Can ZAP be used to test mobile apps?

Yes, see these videos from @SecureCloudDev:

And these articles:

Intercepting Android traffic using OWASP ZAP - TheZero blog
Four Ways to Bypass Android SSL Verification and Certificate Pinning - NetSPI Blog

Back to the FAQ