ZAP User Group

Contact owners and managers

1–30 of 7602

Welcome to the Zed Attack Proxy (ZAP) User Group.
Please use this group for any questions about using ZAP, or for any enhancement requests you may have.

If you're having a problem with ZAP and dont know where to start then have a look at this FAQ first.

Don't ask the same question on multiple ZAP forums - the ZAP Core Team monitors all of them.

And if you post spam then it will be deleted and your account blocked.

0 selected

kiruthiga raghavendran

Dec 20

Re: [zaproxy-users] Job spider not able to access url in automation framework

Hi please resolve my below query I am working on gitlab integration with zap docker image, The app

unread,

Re: [zaproxy-users] Job spider not able to access url in automation framework

Hi please resolve my below query I am working on gitlab integration with zap docker image, The app

Dec 20

Dec 20

Quick Start Add-On

Hello All, I hope you are doing good!! I accidentally deleted the Quick Start Add-on from the "

unread,

Quick Start Add-On

Hello All, I hope you are doing good!! I accidentally deleted the Quick Start Add-on from the "

Dec 20

Dec 20

Accessing vulnerable parameter in HTTPSender script

Hello, Good day! I have a scenario where I am capturing a specific error message returned by a web

unread,

Accessing vulnerable parameter in HTTPSender script

Hello, Good day! I have a scenario where I am capturing a specific error message returned by a web

Dec 20

Dec 20

ZAP 2.16 - coming in the New Year

We have decided to delay the ZAP 2.16 release until the New Year. We will generate another weekly

unread,

ZAP 2.16 - coming in the New Year

We have decided to delay the ZAP 2.16 release until the New Year. We will generate another weekly

Dec 20

Raul Gonçalves, Simon Bennetts6

Dec 20

ZAP CLI Integration in AWS CodeBuild for CI/CD

Hey Simon! I really appreciate all your help! Just to confirm, you're saying that the script you

unread,

ZAP CLI Integration in AWS CodeBuild for CI/CD

Hey Simon! I really appreciate all your help! Just to confirm, you're saying that the script you

Dec 20

Raul Gonçalves, Simon Bennetts5

Dec 20

AJAX Spider for Navigation Bar Popovers

Hey Simon! Thanks again for your response! Besides the description I provided — a simple navbar

unread,

AJAX Spider for Navigation Bar Popovers

Hey Simon! Thanks again for your response! Besides the description I provided — a simple navbar

Dec 20

Lia, Simon Bennetts8

Dec 19

Hi Simon, Sorry for the confusion. To clarify, previously the traditional spider took 4-6 hours to

unread,

Hi Simon, Sorry for the confusion. To clarify, previously the traditional spider took 4-6 hours to

Dec 19

Rohit Kumar, … Simon Bennetts4

Dec 19

How to Start Scan after authentication is successful via zest script?

No, this will not work I'm afraid. Its worth noting that the sequence support was definitely

unread,

How to Start Scan after authentication is successful via zest script?

No, this will not work I'm afraid. Its worth noting that the sequence support was definitely

Dec 19

Christoffer Nielsen, Simon Bennetts2

Dec 19

Running ZAP API SCAN as a github action using servers with paths in OPENAPI specification

Hiya, The packaged scans are a bit restrictive. If you have simple use cases then they work fine, but

unread,

Running ZAP API SCAN as a github action using servers with paths in OPENAPI specification

Hiya, The packaged scans are a bit restrictive. If you have simple use cases then they work fine, but

Dec 19

Jamie Begbie, Simon Bennetts2

Dec 19

Authentication verification via API

See https://www.zaproxy.org/docs/getting-further/automation/target-scanning-issues/#authentication-

unread,

Authentication verification via API

See https://www.zaproxy.org/docs/getting-further/automation/target-scanning-issues/#authentication-

Dec 19

Nathan, Simon Bennetts4

Dec 19

Hidden File Found - Medium

The full HTTP response for one of the requests flagged, including the header and body. On Wednesday,

unread,

Hidden File Found - Medium

The full HTTP response for one of the requests flagged, including the header and body. On Wednesday,

Dec 19

TEJAS PATHAK, Simon Bennetts2

Dec 19

ZAP Docker for CI/CD Deployment

Hi Tejas, You can pass evironmental variables to docker, and those can then be used by ZAP (eg in the

unread,

ZAP Docker for CI/CD Deployment

Hi Tejas, You can pass evironmental variables to docker, and those can then be used by ZAP (eg in the

Dec 19

Zeeshan Zaidi, Simon Bennetts7

Dec 19

Problem with Scanning Only site_url2 in ZAP AjaxSpider

Hiya Zeeshan, I'm afraid I'm a bit busy at the moment so cannot fit in any more meetings, but

unread,

Problem with Scanning Only site_url2 in ZAP AjaxSpider

Hiya Zeeshan, I'm afraid I'm a bit busy at the moment so cannot fit in any more meetings, but

Dec 19

Aakash Dev, Simon Bennetts8

Dec 19

Token Refresher in script based authentication

Hi Aakash, Its very difficult for us to help you much more. All I can suggest is that you recheck

unread,

Token Refresher in script based authentication

Hi Aakash, Its very difficult for us to help you much more. All I can suggest is that you recheck

Dec 19

Lavan Sureshbabu, Simon Bennetts2

Dec 18

Owasp Zap vs The paid automated security Tool.

Hiya, While we keep an eye on commercial tools we are not in a position to detail exactly what the

unread,

Owasp Zap vs The paid automated security Tool.

Hiya, While we keep an eye on commercial tools we are not in a position to detail exactly what the

Dec 18

อัสสึเกโด ยูเมโว, Simon Bennetts2

Dec 18

i can't connect firefox

The dialog literally tells you to see https://www.zaproxy.org/faq/no-browser/

unread,

i can't connect firefox

The dialog literally tells you to see https://www.zaproxy.org/faq/no-browser/

Dec 18

Angel Reyes, Simon Bennetts2

Dec 18

Can you explain why you want to do this? Cheers, Simon On Saturday, 14 December 2024 at 19:32:17 UTC

unread,

Can you explain why you want to do this? Cheers, Simon On Saturday, 14 December 2024 at 19:32:17 UTC

Dec 18

Marcos Rodriguez, Simon Bennetts2

Dec 18

gRPC for Automation Framework

Hiya, The Automation Framework does not provide explicit gRPC support, but if you have the add-on

unread,

gRPC for Automation Framework

Hiya, The Automation Framework does not provide explicit gRPC support, but if you have the add-on

Dec 18

hailez antony, Simon Bennetts2

Dec 18

How to get a report of zapfullscan in the modern HTML format

Hiya, Switch to using the Automation Framework: https://www.zaproxy.org/docs/automate/automation-

unread,

How to get a report of zapfullscan in the modern HTML format

Hiya, Switch to using the Automation Framework: https://www.zaproxy.org/docs/automate/automation-

Dec 18

Jim Papadimas, Simon Bennetts2

Dec 18

Storage Limit Issue with ZAP Session File

Hiya, Answers inline: Is this file size behavior expected during scans ? It is completely app

unread,

Storage Limit Issue with ZAP Session File

Hiya, Answers inline: Is this file size behavior expected during scans ? It is completely app

Dec 18

bharat varkala, Simon Bennetts4

Dec 18

facing issues with the Forced User Mode in OWASP ZAP for application with authentication AWS Cognito (via a custom authentication flow) and SAML-based authentication.

Hi Bharat, Sorry, I thought I had made it clear. Do NOT use Forced User Mode in automation! If the

unread,

facing issues with the Forced User Mode in OWASP ZAP for application with authentication AWS Cognito (via a custom authentication flow) and SAML-based authentication.

Hi Bharat, Sorry, I thought I had made it clear. Do NOT use Forced User Mode in automation! If the

Dec 18

Bernie Jordaan, … Saul Javier7

Dec 18

Graal.js HttpSender script failing

Thanks I was hoping there were another way On Tuesday, December 17, 2024 at 3:42:07 PM UTC+2 Saul

unread,

Graal.js HttpSender script failing

Thanks I was hoping there were another way On Tuesday, December 17, 2024 at 3:42:07 PM UTC+2 Saul

Dec 18

Abdelkhalek BERAOUD (letmewin)

Dec 16

Can Spider get URLs available in the frontend when using some libraries like Ziggy?

When I was testing a Laravel application that had Ziggy to export Laravel routes in the frontend, I

unread,

Can Spider get URLs available in the frontend when using some libraries like Ziggy?

When I was testing a Laravel application that had Ziggy to export Laravel routes in the frontend, I

Dec 16

Julia Khanbekova, … kingthorin+zap4

Dec 16

params to post methods in openapi scan

https://www.zaproxy.org/docs/desktop/start/features/scanpolicy/ On Monday, December 16, 2024 at 12:48

unread,

params to post methods in openapi scan

https://www.zaproxy.org/docs/desktop/start/features/scanpolicy/ On Monday, December 16, 2024 at 12:48

Dec 16

Olindo Pindaro, … Dan Kegel5

Dec 15

odd error on authentication

Thanks for your suggestion Il sab 14 dic 2024, 23:17 'Dan Kegel' via ZAP User Group <

unread,

odd error on authentication

Thanks for your suggestion Il sab 14 dic 2024, 23:17 'Dan Kegel' via ZAP User Group <

Dec 15

Zeeshan Zaidi, Simon Bennetts5

Dec 12

Issue with Excluding an Element Using add_excluded_element in ajaxSpider

I have added below Excluded element for AJAX Spider in ZAP desktop, but spider is still crawling to

unread,

Issue with Excluding an Element Using add_excluded_element in ajaxSpider

I have added below Excluded element for AJAX Spider in ZAP desktop, but spider is still crawling to

Dec 12

David De Paolis, … thc2024

Dec 12

Enabling TLS 1.0 and 1.1 on ZAP 2.15

Hi, Did you already enable them in the security file? You should not need to pass any JVM args, ZAP

unread,

Enabling TLS 1.0 and 1.1 on ZAP 2.15

Hi, Did you already enable them in the security file? You should not need to pass any JVM args, ZAP

Dec 12

Loreno Oliveira, kingthorin+zap3

Dec 10

Automation plan runs differently on gui and dockerized zap

I've just tried: docker run -v ${pwd}:/zap/wrk/:rw -t zaproxy/zap-stable /bin/bash -c "zap.

unread,

Automation plan runs differently on gui and dockerized zap

I've just tried: docker run -v ${pwd}:/zap/wrk/:rw -t zaproxy/zap-stable /bin/bash -c "zap.

Dec 10

Dec 9

ZAP 2.16.0 Release Candidate

The latest ZAP weekly release is the 2.16.0 Release Candidate: https://www.zaproxy.org/download/#

unread,

ZAP 2.16.0 Release Candidate

The latest ZAP weekly release is the 2.16.0 Release Candidate: https://www.zaproxy.org/download/#

Dec 9

Samarthya Gupta, Simon Bennetts3

Dec 6

I am trying to run an authenticated scan of my webapp, but it fails. Kind of urgent

Thanks Simon, The docs actually helped a lot. On Fri, 6 Dec 2024 at 10:31 PM, Simon Bennetts <

unread,

I am trying to run an authenticated scan of my webapp, but it fails. Kind of urgent

Thanks Simon, The docs actually helped a lot. On Fri, 6 Dec 2024 at 10:31 PM, Simon Bennetts <

Dec 6

Search

Clear search

Close search

Google apps

Main menu