OWASP ZAP. Switched password generation and checking from crypt to password_hash and password_verify.