search

ICTU / zap2docker-auth-weekly

Zap baseline scanner in Docker with authentication
Apache License 2.0
104 stars 72 forks source link

scanner failing - (zap-baseline-custom.py) missing latest api changes #1

Closed hirizarry643 closed 6 years ago

hirizarry643 commented 6 years ago

There has been some recent updates to the api that requires some modifications to the zap-baseline-custom.py script. Please see (https://github.com/zaproxy/zaproxy/tree/develop/build/docker)

injcristianrojas commented 6 years ago

I got the same issue over here. For instance, I get this error:

WARNING:root:Unexpected error: <type 'exceptions.TypeError'>
Traceback (most recent call last):
  File "/zap/zap-baseline-custom.py", line 542, in main
    for url in zap.core.urls:
TypeError: 'instancemethod' object is not iterable
0xRCE commented 6 years ago

I will fix this issue the coming days. What are the commandline options you are using when this error occurs?

injcristianrojas commented 6 years ago

I think I've fixed it in #4.

I tested it using the following:

docker build -t injcristianrojas/zap2docker-stable .
docker run -t injcristianrojas/zap2docker-stable zap-baseline-custom.py -m 2 -a -j -z "-config scanner.strength=INSANE" --active_scan -t http://172.26.0.1:8080