Stack Overflow
Stack Overflow

Questions tagged [zap]

OWASP Zed Attack Proxy (ZAP)

https://www.owasp.org/index.php/ZAP

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.

The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. The Open Web Application Security Project (OWASP), an online community, produces freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.

548 questions
-2
votes
1 answer

OWASP ZAP -- Continuous form submission after ZAP Automated scan

I ran a scan on my website using OWASP ZAP. But after I stopped the scan, it continuously submitting forms on the website almost 2000. Is there any solution to stop form submission?
Asad Raza
  • 1
-2
votes
1 answer

ZAP-Form based Authentication not working -How to scan a web pages by providing username/password directly on web page

How to scan web pages for site where we need to do login with username/Password. I used form based authentication but its not working as I am getting POST response as follows.so please let me know how I can scan by providing credentials manually.…
AAA
  • 1
-2
votes
1 answer

How to retrieve the results of AjaxSpider scan using the Java APIs of ZAP

When I executed the Spider scan using the Java API of ZAP I got expected results as follows: Code: System.out.println("Spider completed"); List spiderResults = ((ApiResponseList)api.spider.results(scanID)).getItems(); // printing…
undetected Selenium
  • 183,867
  • 41
  • 278
  • 352
-2
votes
1 answer

How to use the spiderViewStatus Java API of OWASP ZAP to get the status/percentage of work done by the Spider?

I was following the API documentation of Using Spider. The Java based code block works great and I get an output. Code: import java.util.List; import org.zaproxy.clientapi.core.ApiResponse; import…
undetected Selenium
  • 183,867
  • 41
  • 278
  • 352
-2
votes
1 answer

OWASP zap python api authentication

I'd like to start off by saying that I love this tool and the API is written in a very easy to follow way if you are familiar with Zap. The only troubles I've had is that I can't find much documentation on the python API, so I've gone off of the…
jeannotteb
  • 11
  • 3
-2
votes
2 answers

Why it's not showing render html in zap attack proxy (zap)?

I am using zed attack proxy tool. It's not showing rendered html in response tab in new version. What's the problem.
Dev_Giri
  • 11
  • 2
-3
votes
1 answer

How do you make owasp zap crawl subdomains?

In the spider window it says they are out of scope.
Angel Reyes
  • 1
  • 2
-5
votes
1 answer

How to configure the user_token of Damn Vulnerable Web Application within CSRF field while Script based authentication using ZAP?

I had been following the documentation of Script Based Authentication for Damn Vulnerable Web Application using ZAP. I have navigated to http://localhost/dvwa/login.php through Manual Explore which opens up the DVWA application on my localhost as…
undetected Selenium
  • 183,867
  • 41
  • 278
  • 352
1 2 3
…
36
37