Using OWASP ZAP for scanning web applications.