Should I need to install ZAP using global configuration if I have installed it in local machine again

[Prakhash Sivakumar]

Hi all,

I have already installed Zap in my machine and assigned ZAPROXY_HOME  as /home/prakhash/Sec/ZAP_2.4.3

inside the startup assigned

ZAProxy home as ZAPROXY_HOME

and Zaproxy default directory as /home/prakhash/.ZAP

I have installed the Zaproxy plugin as well, but when I try to execute the jenkins it is throwing me the following error

Perform ZAProxy
ERROR: java.lang.IllegalArgumentException: zapProgram is missing
	at fr.novia.zaproxyplugin.ZAProxy.checkParams(ZAProxy.java:805)
	at fr.novia.zaproxyplugin.ZAProxy.startZAP(ZAProxy.java:861)
	at fr.novia.zaproxyplugin.ZAProxyBuilder.perform(ZAProxyBuilder.java:189)
	at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)
	at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:779)
	at hudson.model.Build$BuildExecution.build(Build.java:205)
	at hudson.model.Build$BuildExecution.doRun(Build.java:162)
	at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:534)
	at hudson.model.Run.execute(Run.java:1741)
	at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
	at hudson.model.ResourceController.execute(ResourceController.java:98)
	at hudson.model.Executor.run(Executor.java:410)

Build step 'Execute ZAProxy' marked build as failure
Finished: FAILURE

should I need to install ZAP using global configuration for this ?

thanks

[thc...@gmail.com]

Hi.

The configuration looks right.

Where did you define the env variable ZAPROXY_HOME?

Best regards.

> --
> You received this message because you are subscribed to the Google
> Groups "OWASP ZAP Developer Group" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to zaproxy-devel...@googlegroups.com
> <mailto:zaproxy-devel...@googlegroups.com>.
> For more options, visit https://groups.google.com/d/optout.

[Prakhash Sivakumar]

Hi,

I think I have wrongly added the ZAPROXY_HOME when I installed it from git, it worked me 

thanks

> <mailto:zaproxy-develop+unsub...@googlegroups.com>.

[thc...@gmail.com]

OK, thanks for letting us know.

Best regards.

> > <mailto:zaproxy-devel...@googlegroups.com>.

> > For more options, visit https://groups.google.com/d/optout

> <https://groups.google.com/d/optout>.

>
> --
> You received this message because you are subscribed to the Google
> Groups "OWASP ZAP Developer Group" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to zaproxy-devel...@googlegroups.com

> <mailto:zaproxy-devel...@googlegroups.com>.

[Jeyakumar S]

Hi Prakhash, 

Hope you are well, i'm also getting the same issue. i have download and installed from the below URL on Windows.

https://github.com/zaproxy/zaproxy/wiki/Downloads

Also i added ZAPROXY_HOME env variabled. but its not working

Could please tell me how you installed from git.

Thanks,

Jayakumar

[Jeyakumar S]

Hi thc202,

Please help me the above question and i have attached my configuration screen shot with env variable set on my system

Thanks in Advance,

Jayakumar

>     > <mailto:zaproxy-develop+unsub...@googlegroups.com>.

>     > For more options, visit https://groups.google.com/d/optout
>     <https://groups.google.com/d/optout>.
>
> --
> You received this message because you are subscribed to the Google
> Groups "OWASP ZAP Developer Group" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to zaproxy-devel...@googlegroups.com

> <mailto:zaproxy-develop+unsub...@googlegroups.com>.

[Prakhash Sivakumar]

Hi Jeyakumar,

you have to configure that under Manage jenkins -> Global tool Configuration → Custom tool → Custom tool installations

Please refer the section 2 in my blog post in [1] if you are still not clear 

[1] https://medium.com/@PrakhashS/automating-security-testing-of-web-applications-using-owasp-zed-attack-proxy-in-jenkins-aa0f9eafdcba#.ovxw1g9hf 

cheers

[Jeyakumar S]

Hi Prakhash,

Yes, It's working.. Many Thanks.

Thanks,

Jayakumar