Owasp Zap cannot able to capture transactions via remote dirver (Firefox)

[Praveen Kumar]

Dear Team,

I am completely new to the Owasp Zap.

I have integrated my application with Owasp Zap, but the problem is Owasp zap cannot able to capture the transactions of the selenium test cases through the remote driver.

But the same works fine with physical/desktop chrome driver.exe.

Below are the configurations used for the mozilla remote driver,

--------------------xxxxxxxxxx-------------xxxxxxxxxxxx----------------------------

 DesiredCapabilities capabilities = new DesiredCapabilities();

FirefoxProfile profile = new FirefoxProfile();

profile.setPreference("network.proxy.type", "manual");

profile.setPreference("network.proxy.http", "127.0.0.1");

profile.setPreference("network.proxy.http_port", ZAP_PROXYPORT);

capabilities.setCapability(FirefoxDriver.PROFILE, profile);

WebDriver webDriver = new RemoteWebDriver(new                                        URL("http://127.0.0.1:4444/wd/hub"), capabilities);

webDriver.manage().window().setSize(new Dimension(1920, 1080));

----------------xxxxxxxxxxxx---------------xxxxxxxxxxxxxx----------------------------------

Kindly also let me know if any configuration is available for the remote chrome driver, which is much preferable for my use case

Many thanks for the help!!

[kingthorin+owaspzap]

If you're using a modern version of Firefox you have to configure the prefs further to proxy loopback (localhost) traffic.

Details here: https://www.zaproxy.org/docs/desktop/start/proxies/

[Praveen Kumar]

Thanks for the quick reply.

Even after the above-mentioned configuration, selenium test cases transactions via remote driver aren't able to capture in Owasp Zap.

DesiredCapabilities capabilities = new DesiredCapabilities();
FirefoxProfile profile = new FirefoxProfile();
profile.setPreference("network.proxy.type", "manual");
profile.setPreference("network.proxy.http", "127.0.0.1");
profile.setPreference("network.proxy.http_port", ZAP_PROXYPORT);

profile.setPreference("network.proxy.allow_hijacking_localhost", true);

capabilities.setCapability(FirefoxDriver.PROFILE, profile);
WebDriver webDriver = new RemoteWebDriver(new URL("http://localhost:4444/wd/hub"), capabilities);
webDriver.manage().window().setSize(new Dimension(1920, 1080));

[kingthorin+owaspzap]

Probably also need to empty the 'no proxy for' list. You can see all the options we set for launching browsers here:  https://github.com/zaproxy/zap-extensions/blob/ee843f42770de551ee95e238101c12ff8b94a341/addOns/selenium/src/main/java/org/zaproxy/zap/extension/selenium/ExtensionSelenium.java#L808-L858