secureCodeBox / scanner-webapplication-zap

Part of the deprecated secureCodeBox v1, see secureCodeBox/secureCodeBox Repo for v2
Apache License 2.0
5 stars 4 forks source link

Configure the ZAP Attack Mode #15

Open rseedorff opened 5 years ago

rseedorff commented 5 years ago

As a user i would like to configure the Attack mode for ZAP scans. More Informations on that can be found here: https://github.com/zaproxy/zap-core-help/wiki/HelpStartConceptsModes

There is an existing ZAP API Endpoint for this:

In my target definition (used for ZAP Scans) i would like to configure this like:

[
    {
        "name": "ZAP BodgeIt Scan",
        "location": "http://bodgeit:8080/bodgeit/",
        "attributes": {
            "ZAP_BASE_URL": "http://bodgeit:8080/bodgeit/",
            "ZAP_SPIDER_MAX_DEPTH": 1
            "ZAP_ATTACK_MODE": "attack"
        }
    }
]