How to integrate ZAP with JMeter?

Question

can you all please give me idea on how to integrate ZAP tool with JMeter for security concerns and I need it to involve with daily CI builds??

And if this is wrong stack to ask this question, please direct me to one.

Thanks in advance.

EDIT: I recorded all the JMeter scripts. When I run JMeter, I need ZAP also to apply its security testings for all JMeter API calls. I need JMeter and ZAP to run in sequence for every API.

You have to be more specific. You can use ZAP in many ways. So you should outline how it's used, what your goal is, and what you tried so far. — timbre timbre, Jan 14 '18 at 20:17
Well, googling "JMeter proxy" give me [that](https://stackoverflow.com/questions/16669947/how-to-set-proxy-for-jmeter-from-behind-another-proxy) - isn't that what you were looking for? — Omer Levi Hevroni, Jan 15 '18 at 15:52

Ori Marko · Answer 1 · 2018-01-13T14:17:27.450

2

JMeter can be configure as a proxy to save all ZAP requests and then you can re send same OWASP test on same or environment after fix or change.

you can also configure ZAP to connect through another proxy - this is often necessary in a corporate environment.

edited Jan 13 '18 at 14:17

answered Jan 13 '18 at 14:11

Ori Marko

56,308
23
131
233

Thanks for your help. But I ve added my exact requirements in edit. Please take a look and do the needful. – Bala Jan 13 '18 at 14:50
You can add Zap as a proxy on server JMeter is doing the load test, see https://stackoverflow.com/questions/38660859/configure-zap-attack-as-a-system-wide-proxy – Ori Marko Jan 14 '18 at 14:20

score 1 · Answer 2 · answered Jan 24 '18 at 12:04

You basically need to configure JMeter to send all requests through ZAP Intercepting Proxy. By default ZAP is running on the same host using port 8080 so you either need to run JMeter like:

jmeter -H localhost -P 8000 -n -t test.jmx -l result.jtl

Alternatively you can define the same settings via Java Networking Properties like:

jmeter -Dhttp.proxyHost=localhost -Dhttp.proxyPort=8080 -Dhttps.proxyHost=localhost -Dhttps.proxyPort=8080 -n -t test.jmx -l result.jtl

And finally you can add the next lines to system.properties file (lives in "bin" folder of your JMeter installation)

http.proxyHost=localhost
http.proxyPort=8080
https.proxyHost=localhost
https.proxyPort=8080

JMeter restart will be required to pick the properties up.

More information:

How to integrate ZAP with JMeter?

2 Answers2