ZAP extensions to automate BOLA tests

136 views

Skip to first unread message

Abdessamad Temmar

unread,

Jul 5, 2023, 11:44:33 AM7/5/23

to OWASP ZAP User Group

Hello team,

Is there any sample script or extension similar to what we have in Burp suite (https://github.com/PortSwigger/autorize or https://portswigger.net/bappstore/30d8ee9f40c041b0bfec67441aad158e) that can used along with ZAF to automate authorization check ?

Thanks for your feedbacks.

psiinon

unread,

Jul 5, 2023, 11:49:19 AM7/5/23

to zaprox...@googlegroups.com

Hiya,

Have a look at the Access Control add-on https://www.zaproxy.org/docs/desktop/addons/access-control-testing/

Let us know how you get on with it - some feedback on it would be very helpful.

Cheers,

Simon

--
You received this message because you are subscribed to the Google Groups "OWASP ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/4c9c2cea-1d30-49ae-960e-3b3a831e2650n%40googlegroups.com.