Importing into IntelliJ

[Venkata Subrahmanyam]

Hello guys, 

I am planning to import the ZAP files and create some custom extensions and change some specific parts accordingly. Can anyone suggest to me how to go about this?

Thank you, 

Venkat

Virus-free. www.avast.com

This mail is governed by the Disclaimer Terms of  SIU which may be viewed at http://siu.edu.in/disclaimer.php

[psiinon]

The shared doc linked off https://github.com/zaproxy/zaproxy/wiki/Building is probably the best we have at the moment...

[Venkata Subrahmanyam]

Thank you, this should help. :) 

--
You received this message because you are subscribed to the Google Groups "OWASP ZAP Developer Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-devel...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/bc2f5533-bf70-4133-a9c2-f7d0fbe38128n%40googlegroups.com.

[Venkata Subrahmanyam]

Hello, 

A quick clarification - I am working at a place where I cannot clone public Github repos and work on them. I do not see a workaround for it. Is there something that can be done to overcome this?

Venkat

[Venkata Subrahmanyam]

I have to get the files into the system somehow and build manually. Thank you nevertheless. 

[psiinon]

Yeah, you'll need to clone the repo somewhere else and then copy the files across.

[Venkata Subrahmanyam]

Follow up question - there are active scan rules (alpha & beta) which comprise of rules not part of the downloadable. Are they coming as part of the next release or is it something to be used per our discretion? Just curious, thank you. 

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/78189f65-a4f6-49ce-ab80-984897d45fe4n%40googlegroups.com.

[psiinon]

All new rules (active and passive) are initially released as alpha and then can be promoted to beta and then release.

Add-on follow the same path, but rules are moved between the relevant add-ons instead.

The guidelines for promoting an add-on are: https://github.com/zaproxy/zap-extensions/wiki/AddOnDevelopment

The process for promoting rules is not really formalised - we usually look at them before a major release but will also promote (and sometimes demote) rules at other times.

If anyone feels strongly that a rule should be promoted or demoted then just say :)

Cheers,

Simon

[Venkata Subrahmanyam]

Thank you for your response. If I want to incorporate all the Ascan rules and other rules present as part of the repo, is it safe to assume I should go ahead and make my own build and use rather than wait for the rules to be incorporated in subsequent releases?

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/bc7d4e5c-c38a-4a69-a9a7-a6d27414048fn%40googlegroups.com.

[psiinon]

You can of course make your own builds, but these will be a lot of efffort to maintain.

If you want to use the alpha and beta rules then you can just install them from the ZAP Marketplace via the UI or the commandline - thats what the Marketplace is there for :)

Cheers,

Simon

[Venkata Subrahmanyam]

Understood. I am in the process of adding some reporting features specific to the organisation I am working with. I guess building my version would make sense in a way I can add things that are not part of the downloadable. 
But yes, I can use the alpha/beta Ascan versions from the marketplace to save some trouble.

As always, thank you for your response. :) 

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/476ab230-8c32-4042-a730-78a80477d4dan%40googlegroups.com.

[psiinon]

Yes, thats the beauty of open source - you can make you own changes.

If you think they might be useful to others then please contribute then back :)

[Venkata Subrahmanyam]

Most definitely. :)

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/bc9dcf93-2301-4b7e-b62b-d9ee9dc17e49n%40googlegroups.com.

[ricekot]

We now have new documentation for developers re importing ZAP into IntelliJ. You can find them linked at https://www.zaproxy.org/docs/developer/.

If you look carefully there is also a page on creating a new add-on in zap-extensions :D.

All feedback is appreciated :).

Best regards

[Venkata Subrahmanyam]

This is amazing. I was planning to contribute this. Thank you for this. 😁

To view this discussion on the web, visit https://groups.google.com/d/msgid/zaproxy-develop/e09866ea-f810-4531-be32-87e5c422cd5an%40googlegroups.com.