ZAP Developer Group

1–30 of 2351

Welcome to the Zed Attack Proxy (ZAP) Development Group.

Please use this group for any questions about developing, fixing or extending ZAP.

Don't ask the same question on multiple ZAP forums - the ZAP Core Team monitors all of them.

And if you post spam then it will be deleted and your account blocked.

0 selected

Eddy Vanlerberghe

12/23/25

Generate multi-color output in script output panel?

Hi, This is a question regarding scripting in Zaproxy and if this belongs more in the users groups

unread,

Generate multi-color output in script output panel?

Hi, This is a question regarding scripting in Zaproxy and if this belongs more in the users groups

12/23/25

ashish Rajanand, psiinon2

12/17/25

Query on Authenticating Multi-Field TOTP in Browser-Based Authentication

This is a question about using ZAP rather than developing ZAP, so please ask on the User Group: https

unread,

Query on Authenticating Multi-Field TOTP in Browser-Based Authentication

This is a question about using ZAP rather than developing ZAP, so please ask on the User Group: https

12/17/25

PRIYA BHUNIA, thc2022

12/16/25

Build failed on windows

Hi, As mentioned in the linked page use a supported JDK (version 17). https://www.zaproxy.org/docs/

unread,

Build failed on windows

Hi, As mentioned in the linked page use a supported JDK (version 17). https://www.zaproxy.org/docs/

12/16/25

Abdullah Zulfiqar, psiinon6

12/10/25

Introduction & Contribution Interest – Abdullah Zulfiqar

I've sent you a direct email, sorry for the delay! On Thursday, 4 December 2025 at 11:01:19 UTC

unread,

Introduction & Contribution Interest – Abdullah Zulfiqar

I've sent you a direct email, sorry for the delay! On Thursday, 4 December 2025 at 11:01:19 UTC

12/10/25

Tom Barber, psiinon3

11/27/25

ZAP Addon for Project Foxhound

Hi Simon, Thanks for the quick and enthusiastic reply! I also replied to you on LinkedIn, let's

unread,

ZAP Addon for Project Foxhound

Hi Simon, Thanks for the quick and enthusiastic reply! I also replied to you on LinkedIn, let's

11/27/25

Soumya Naidu, … psiinon3

11/7/25

ZAP CLI Authentication

This group is for developing ZAP, ie anything related to the code. For questions about using ZAP

unread,

ZAP CLI Authentication

This group is for developing ZAP, ie anything related to the code. For questions about using ZAP

11/7/25

witse panneels, psiinon2

11/3/25

ApiElement requiresApiKey not working

Hiya, I'm not aware of any bugs in this area, and I often access the ZAP API with the API key

unread,

ApiElement requiresApiKey not working

Hiya, I'm not aware of any bugs in this area, and I often access the ZAP API with the API key

11/3/25

Kaso, psiinon2

10/30/25

Broken links - Official videos

Hiya Kattia, Unfortunately these videos were deleted, as per https://www.zaproxy.org/zap-in-ten/ We

unread,

Broken links - Official videos

Hiya Kattia, Unfortunately these videos were deleted, as per https://www.zaproxy.org/zap-in-ten/ We

10/30/25

Kaso, psiinon4

10/29/25

Testing ZAP Proxy

Does it work as it is supposed to? :) Try running it locally, run the ZAP spider against it and then

unread,

Testing ZAP Proxy

Does it work as it is supposed to? :) Try running it locally, run the ZAP spider against it and then

10/29/25

Rahul Pavithran, thc2025

10/28/25

OpenAPI Extension: Import Support for API paths ending with "/**"

The fix is already included in the weekly and nightly releases. The add-on should be released to 2.16

unread,

OpenAPI Extension: Import Support for API paths ending with "/**"

The fix is already included in the weekly and nightly releases. The add-on should be released to 2.16

10/28/25

Eddy Vanlerberghe, … psiinon3

9/26/25

Multilanguage support for new addon?

We have an automated job which uploads the English language files to Crowdin, where they can be

unread,

Multilanguage support for new addon?

We have an automated job which uploads the English language files to Crowdin, where they can be

9/26/25

alejandro ar, kingthorin+zap3

9/24/25

Error in active scanner “Content-Type: multipart/form-data” -> "java.lang.IndexOutOfBoundsException: Index -1 out of bounds for length 3"

Hello, @kingthorin+zap I have checked again and the issue persists. I am not sure if it is related to

unread,

Error in active scanner “Content-Type: multipart/form-data” -> "java.lang.IndexOutOfBoundsException: Index -1 out of bounds for length 3"

Hello, @kingthorin+zap I have checked again and the issue persists. I am not sure if it is related to

9/24/25

Eddy Vanlerberghe, thc2023

9/17/25

Multiselect in history pane

Thanks. On Tuesday, September 16, 2025 at 4:40:35 PM UTC+7 thc202 wrote: Hi. Call the constructor `

unread,

Multiselect in history pane

Thanks. On Tuesday, September 16, 2025 at 4:40:35 PM UTC+7 thc202 wrote: Hi. Call the constructor `

9/17/25

Eddy Vanlerberghe, … thc2025

9/4/25

Classpath during compilation of Zaproxy and Zap-extensions

Makes sense but I'd suggest use of an IDE, you can debug core code and add-ons at the same time (

unread,

Classpath during compilation of Zaproxy and Zap-extensions

Makes sense but I'd suggest use of an IDE, you can debug core code and add-ons at the same time (

9/4/25

Naresh Varshney, psiinon2

8/29/25

Unable to Generate ZAP Report due to Proxy Request Rejection

Naresh, Please only ask a question in one place. The ZAP User Group is the right place for this sort

unread,

Unable to Generate ZAP Report due to Proxy Request Rejection

Naresh, Please only ask a question in one place. The ZAP User Group is the right place for this sort

8/29/25

Mukund Kedia, kingthorin+zap3

8/24/25

First pull request error

Thank you. It is resolved. On Sunday, 24 August 2025 at 20:55:38 UTC+5:30 kingthorin+zap wrote: It

unread,

First pull request error

Thank you. It is resolved. On Sunday, 24 August 2025 at 20:55:38 UTC+5:30 kingthorin+zap wrote: It

8/24/25

Soumya Naidu, psiinon2

8/13/25

Authentication Tester Issue

This group is for questions about developing ZAP. Your question is about using ZAP, so please as it

unread,

Authentication Tester Issue

This group is for questions about developing ZAP. Your question is about using ZAP, so please as it

8/13/25

Md Niaz Morshed

8/11/25

equest to participate and Share the Survey with your Software Developers and Code Reviewers

Dear Sir, I hope this message finds you well. My name is Md Niaz Morshed, and I am leading a team

unread,

equest to participate and Share the Survey with your Software Developers and Code Reviewers

Dear Sir, I hope this message finds you well. My name is Md Niaz Morshed, and I am leading a team

8/11/25

Md Niaz Morshed

8/11/25

Request to Share the Survey with your Software Developers and Code Reviewers

Dear Sir, I hope this message finds you well. My name is Md Niaz Morshed, and I am leading a team

unread,

Request to Share the Survey with your Software Developers and Code Reviewers

Dear Sir, I hope this message finds you well. My name is Md Niaz Morshed, and I am leading a team

8/11/25

Boss Chen, thc2022

8/4/25

Unable Attack on old router ?

Hi, As the error message says your JRE does not have TLS 1.0 enabled (that's disabled by default

unread,

Unable Attack on old router ?

Hi, As the error message says your JRE does not have TLS 1.0 enabled (that's disabled by default

8/4/25

Matteo Simionato, … thc2025

7/31/25

HarUtils deprecated from ZAP 2.16.0

Sure, I can give you more context. The main files involved are // Communication.java package org.

unread,

HarUtils deprecated from ZAP 2.16.0

Sure, I can give you more context. The main files involved are // Communication.java package org.

7/31/25

Md Niaz Morshed

7/21/25

Request permission to share a survey on code review in OSS security

Dear Sir/Madam, I hope you are doing well. I am a Ph.D. student at the University of Alabama

unread,

Request permission to share a survey on code review in OSS security

Dear Sir/Madam, I hope you are doing well. I am a Ph.D. student at the University of Alabama

7/21/25

Rahul Srivastava, psiinon2

6/17/25

Issue Accessing gRPC Features After Installing gRPC Plugin in ZAP 2.16.1

For info this was answered on the ZAP Slack. On Tuesday, 17 June 2025 at 16:11:39 UTC+1 rahulsriv...@

unread,

Issue Accessing gRPC Features After Installing gRPC Plugin in ZAP 2.16.1

For info this was answered on the ZAP Slack. On Tuesday, 17 June 2025 at 16:11:39 UTC+1 rahulsriv...@

6/17/25

Nikhilesh Singh, psiinon3

6/11/25

[Bug]: Persistent "Artifact name is not valid" (400 Bad Request) from GitHub API despite valid name & token

Okay, for sure. This was in measure to report the issue. On Wed, Jun 11, 2025, 16:28 psiinon <

unread,

[Bug]: Persistent "Artifact name is not valid" (400 Bad Request) from GitHub API despite valid name & token

Okay, for sure. This was in measure to report the issue. On Wed, Jun 11, 2025, 16:28 psiinon <

6/11/25

MPR GTR, psiinon2

5/27/25

ZAP False Positive for 40018 SQL Injection

No its not. Did you get that from an LLM? If so you should be aware that LLMs are bad at technical

unread,

ZAP False Positive for 40018 SQL Injection

No its not. Did you get that from an LLM? If so you should be aware that LLMs are bad at technical

5/27/25

Alex Mayfield, kingthorin+zap2

4/24/25

Insecure Deserialization Add-On Inquiry

DNS is almost universally allowed outbound. ICMP ping may not be. HTTP/HTTPS to non-standard ports

unread,

Insecure Deserialization Add-On Inquiry

DNS is almost universally allowed outbound. ICMP ping may not be. HTTP/HTTPS to non-standard ports

4/24/25

Kirthika Krishnan, psiinon2

4/17/25

Not able to use the Firefox browser

Hi Kirthika, This is really a question about using ZAP rather than developing it, so in future please

unread,

Not able to use the Firefox browser

Hi Kirthika, This is really a question about using ZAP rather than developing it, so in future please

4/17/25

Tomasz Nowak, … kingthorin+zap3

4/10/25

Feature Request: "Duplicate" Button for Replacer Addon

This seems like: https://github.com/zaproxy/zaproxy/issues/7767 And the fix/feature that was started:

unread,

Feature Request: "Duplicate" Button for Replacer Addon

This seems like: https://github.com/zaproxy/zaproxy/issues/7767 And the fix/feature that was started:

4/10/25

Nick, psiinon8

4/10/25

Add-on debug

Thanks for letting us know! On Thursday, 10 April 2025 at 07:49:29 UTC+1 niccolol...@gmail.com wrote:

unread,

Add-on debug

Thanks for letting us know! On Thursday, 10 April 2025 at 07:49:29 UTC+1 niccolol...@gmail.com wrote:

4/10/25

zinw elzl, … Satish Verma3

4/3/25

Will you add ZAP MCP server?

Dear ZAP Team, I recently came across the discussion regarding the ZAP MCP server, and I am

unread,

Will you add ZAP MCP server?

Dear ZAP Team, I recently came across the discussion regarding the ZAP MCP server, and I am

4/3/25