v45/openapi-beta-45.zap</url>
        <hash>SHA-256:a6eb04864d5c8887dd7a625b1bc01d0e0c2a8cb3ed412762faa9143bb4d65d93</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/openapi-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-03-24</date>
        <size>11575308</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.29.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_openapi>
    <addon>packpentester</addon>
    <addon_packpentester>
        <name>Collection: Pentester Pack</name>
        <description>A collection of add-ons ideal for pentesters</description>
        <author>ZAP Dev Team</author>
        <version>0.1.0</version>
        <file>packpentester-alpha-0.1.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Corrected fuzz add-on name&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/packpentester-v0.1.0/packpentester-alpha-0.1.0.zap</url>
        <hash>SHA-256:0b8e7e4ddffdcacf46fdf9793bf84217738e281cbd5ccac732788c4b768d069c</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/collection-pentester-pack/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2022-05-12</date>
        <size>6792</size>
        <not-before-version>2.11.1</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>accessControl</id>
                </addon>
                <addon>
                    <id>attacksurfacedetector</id>
                </addon>
                <addon>
                    <id>custompayloads</id>
                </addon>
                <addon>
                    <id>evalvillain</id>
                </addon>
                <addon>
                    <id>fileupload</id>
                </addon>
                <addon>
                    <id>fuzz</id>
                </addon>
                <addon>
                    <id>fuzzdb</id>
                </addon>
                <addon>
                    <id>jsonview</id>
                </addon>
                <addon>
                    <id>jwt</id>
                </addon>
                <addon>
                    <id>requester</id>
                </addon>
                <addon>
                    <id>viewstate</id>
                </addon>
                <addon>
                    <id>wappalyzer</id>
                </addon>
            </addons>
        </dependencies>
    </addon_packpentester>
    <addon>packscanrules</addon>
    <addon_packscanrules>
        <name>Collection: Scan Rules Pack</name>
        <description>All of the add-ons just containing release, beta and alpha status scan rules</description>
        <author>ZAP Dev Team</author>
        <version>0.0.1</version>
        <file>packscanrules-alpha-0.0.1.zap</file>
        <status>alpha</status>
        <changes>&lt;p&gt;First version.&lt;/p&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/packscanrules-v0.0.1/packscanrules-alpha-0.0.1.zap</url>
        <hash>SHA-256:5ad68f153379bd96f36a7bead61e884cc42e1409cdd262dffc682b5f7bf92da4</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/collection-scan-rules-pack/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2022-05-13</date>
        <size>9244</size>
        <not-before-version>2.11.1</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>ascanrules</id>
                </addon>
                <addon>
                    <id>ascanrulesAlpha</id>
                </addon>
                <addon>
                    <id>ascanrulesBeta</id>
                </addon>
                <addon>
                    <id>domxss</id>
                </addon>
                <addon>
                    <id>pscanrules</id>
                </addon>
                <addon>
                    <id>pscanrulesAlpha</id>
                </addon>
                <addon>
                    <id>pscanrulesBeta</id>
                </addon>
                <addon>
                    <id>retire</id>
                </addon>
            </addons>
        </dependencies>
    </addon_packscanrules>
    <addon>paramdigger</addon>
    <addon_paramdigger>
        <name>Parameter Digger</name>
        <description>Identify hidden, unlinked parameters. Useful for finding web cache poisoning vulnerabilities.</description>
        <author>ZAP Dev Team and Arkaprabha Chakraborty</author>
        <version>0.3.0</version>
        <file>paramdigger-alpha-0.3.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Support for menu weights (Issue 8369)&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.15.0.&lt;/li&gt;
&lt;li&gt;The output panel is now properly reset on ZAP session change (part of Issue 7694).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/paramdigger-v0.3.0/paramdigger-alpha-0.3.0.zap</url>
        <hash>SHA-256:585e4853c7cbc3c925ea4d5e1cfbcd6d8a3d4a20b00bdd49f582743cc6a9e281</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/parameter-digger/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-07-15</date>
        <size>561541</size>
        <not-before-version>2.15.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.23.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_paramdigger>
    <addon>plugnhack</addon>
    <addon_plugnhack>
        <name>Plug-n-Hack Configuration</name>
        <description>Supports the Mozilla Plug-n-Hack standard: https://developer.mozilla.org/en-US/docs/Plug-n-Hack.</description>
        <author>ZAP Dev Team</author>
        <version>13</version>
        <file>plugnhack-beta-13.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.12.0.&lt;/li&gt;
&lt;li&gt;Use Network add-on to obtain main proxy address/port.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/plugnhack-v13/plugnhack-beta-13.zap</url>
        <hash>SHA-256:8d74b572bb7e08d09ebcfd10da9f2f65f7970f9452feadb8bbe69c8037b80ee2</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/plug-n-hack/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2022-10-27</date>
        <size>736005</size>
        <not-before-version>2.12.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>network</id>
                    <version>&gt;= 0.2.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_plugnhack>
    <addon>postman</addon>
    <addon_postman>
        <name>Postman Support</name>
        <description>Imports and spiders Postman collections.</description>
        <author>ZAP Dev Team</author>
        <version>0.6.0</version>
        <file>postman-alpha-0.6.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Correct deserialization of headers.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/postman-v0.6.0/postman-alpha-0.6.0.zap</url>
        <hash>SHA-256:ee4b5db5adaea09367730c05b544920c939dffbb44e0d9c343f7bb7b58d3ef10</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/postman-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-02-03</date>
        <size>283411</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.16.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_postman>
    <addon>pscan</addon>
    <addon_pscan>
        <name>Passive Scanner</name>
        <description>Provides core passive scanning capabilities.</description>
        <author>ZAP Dev Team</author>
        <version>0.3.0</version>
        <file>pscan-alpha-0.3.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Adjusted further dialog, progress, and log messages with regard to preventing inclusion of commas in scan rule ID numbers. As well as ensuring consistency in use of ID (full caps) for table column headings.&lt;/li&gt;
&lt;li&gt;Depend on the Common Library add-on.&lt;/li&gt;
&lt;li&gt;Log all errors that might happen during the passive scan.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The Stats Passive Scan Rule been tagged of interest to Penetration Testers, as well as adding tags associated with DEV or QA applicability.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/pscan-v0.3.0/pscan-alpha-0.3.0.zap</url>
        <hash>SHA-256:0a917d1dac147a7669e72ff93687b08931e88e78652485561521106cc93e0507</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/passive-scanner/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>676378</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_pscan>
    <addon>pscanrules</addon>
    <addon_pscanrules>
        <name>Passive scanner rules</name>
        <description>The release status Passive Scanner rules</description>
        <author>ZAP Dev Team</author>
        <version>65</version>
        <file>pscanrules-release-65.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;All rules have been tagged of interest to Penetration Testers, as well as adding tags associated with DEV or QA applicability.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;li&gt;Clarified details of the Viewstate scan rule alerts, in some instances they were misleading (containing colons suggesting further data).&lt;/li&gt;
&lt;li&gt;The Open Redirect scan rule (ID: 10028) and its alerts have been renamed &amp;quot;Off-site Redirect&amp;quot; as this is a passive rule which compares the authority of the origin and destination and there is no assurance of a truly &amp;quot;open&amp;quot; redirect.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/pscanrules-v65/pscanrules-release-65.zap</url>
        <hash>SHA-256:c604a5924a1f1934751e8018ef69bd8015e4ba4d6088a120cbff63d52ebccf2f</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>1943150</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>pscan</id>
                </addon>
            </addons>
        </dependencies>
    </addon_pscanrules>
    <addon>pscanrulesAlpha</addon>
    <addon_pscanrulesAlpha>
        <name>Passive scanner rules (alpha)</name>
        <description>The alpha status Passive Scanner rules</description>
        <author>ZAP Dev Team</author>
        <version>45</version>
        <file>pscanrulesAlpha-alpha-45.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;All rules have been tagged of interest to Penetration Testers, as well as adding tags associated with DEV or QA applicability.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/pscanrulesAlpha-v45/pscanrulesAlpha-alpha-45.zap</url>
        <hash>SHA-256:1cfec4ffeb0a054c4b0572f7400b8931b88b3436f3edc999fbf8a1f4579a797a</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules-alpha/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>561559</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_pscanrulesAlpha>
    <addon>pscanrulesBeta</addon>
    <addon_pscanrulesBeta>
        <name>Passive scanner rules (beta)</name>
        <description>The beta status Passive Scanner rules</description>
        <author>ZAP Dev Team</author>
        <version>44</version>
        <file>pscanrulesBeta-beta-44.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Dropped period from extension name used in the GUI.&lt;/li&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;A false positive with the Sub Resource Integrity Attribute Missing scan rule with regard to which link tags it raises alerts on (Issue 8938).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;All rules have been tagged of interest to Penetration Testers, as well as adding tags associated with DEV or QA applicability.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/pscanrulesBeta-v44/pscanrulesBeta-beta-44.zap</url>
        <hash>SHA-256:3a24c0b21897b3bd2a9472196b7a0a1f11f566172aef075487d358bfa80eb087</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules-beta/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>682438</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_pscanrulesBeta>
    <addon>quickstart</addon>
    <addon_quickstart>
        <name>Quick Start</name>
        <description>Provides a tab which allows you to quickly test a target application</description>
        <author>ZAP Dev Team</author>
        <version>51</version>
        <file>quickstart-release-51.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Stats counter to the main toolbar button (Issue 8375).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Depend on Passive Scanner add-on (Issue 7959).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;An exception that prevented the look and feel from changing completely.&lt;/li&gt;
&lt;li&gt;Issues setting the AJAX Spider options.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/quickstart-v51/quickstart-release-51.zap</url>
        <hash>SHA-256:907d8ef64109a853974222b3a64d2021335d19db426f8670134e8d7312bdc0ce</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/quick-start/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-10</date>
        <size>774568</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>callhome</id>
                    <version>&gt;= 0.0.1</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;= 0.3.0</version>
                </addon>
                <addon>
                    <id>pscan</id>
                    <version>&gt;= 0.1.0 &amp; &lt; 1.0.0</version>
                </addon>
                <addon>
                    <id>reports</id>
                    <version>&gt;= 0.4.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_quickstart>
    <addon>reflect</addon>
    <addon_reflect>
        <name>Reflect</name>
        <description>Finds reflected parameters</description>
        <author>Caleb Kinney</author>
        <version>0.0.11</version>
        <file>reflect-alpha-0.0.11.zap</file>
        <status>alpha</status>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/2.7/reflect-alpha-0.0.11.zap</url>
        <hash>SHA-256:c45307037042e4079546a5fcb17d1165475e5cdd5ba7e8abc0d2cf0a14866466</hash>
        <repo>https://github.com/TypeError/reflect/</repo>
        <date>2021-02-19</date>
        <size>1780219</size>
        <not-before-version>2.9.0</not-before-version>
    </addon_reflect>
    <addon>regextester</addon>
    <addon_regextester>
        <name>Regular Expression Tester</name>
        <description>Allows to test Regular Expressions</description>
        <author>ZAP Dev Team</author>
        <version>2</version>
        <file>regextester-alpha-2.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help.&lt;/li&gt;
&lt;li&gt;Add info and repo URLs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Close dialogues when the add-on is uninstalled.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/regextester-v2/regextester-alpha-2.zap</url>
        <hash>SHA-256:b4706709c16a45e8bedc0bd6f28dd09532d5dbf3f1fe2c2853e20dbf6160a584</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/regular-expression-tester/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>159441</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_regextester>
    <addon>replacer</addon>
    <addon_replacer>
        <name>Replacer</name>
        <description>Easy way to replace strings in requests and responses.</description>
        <author>ZAP Dev Team</author>
        <version>20</version>
        <file>replacer-release-20.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Typo in automation job help.&lt;/li&gt;
&lt;li&gt;Address misleading warning &lt;code&gt;Unrecognised parameter&lt;/code&gt; for &lt;code&gt;deleteAllRules&lt;/code&gt; (Issue 8764).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Fields with default or missing values are omitted for the &lt;code&gt;replacer&lt;/code&gt; job in saved Automation Framework plans.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/replacer-v20/replacer-release-20.zap</url>
        <hash>SHA-256:632ffa3e1a323b86c873a92285a308d052c7090b52721fdbc5a507e8baa001e0</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/replacer/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-10</date>
        <size>445124</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_replacer>
    <addon>reports</addon>
    <addon_reports>
        <name>Report Generation</name>
        <description>Official ZAP Reports.</description>
        <author>ZAP Dev Team</author>
        <version>0.39.0</version>
        <file>reports-release-0.39.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Caps fixed for Section Selections of the Risk and Confidence HTML report (Issue 2000).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The Automation Framework progress to the report data when run via an AF job.&lt;/li&gt;
&lt;li&gt;Statistics to the traditional extended JSON and XML reports.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Correct error messages of the Automation Framework job.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/reports-v0.39.0/reports-release-0.39.0.zap</url>
        <hash>SHA-256:9032b01f5858e0156e384138273065f7311ca662a6a1559fb96937cd76392c13</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/report-generation/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>14921503</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.17.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_reports>
    <addon>requester</addon>
    <addon_requester>
        <name>Requester</name>
        <description>Allows to manually edit and send messages.</description>
        <author>Surikato and the ZAP Dev Team</author>
        <version>7.8.0</version>
        <file>requester-beta-7.8.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/requester-v7.8.0/requester-beta-7.8.0.zap</url>
        <hash>SHA-256:b18fdf0717b90407b770d9bcdae9898fe2365935c03e6a133520750b1dd3e9a7</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/requester/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-10</date>
        <size>763103</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.23.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_requester>
    <addon>retest</addon>
    <addon_retest>
        <name>Retest</name>
        <description>An add-on to retest for presence/absence of previously generated alerts.</description>
        <author>ZAP Dev Team</author>
        <version>0.11.0</version>
        <file>retest-alpha-0.11.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;To handle automation class changes.&lt;/li&gt;
&lt;li&gt;Depend on newer version of Passive Scanner add-on (Issue 7959).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/retest-v0.11.0/retest-alpha-0.11.0.zap</url>
        <hash>SHA-256:26ad328ba5bcb144c20076949aacacf6c352121ee74f5bf4a813ccdd8945e35f</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/retest/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-10</date>
        <size>259775</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>automation</id>
                    <version>&gt;=0.44.0</version>
                </addon>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.17.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>pscan</id>
                    <version>&gt;= 0.1.0 &amp; &lt; 1.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_retest>
    <addon>retire</addon>
    <addon_retire>
        <name>Retire.js</name>
        <description>Use Retire.js to identify vulnerable or out-dated JavaScript packages.</description>
        <author>Nikita Mundhada and the ZAP Dev Team</author>
        <version>0.47.0</version>
        <file>retire-release-0.47.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with upstream retire.js pattern changes.&lt;/li&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The scan rule as been tagged of interest to Penetration Testers, as well as adding tags associated with DEV or QA applicability.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.47.0/retire-release-0.47.0.zap</url>
        <hash>SHA-256:a5a0320de40aa1426724b12e24e6308af4035cd54806a664c6180743e7e59e69</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/retire.js/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>1006728</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_retire>
    <addon>reveal</addon>
    <addon_reveal>
        <name>Reveal</name>
        <description>Show hidden fields and enable disabled fields</description>
        <author>ZAP Dev Team</author>
        <version>10</version>
        <file>reveal-release-10.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The content length is now properly set on responses which have been modified (Issue 8947).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/reveal-v10/reveal-release-10.zap</url>
        <hash>SHA-256:18368c13aa8a31a6470a465e9aef7c93d9a45b2c34cfe90f4200cbd04637fd0e</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/reveal/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>239142</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_reveal>
    <addon>revisit</addon>
    <addon_revisit>
        <name>Revisit</name>
        <description>Revisit a site at any time in the past using the session history</description>
        <author>ZAP Dev Team</author>
        <version>6</version>
        <file>revisit-alpha-6.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Minor fix in help content.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/revisit-v6/revisit-alpha-6.zap</url>
        <hash>SHA-256:3f265ea36923b0a7870fb1d24db7c82261ad2616e3b1ad0e5bac5a6b7b8e8230</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/revisit/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>302331</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_revisit>
    <addon>saml</addon>
    <addon_saml>
        <name>SAML Support</name>
        <description>Detect, Show, Edit, Fuzz SAML requests</description>
        <author>ZAP Dev Team</author>
        <version>10</version>
        <file>saml-alpha-10.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.12.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/saml-v10/saml-alpha-10.zap</url>
        <hash>SHA-256:097492271c7ec1d85def81091ffe897f4809927043844d1f5f0c7c598a0ad164</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/saml-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2022-10-28</date>
        <size>1811985</size>
        <not-before-version>2.12.0</not-before-version>
    </addon_saml>
    <addon>scanpolicies</addon>
    <addon_scanpolicies>
        <name>Scan Policies</name>
        <description>A set of standard scan policies.</description>
        <author>ZAP Dev Team</author>
        <version>0.3.0</version>
        <file>scanpolicies-alpha-0.3.0.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated based on Rules' Policy Tag assignments.&lt;/li&gt;
&lt;li&gt;Updated help to cover the PENTEST Policy Tag.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/scanpolicies-v0.3.0/scanpolicies-alpha-0.3.0.zap</url>
        <hash>SHA-256:b06299925bb14d5a22661ddc89d9ac13d25af17c7c06cc730dafb682861b4a88</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/scan-policies/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>280872</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_scanpolicies>
    <addon>scripts</addon>
    <addon_scripts>
        <name>Script Console</name>
        <description>Supports all JSR 223 scripting languages</description>
        <author>ZAP Dev Team</author>
        <version>45.12.0</version>
        <file>scripts-release-45.12.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Loop when trying to extract an underlying script exception.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/scripts-v45.12.0/scripts-release-45.12.0.zap</url>
        <hash>SHA-256:dacdb33bb2a6353067439fbe8f3a816d6caa0c8634ae1bdfe6c41ef27ba32241</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/script-console/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>5192132</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.32.0</version>
                </addon>
                <addon>
                    <id>pscan</id>
                    <version>&gt;= 0.1.0 &amp; &lt; 1.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_scripts>
    <addon>selenium</addon>
    <addon_selenium>
        <name>Selenium</name>
        <description>WebDriver provider and includes HtmlUnit browser</description>
        <author>ZAP Dev Team</author>
        <version>15.37.0</version>
        <file>selenium-release-15.37.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update Selenium to version 4.33.0.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Prevent concurrent modification exceptions.&lt;/li&gt;
&lt;li&gt;Restore loading of extensions with newer Chrome versions.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/selenium-v15.37.0/selenium-release-15.37.0.zap</url>
        <hash>SHA-256:57e40600b57b5a7066243699cf968aec2d3af266922b4bbe953295d5f7805b57</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/selenium/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-06</date>
        <size>33939100</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.23.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.2.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_selenium>
    <addon>sequence</addon>
    <addon_sequence>
        <name>Sequence</name>
        <description>Gives the possibility of defining a sequence of requests to be scanned.</description>
        <author>ZAP Dev Team</author>
        <version>8</version>
        <file>sequence-beta-8.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add Automation Framework jobs:
&lt;ul&gt;
&lt;li&gt;&lt;code&gt;sequence-import&lt;/code&gt; to import HARs as sequences.&lt;/li&gt;
&lt;li&gt;&lt;code&gt;sequence-activeScan&lt;/code&gt; to active scan sequences.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;Data for reporting.&lt;/li&gt;
&lt;li&gt;Stats for import automation and active scan.&lt;/li&gt;
&lt;li&gt;Sequence active scan policy which will be used if neither a policy nor policyDefinition are set.&lt;/li&gt;
&lt;li&gt;Add Import top level menu item to import HAR as sequence.&lt;/li&gt;
&lt;li&gt;Active Scan Sequence dialog.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Depend on Import/Export add-on to allow to import HARs as sequences.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Sequence scan implementation.&lt;/li&gt;
&lt;li&gt;Promoted to beta.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Removed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Sequence panel from the Active Scan dialog.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/sequence-v8/sequence-beta-8.zap</url>
        <hash>SHA-256:8419a137caf10cf117523db84f886142116f1e694ca1da44b4481567915e1d6d</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/sequence-scanner/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-10</date>
        <size>1609867</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>exim</id>
                    <version>&gt;= 0.13</version>
                </addon>
                <addon>
                    <id>network</id>
                </addon>
                <addon>
                    <id>zest</id>
                    <version>48.*</version>
                </addon>
            </addons>
        </dependencies>
    </addon_sequence>
    <addon>soap</addon>
    <addon_soap>
        <name>SOAP Support</name>
        <description>Imports and scans WSDL files containing SOAP endpoints.</description>
        <author>Alberto (albertov91) + ZAP Dev Team</author>
        <version>25</version>
        <file>soap-beta-25.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The WSDL passive scan rule has been tagged of interest to Penetration Testers and QA.&lt;/li&gt;
&lt;li&gt;The included active scan rules have been tagged of interest to Penetration Testers.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Depends on an updated version of the Common Library add-on.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/soap-v25/soap-beta-25.zap</url>
        <hash>SHA-256:dac5f464ba1ee20602a42041567b20068d7a6f0823a2867e2694e5b47af814a1</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/soap-support/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>12910257</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_soap>
    <addon>spider</addon>
    <addon_spider>
        <name>Spider</name>
        <description>Spider used for automatically finding URIs on a site.</description>
        <author>ZAP Dev Team</author>
        <version>0.15.0</version>
        <file>spider-release-0.15.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Include anti-csrf tokens as part of irrelevant parameters.&lt;/li&gt;
&lt;li&gt;Ignore irrelevant parameters in request bodies (&lt;code&gt;x-www-form-urlencoded&lt;/code&gt;) (Related to Issue 7771).&lt;/li&gt;
&lt;li&gt;Skip all URIs with &lt;code&gt;javascript&lt;/code&gt; schemes.&lt;/li&gt;
&lt;li&gt;Changed to title caps on the Irrelevant Parameters table &amp;quot;title&amp;quot; in the Options dialog (Issue 2000).&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add an option to allow users to indicate the Spider should attempt to avoid logout related paths/functionality.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;An incorrect column name in the Irrelevant Parameters table used by the Options dialog (Domain should have been Name).&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/spider-v0.15.0/spider-release-0.15.0.zap</url>
        <hash>SHA-256:d2bd362945acd4965def0e90804b5793c4008bd9a5d6fc0201ba2d72997f1384</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/spider/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>1168525</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.29.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>database</id>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.3.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_spider>
    <addon>spiderAjax</addon>
    <addon_spiderAjax>
        <name>Ajax Spider</name>
        <description>Allows you to spider sites that make heavy use of JavaScript using Crawljax</description>
        <author>ZAP Dev Team</author>
        <version>23.24.0</version>
        <file>spiderAjax-release-23.24.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Allow to configure how the scope is checked, either Flexible or Strict, to allow or not access to out of scope domains.&lt;/li&gt;
&lt;li&gt;Allow to avoid logout elements.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Allow access to domains out of context (e.g. SSO) when using Client Script and Browser Based Authentication.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/spiderAjax-v23.24.0/spiderAjax-release-23.24.0.zap</url>
        <hash>SHA-256:3f0c69698bbfea65065f891970f0d0dccc4ed9059f8e2060ba522c1c1a1c089f</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/ajax-spider/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>7584850</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.23.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.11.0</version>
                </addon>
                <addon>
                    <id>selenium</id>
                    <version>15.*</version>
                </addon>
            </addons>
        </dependencies>
    </addon_spiderAjax>
    <addon>sqliplugin</addon>
    <addon_sqliplugin>
        <name>Advanced SQLInjection Scanner</name>
        <description>An advanced active injection bundle for SQLi (derived by SQLMap)</description>
        <author>Andrea Pompili (Yhawke)</author>
        <version>16</version>
        <file>sqliplugin-beta-16.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;The included active scan rule has been tagged of interest to Penetration Testers.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/sqliplugin-v16/sqliplugin-beta-16.zap</url>
        <hash>SHA-256:7c04881f9a3c9c6b4e1ca37099e247886073f15945e479fbdcd58144b2e5a8be</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/advanced-sqlinjection-scanner/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-04-30</date>
        <size>541003</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.32.0 &amp; &lt; 2.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_sqliplugin>
    <addon>sse</addon>
    <addon_sse>
        <name>Server-Sent Events</name>
        <description>Allows you to view Server-Sent Events (SSE) communication.</description>
        <author>ZAP Dev Team</author>
        <version>13</version>
        <file>sse-alpha-13.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.15.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;More gracefully handle missing value for &amp;quot;id&amp;quot; field (Issue 8320)&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/sse-v13/sse-alpha-13.zap</url>
        <hash>SHA-256:38cf84e00664287e691606f473343ba0c0db0711c4f895312d0d482c3354731b</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/server-sent-events/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2024-05-21</date>
        <size>330079</size>
        <not-before-version>2.15.0</not-before-version>
    </addon_sse>
    <addon>svndigger</addon>
    <addon_svndigger>
        <name>SVN Digger Files</name>
        <description>SVN Digger files which can be used with ZAP forced browsing</description>
        <author>ZAP Dev Team</author>
        <version>4</version>
        <file>svndigger-release-4.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help.&lt;/li&gt;
&lt;li&gt;Add repo URL.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Promote to release status.&lt;/li&gt;
&lt;li&gt;Change info URL to link to the site.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/svndigger-v4/svndigger-release-4.zap</url>
        <hash>SHA-256:5556efdf3fdb84ebd6cf3e76ca31e3fb6fb57c002cf14b2cf2f05f67bf2b622a</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/svn-digger-files/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>713963</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_svndigger>
    <addon>tips</addon>
    <addon_tips>
        <name>Tips and Tricks</name>
        <description>Display ZAP Tips and Tricks</description>
        <author>ZAP Dev Team</author>
        <version>14</version>
        <file>tips-beta-14.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.16.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/tips-v14/tips-beta-14.zap</url>
        <hash>SHA-256:732458ced13378724804c26a84a31383fca18db397841b03a2e7e7743504e192</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/tips-and-tricks/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-01-10</date>
        <size>572632</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_tips>
    <addon>tokengen</addon>
    <addon_tokengen>
        <name>Token Generation and Analysis</name>
        <description>Allows you to generate and analyze pseudo random tokens, such as those used for session handling or CSRF protection</description>
        <author>ZAP Dev Team</author>
        <version>15</version>
        <file>tokengen-beta-15.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Now using 2.10 logging infrastructure (Log4j 2.x).&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/tokengen-v15/tokengen-beta-15.zap</url>
        <hash>SHA-256:daef1d13d44a76b8735a30ed9e1e50fa87a85d02728bd7ae575197d173f942f9</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/token-generator/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>525206</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_tokengen>
    <addon>treetools</addon>
    <addon_treetools>
        <name>TreeTools</name>
        <description>Tools to add functionality to the tree view.</description>
        <author>Carl Sampson</author>
        <version>8</version>
        <file>treetools-beta-8.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add help.&lt;/li&gt;
&lt;li&gt;Add info and repo URLs.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/treetools-v8/treetools-beta-8.zap</url>
        <hash>SHA-256:b7f61f8939937ebc120bce8deb72713d7676087056e88801df2573112e7642e4</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/treetools/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>128931</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_treetools>
    <addon>viewstate</addon>
    <addon_viewstate>
        <name>ViewState</name>
        <description>ASP/JSF ViewState Decoder and Editor</description>
        <author>Calum Hutton</author>
        <version>3</version>
        <file>viewstate-alpha-3.zap</file>
        <status>alpha</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update minimum ZAP version to 2.11.0.&lt;/li&gt;
&lt;li&gt;Maintenance changes.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/viewstate-v3/viewstate-alpha-3.zap</url>
        <hash>SHA-256:715caefd591415e79b32195361fea82aa8c6357b24e69530c22fde0a1b6dad17</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/viewstate/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2021-10-07</date>
        <size>148716</size>
        <not-before-version>2.11.0</not-before-version>
    </addon_viewstate>
    <addon>wappalyzer</addon>
    <addon_wappalyzer>
        <name>Technology Detection</name>
        <description>Technology detection using various fingerprints and identifiers.</description>
        <author>ZAP Dev Team</author>
        <version>21.46.0</version>
        <file>wappalyzer-release-21.46.0.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Updated with enthec upstream icon and pattern changes.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/wappalyzer-v21.46.0/wappalyzer-release-21.46.0.zap</url>
        <hash>SHA-256:637356cf77f36afe419991d57ee3ed7429b321465e412865cf6db09fb734e962</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/technology-detection/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>21024941</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;= 1.17.0 &amp; &lt; 2.0.0</version>
                </addon>
                <addon>
                    <id>pscan</id>
                    <version>&gt;= 0.1.0 &amp; &lt; 1.0.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_wappalyzer>
    <addon>webdriverlinux</addon>
    <addon_webdriverlinux>
        <name>Linux WebDrivers</name>
        <description>Linux WebDrivers for Firefox and Chrome.</description>
        <author>ZAP Dev Team</author>
        <version>144</version>
        <file>webdriverlinux-release-144.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update ChromeDriver to 137.0.7151.119.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/webdriverlinux-v144/webdriverlinux-release-144.zap</url>
        <hash>SHA-256:66dbe56c423c2118ac2433160b737fa23e21c6389967810139e0d2fe55d21dec</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/linux-webdrivers/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-18</date>
        <size>15876065</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_webdriverlinux>
    <addon>webdrivermacos</addon>
    <addon_webdrivermacos>
        <name>MacOS WebDrivers</name>
        <description>MacOS WebDrivers for Firefox and Chrome.</description>
        <author>ZAP Dev Team</author>
        <version>144</version>
        <file>webdrivermacos-release-144.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update ChromeDriver to 137.0.7151.119.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/webdrivermacos-v144/webdrivermacos-release-144.zap</url>
        <hash>SHA-256:019dd661736906080d617462cb4442d609a24c54ade50338606463d27f7473e8</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/macos-webdrivers/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-18</date>
        <size>21322575</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_webdrivermacos>
    <addon>webdriverwindows</addon>
    <addon_webdriverwindows>
        <name>Windows WebDrivers</name>
        <description>Windows WebDrivers for Firefox and Chrome.</description>
        <author>ZAP Dev Team</author>
        <version>144</version>
        <file>webdriverwindows-release-144.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update ChromeDriver to 137.0.7151.119.&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/webdriverwindows-v144/webdriverwindows-release-144.zap</url>
        <hash>SHA-256:eb0b89f04c2f9cca49060c0ba39d7e60167a71656b4a77abed960d569ad489a9</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/windows-webdrivers/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-18</date>
        <size>21634249</size>
        <not-before-version>2.16.0</not-before-version>
    </addon_webdriverwindows>
    <addon>websocket</addon>
    <addon_websocket>
        <name>WebSockets</name>
        <description>Allows you to inspect WebSocket communication.</description>
        <author>ZAP Dev Team</author>
        <version>33</version>
        <file>websocket-release-33.zap</file>
        <status>release</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add website alert links to the help page (Issue 8189).&lt;/li&gt;
&lt;li&gt;Replace usage of CWE-200 for the following rules (Issue 8712):
&lt;ul&gt;
&lt;li&gt;Email Disclosure.&lt;/li&gt;
&lt;li&gt;Debug Error Disclosure.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/websocket-v33/websocket-release-33.zap</url>
        <hash>SHA-256:b34ee5374065661de46f329cea8a098713feac4b0f15cb97c96a59f837aad476</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/websockets/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-20</date>
        <size>1403130</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.23.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_websocket>
    <addon>zest</addon>
    <addon_zest>
        <name>Zest - Graphical Security Scripting Language</name>
        <description>A graphical security scripting language, ZAPs macro language on steroids</description>
        <author>ZAP Dev Team</author>
        <version>48.7.0</version>
        <file>zest-beta-48.7.0.zap</file>
        <status>beta</status>
        <changes>&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update Zest library to 0.30.0:
&lt;ul&gt;
&lt;li&gt;Update Selenium to version 4.33.0.&lt;/li&gt;
&lt;li&gt;Send RETURN key if submit fails for input elements not in a form.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;</changes>
        <url>https://github.com/zaproxy/zap-extensions/releases/download/zest-v48.7.0/zest-beta-48.7.0.zap</url>
        <hash>SHA-256:5823a0371f456b3428e66d95924cc566a07ee546786f3bf025be9a27f10e5a9c</hash>
        <info>https://www.zaproxy.org/docs/desktop/addons/zest/</info>
        <repo>https://github.com/zaproxy/zap-extensions/</repo>
        <date>2025-06-10</date>
        <size>3045587</size>
        <not-before-version>2.16.0</not-before-version>
        <dependencies>
            <addons>
                <addon>
                    <id>commonlib</id>
                    <version>&gt;=1.31.0</version>
                </addon>
                <addon>
                    <id>network</id>
                    <version>&gt;=0.2.0</version>
                </addon>
                <addon>
                    <id>pscan</id>
                    <version>&gt;= 0.1.0 &amp; &lt; 1.0.0</version>
                </addon>
                <addon>
                    <id>scripts</id>
                    <version>&gt;=45.2.0</version>
                </addon>
                <addon>
                    <id>selenium</id>
                    <version>&gt;= 15.13.0</version>
                </addon>
            </addons>
        </dependencies>
    </addon_zest>
</ZAP>

Youez - 2016 - github.com/yon3zu
LinuXploit