Closed GoogleCodeExporter closed 9 years ago
For reference and comparison - Arachni scanner does flag XSS on the Webseclab's
/xss/reflect/basic?in= test (screenshot attached).
Original comment by dsavi...@gmail.com
on 12 May 2015 at 8:20
Attachments:
Thanks for reporting this, and for providing so much detail :D
I'm guessing you're @dimisec?
I'm a big fan of tools like webseclab, and definitely want to use them much
more for testing ZAP.
Ideally as part of CI (once I've set up the CI server again:/)
I'll DM you on twitter ;)
Original comment by psii...@gmail.com
on 13 May 2015 at 9:18
Yes, I'm @dimisec (Twitter) = dmitris on GitHub :)
I have a couple more things from the Webseclab - just wanted to make sure I'm
not missing the proper way to scan such as options, profile settings etc.
I would love to help with integrating Webseclab into the ZAP CI build - also if
there are other tests that would be helpful to add, or bugs in the existing
ones, please let me know (https://github.com/yahoo/webseclab/issues or by email
/ Twitter)
Dmitry
Original comment by dsavi...@gmail.com
on 13 May 2015 at 10:38
ZAP has been migrated to github
This issue will be on github issues with the same ID:
https://github.com/zaproxy/zaproxy/issues
Original comment by psii...@gmail.com
on 5 Jun 2015 at 9:18
Original issue reported on code.google.com by
dsavi...@gmail.com
on 12 May 2015 at 2:06