In your experience, is cross site Scripting the main type of vulnerability you find with the OWASP Zap Scanner? Or have you found others as well? Btw, for those who want a basic understanding of cross site Scripting, you can go to the following link: https://www.smithsec.net/posts/basic-website-hacking-cross-site-scripting-xss More on reddit.com

Don’t want to be rude, but as long as you can’t figure out by yourself if you should not put money into something you are probably don’t require it. It is part of the capability to understand the difference between tools and whether you require a payed version or not (for now)… In the end the tool does not decide whether you are good skillwise or not. It may only limit you somewhere and if you reach this point you are able to decide by yourself and only then it’s actually required. I even sometimes have the feeling the learning curve flattens if people rely on easy to use tools instead of understanding what’s happening .. More on reddit.com

I was recently looking for softwares that i can use to test web applications when i came across OWASP ZAP. Quickly booted my kali to learn that it… More on reddit.com

Yes. Any automated tool runs the risk of being detected. Your question should be, if this is true, how can I prevent. Think creatively on what is likely getting detected and how you can automate traffic to look real.... Slow it down... Rotate IPs..... Stop guessing bullshit routes.... Chances are you're going to get caught using any normal spider tool that is brute force guessing routes.... More on reddit.com