For active scan, how do I login first before scanning a specific URL?

[C PQ]

Hi,

I am using ZAP 2.15.0. I trying to active scan one of the URLs (POST request) that requires user to login first in my web application but the active scan did not login. In the context, I created the users and set authentication to form-based authentication.

At active scan settings:

Starting Point: https://x.x.x.x/myPortal/Menu2

Policy: Default

Context: myContext

my login URL is https://x.x.x.x/myPortal/Login

How do I let the active scan to login first before scanning /Menu2?

Thanks.

[psiinon]

Hi,

This question is about how to use ZAP - please ask them on the ZAP User Group: https://groups.google.com/group/zaproxy-users

This forum is for ZAP development questions.

Cheers,

Simon