-
Implement a new automation framework
- [x] Implement initial framework
- [x] Ajax Spider integration (https://github.com/zaproxy/zap-extensions/pull/2725)
- [x] Active scan rule job (https://gith…
-
Here's the URL the ZAP is testing for SQLi
```
https://website.com/Search?serviceInstance=+AND+1%3D1+--+&ID=1&serviceInstanceParameter=&WorklistRequest=true
```
and the response contains 302 to lo…
-
- Site: [https://www.google.com](https://www.google.com)
**New Alerts**
- **PII Disclosure** [10062] total: 1:
- [https://www.google.com/local/dealership/6532168995117065061/cars/2GNAXKEV3N6…
-
https://github.com/shapesecurity/salvation#query-a-policy doesn't work. `URI.parse` doesn't exist, though `URI.parseURI` does (should probably be parseUri for proper java camelCase 😉 ). But, even with…
-
### Is your feature request related to a problem? Please describe.
No docker images for Windows engine, all distros images are linux
### Describe the solution you'd like
Create a docker image…
-
In follow-up to https://github.com/zaproxy/zap-extensions/pull/1541 there are some outstanding testing changes:
- [ ] Re: `test/org/zaproxy/zap/extension/wappalyzer/WappalyzerApplicationTestHolder.…
-
```
What steps will reproduce the problem?
1. Using Zaproxy 1.3.0
2. Intercept HTTP traffic, where response is UTF-8 encoded
3. Display the response in Raw HEX
What is the expected output?
* I want t…
-
### Describe the bug
In the source code, I noticed that ZAP is supposed to detect Union Based vulnerabilities. However, when I tested ZAP with 30 test cases, most of which included Union Based SQLi v…
-
### Is your feature request related to a problem? Please describe.
I've been working through false positives from the time-based blind injection tests, starting with the Command Injection Rule (htt…
-
# Problem
At the moment it is not possible to see the rule OWASP ZAP is currently testing the page with.
# Solution
Log what rule OWASP ZAP is using currently to scan the page (URL). For exam…