ZAP Full Scan Report

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com New Alerts
  • Content Security Policy (CSP) Header Not Set [10038] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login
  • Insecure HTTP Method - PATCH [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/c6bhgni0ax
  • Insecure HTTP Method - PUT [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/ovf05dcrh7
  • Missing Anti-clickjacking Header [10020] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login
  • Proxy Disclosure [40025] total: 8:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/robots.txt
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/sitemap.xml
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat
    • ..
  • Session ID in URL Rewrite [3] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
  • Cookie No HttpOnly Flag [10010] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/
  • Cookie Slack Detector [90027] total: 3:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
  • Cookie Without Secure Flag [10011] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/
  • Cookie without SameSite Attribute [10054] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/
  • Permissions Policy Header Not Set [10063] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login
  • X-Content-Type-Options Header Missing [10021] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login
  • Non-Storable Content [10049] total: 3:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
  • Re-examine Cache-control Directives [10015] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login
  • Session Management Response Identified [10112] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/
  • Storable and Cacheable Content [10049] total: 4:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/robots.txt
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/sitemap.xml
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login
  • User Agent Fuzzer [10104] total: 12:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=r6pwjjLrDKOYsHIjPopK0tB-1-fD21ljLnxuoJGd
    • ..

View the following link to download the report. RunnerID:12017512636

---

ZAP by Checkmarx

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com Resolved Alerts
  • Insecure HTTP Method - PATCH [90028] total: 1:
  • Insecure HTTP Method - PUT [90028] total: 1:
  • Proxy Disclosure [40025] total: 8:

View the following link to download the report. RunnerID:12019732987

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com New Alerts
  • Insecure HTTP Method - PATCH [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/3iip6v8oli
  • Insecure HTTP Method - PUT [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/sgn85pytaz
  • Proxy Disclosure [40025] total: 8:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/robots.txt
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/sitemap.xml
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat
    • ..

View the following link to download the report. RunnerID:12020044963

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com Resolved Alerts
  • Insecure HTTP Method - PATCH [90028] total: 1:
  • Insecure HTTP Method - PUT [90028] total: 1:
  • Proxy Disclosure [40025] total: 8:

View the following link to download the report. RunnerID:12020108075

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com New Alerts

  • Insecure HTTP Method - PATCH [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/3vvol4zbth
  • Insecure HTTP Method - PUT [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/cn10rmrugh

  • Proxy Disclosure [40025] total: 8:

    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/robots.txt
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/sitemap.xml
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat
    • ..

    Resolved Alerts

  • Session ID in URL Rewrite [3] total: 1:

View the following link to download the report. RunnerID:12020883783

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com New Alerts
  • Session ID in URL Rewrite [3] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=6aATF46Ec9DTOW7iRAQp3CEMe21G9i2HI4UjKbwA

View the following link to download the report. RunnerID:12021247167

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com Resolved Alerts
  • Insecure HTTP Method - PATCH [90028] total: 1:
  • Insecure HTTP Method - PUT [90028] total: 1:
  • Proxy Disclosure [40025] total: 8:

View the following link to download the report. RunnerID:12038964707

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com Resolved Alerts
  • User Agent Fuzzer [10104] total: 12:

View the following link to download the report. RunnerID:12038973749

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com New Alerts
  • Insecure HTTP Method - PATCH [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/h7hd8ssrr6
  • Insecure HTTP Method - PUT [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/jb1c7f9cj7
  • Proxy Disclosure [40025] total: 8:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/robots.txt
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/sitemap.xml
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat
    • ..
  • User Agent Fuzzer [10104] total: 12:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=2woekuQArw_ubAybGDfk_PBOzHdY-TRKXBUa6-Yf
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=2woekuQArw_ubAybGDfk_PBOzHdY-TRKXBUa6-Yf
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=2woekuQArw_ubAybGDfk_PBOzHdY-TRKXBUa6-Yf
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=2woekuQArw_ubAybGDfk_PBOzHdY-TRKXBUa6-Yf
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/login;jsessionid=2woekuQArw_ubAybGDfk_PBOzHdY-TRKXBUa6-Yf
    • ..

View the following link to download the report. RunnerID:12039227326

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com Resolved Alerts
  • Insecure HTTP Method - PATCH [90028] total: 1:
  • Insecure HTTP Method - PUT [90028] total: 1:
  • Proxy Disclosure [40025] total: 8:

View the following link to download the report. RunnerID:12039737873

[github-actions[bot]]

• Site: https://team-1-log8100-project.canadacentral.cloudapp.azure.com New Alerts
  • Insecure HTTP Method - PATCH [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/55cjlgeenl
  • Insecure HTTP Method - PUT [90028] total: 1:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat/pjqudknlhx
  • Proxy Disclosure [40025] total: 8:
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/robots.txt
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/sitemap.xml
    • https://team-1-log8100-project.canadacentral.cloudapp.azure.com/WebGoat
    • ..

View the following link to download the report. RunnerID:12039883668