ZAP Full Scan Report - Githubissues

skoussa2 / JavaVulnerable2

GNU General Public License v2.0

0 stars 0 forks source link

ZAP Full Scan Report #2

Open github-actions[bot] opened 4 years ago

github-actions[bot] commented 4 years ago

Site: http://www.zaproxy.org New Alerts
- HTTPS Content Available via HTTP [10047] total: 6:
Site: https://www.zaproxy.org New Alerts
- Strict-Transport-Security Header Not Set [10035] total: 20:
  - https://www.zaproxy.org/blog/2016-02-19-zap-newsletter-2016-february/images/image05.png
  - https://www.zaproxy.org/docs/desktop/addons/fuzzdb-offensive/index.xml
  - https://www.zaproxy.org/docs/desktop/addons/hud/index.xml
  - https://www.zaproxy.org/img/faq/installedAddonVersion.png
  - https://www.zaproxy.org/blog/2020-06-04-zap-2-9-0-highlights/images/footer_proxy_tooltip.png
  - ..
- Incomplete or No Cache-control and Pragma HTTP Header Set [10015] total: 20:
  - https://www.zaproxy.org/docs/alerts/40014/
  - https://www.zaproxy.org/docs/desktop/start/features/users/
  - https://www.zaproxy.org/docs/desktop/addons/community-scripts/index.xml
  - https://www.zaproxy.org/docs/desktop/releases/1.3.1/
  - https://www.zaproxy.org/docs/desktop/ui/dialogs/options/breakpoints/
  - ..
- Cross-Domain Misconfiguration [10098] total: 20:
  - https://www.zaproxy.org/img/faq/supportAddonVersion.png
  - https://www.zaproxy.org/blog/2020-03-04-dark-mode-in-the-weekly-release/images/zap-dark-desktop.png
  - https://www.zaproxy.org/getting-started/images/alert-icons.png
  - https://www.zaproxy.org/blog/2016-02-19-zap-newsletter-2016-february/images/Contexts1.png
  - https://www.zaproxy.org/blog/2015-12-15-zap-newsletter-2015-december/images/custom-http-breakpoint.png
  - ..
- Proxy Disclosure [40025] total: 20:
  - https://www.zaproxy.org/docs/desktop/addons/ruby-scripting/
  - https://www.zaproxy.org/faq/why-is-an-api-key-required-by-default/
  - https://www.zaproxy.org/docs/desktop/addons/server-sent-events
  - https://www.zaproxy.org/blog
  - https://www.zaproxy.org/docs/desktop/start/features/alerts/
  - ..
- Timestamp Disclosure - Unix [10096] total: 20:
  - https://www.zaproxy.org/docs/alerts/10042/
  - https://www.zaproxy.org/blog/2014-03-10-hacking-zap-1-why-should-you/
  - https://www.zaproxy.org/docs/desktop/releases/2.3.0/
  - https://www.zaproxy.org/docs/desktop/addons/import-urls/
  - https://www.zaproxy.org/pdf/ZAPGettingStartedGuide-2.9.pdf
  - ..
- Retrieved from Cache [10050] total: 20:
  - https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules-alpha/index.xml
  - https://www.zaproxy.org/docs/desktop/addons/ajax-spider/tab/
  - https://www.zaproxy.org/support/
  - https://www.zaproxy.org/docs/alerts/40024/
  - https://www.zaproxy.org/docs/desktop/addons/plug-n-hack/clientstab/
  - ..
- Apache Range Header DoS (CVE-2011-3192) [10053] total: 20:
  - https://www.zaproxy.org/blog/2016-01-04-zap-newsletter-2016-january/images/shodan2.png
  - https://www.zaproxy.org/blog/2020-04-09-automate-security-testing-with-zap-and-github-actions/images/scan-job.png
  - https://www.zaproxy.org/img/authors/simon-bennetts_400x400.jpg
  - https://www.zaproxy.org/getting-started/images/zap-qstart-manualexplore.png
  - https://www.zaproxy.org/getting-started/images/hud-welcome.png
  - ..
- Cross-Domain JavaScript Source File Inclusion [10017] total: 20:
  - https://www.zaproxy.org/docs/desktop/addons/openapi-support/
  - https://www.zaproxy.org/blog/2020-04-09-automate-security-testing-with-zap-and-github-actions/
  - https://www.zaproxy.org/docs/desktop/addons/save-xml-message/
  - https://www.zaproxy.org/docs/desktop/start/features/notes/
  - https://www.zaproxy.org/docs/desktop/start/features/modes/
  - ..
- User Agent Fuzzer [10104] total: 20:
  - https://www.zaproxy.org/blog/2020-03-09-zap-ssrf-setup/
  - https://www.zaproxy.org/docs/desktop/ui/dialogs/options/checkforupdates/
  - https://www.zaproxy.org/docs/desktop/ui/tlmenu/help/
  - https://www.zaproxy.org/docs/desktop/addons/bug-tracker
  - https://www.zaproxy.org/img/supporters/hisolutions.png
  - ..
- X-Content-Type-Options Header Missing [10021] total: 20:
  - https://www.zaproxy.org/docs/desktop/addons/browser-view/index.xml
  - https://www.zaproxy.org/docs/desktop/images/16/152.png
  - https://www.zaproxy.org/docs/desktop/images/fugue/application-blue-export.png
  - https://www.zaproxy.org/blog/2016-11-22-announcing-the-official-zap-jenkins-plugin/images/ZAP_CI_SMALLER.png
  - https://www.zaproxy.org/docs/desktop/addons/call-graph/index.xml
  - ..
- Cookie Slack Detector [90027] total: 20:
  - https://www.zaproxy.org/docs/desktop/addons/alert-filters/globalalertfilter/
  - https://www.zaproxy.org/docs/docker/webswing/
  - https://www.zaproxy.org/img/supporters/mozilla.png
  - https://www.zaproxy.org/docs/desktop/addons/token-generator
  - https://www.zaproxy.org/docs/desktop/addons/getting-started-guide/index.xml
  - ..
- Content Security Policy (CSP) Header Not Set [10038] total: 20:
  - https://www.zaproxy.org/docs/alerts/40012/
  - https://www.zaproxy.org/docs/desktop/start/features/alerts/
  - https://www.zaproxy.org/docs/alerts/40025/
  - https://www.zaproxy.org/docs/alerts/10017/
  - https://www.zaproxy.org/docs/desktop/addons/vulncheck/
  - ..
- Backup File Disclosure [10095] total: 15:
  - https://www.zaproxy.org/blog/2017-08-22-zap-browser-launch/images/update-all%20-%20Copy%20(3).png
  - https://www.zaproxy.org/docs/desktop/images/16%20-%20Copy/018.png
  - https://www.zaproxy.org/docs/desktop/images/16backup/018.png
  - https://www.zaproxy.org/blog/2017-08-22-zap-browser-launch/images/update-allbackup.png
  - https://www.zaproxy.org/docs/desktop/images/Copy%20of%2016/018.png
  - ..
- Trace.axd Information Leak [40029] total: 1:
  - https://www.zaproxy.org/cdn-cgi/trace.axd
- Modern Web Application [10109] total: 3:
  - https://www.zaproxy.org/docs/api/
  - https://www.zaproxy.org/evangelists/
  - https://www.zaproxy.org/download/
- Application Error Disclosure [90022] total: 3:
  - https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
  - https://www.zaproxy.org/docs/desktop/releases/2.7.0/
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
- Information Disclosure - Debug Error Messages [10023] total: 5:
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
  - https://www.zaproxy.org/docs/alerts/40008/
  - https://www.zaproxy.org/docs/desktop/addons/passive-scan-rules/
  - https://www.zaproxy.org/index.xml
  - https://www.zaproxy.org/docs/alerts/index.xml
- Directory Browsing [0] total: 1:
  - https://www.zaproxy.org/docs/desktop/addons/active-scan-rules/
- Cookie Without Secure Flag [10011] total: 2:
  - https://www.zaproxy.org/robots.txt
  - https://www.zaproxy.org/
- Loosely Scoped Cookie [90033] total: 3:
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/
  - https://www.zaproxy.org/robots.txt
- Private IP Disclosure [2] total: 7:
  - https://www.zaproxy.org/docs/alerts/2/
  - https://www.zaproxy.org/index.xml
  - https://www.zaproxy.org/docs/desktop/ui/dialogs/options/localproxy/
  - https://www.zaproxy.org/docs/docker/about/
  - https://www.zaproxy.org/docs/alerts/index.xml
  - ..
- Information Disclosure - Suspicious Comments [10027] total: 4:
  - https://www.zaproxy.org/faq/
  - https://www.zaproxy.org/cdn-cgi/scripts/zepto.min.js
  - https://www.zaproxy.org/cdn-cgi/scripts/cf.common.js
  - https://www.zaproxy.org/main.7d9e3.js
- PII Disclosure [10062] total: 1:
  - https://www.zaproxy.org/docs/desktop/addons/websockets/pscanrules/
- Reverse Tabnabbing [10108] total: 1:
  - https://www.zaproxy.org/cdn-cgi/l/email-protection

View the following link to download the report. RunnerID:153083944

github-actions[bot] commented 3 years ago

Site: http://www.zaproxy.org
Site: https://www.zaproxy.org Resolved Alerts
- Backup File Disclosure [10095] total: 15:

View the following link to download the report. RunnerID:305362093