My scan is successful bur no findings. -Please suggest
43 views
Skip to first unread message
chandan kumar
Jul 25, 2020, 4:43:25 AM7/25/20
to ZAP Jenkins Plugin
Running as SYSTEM Building in workspace C:\Program Files (x86)\Jenkins\workspace\21_July [ZAP Jenkins Plugin] START PRE-BUILD ENVIRONMENT VARIABLE REPLACEMENT HOST = [ 127.0.0.1 ] PORT = [ 8090 ] SESSION FILENAME = [ 24_July ] INTERNAL SITES = [ ] CONTEXT NAME = [ test ] INCLUDE IN CONTEXT = [ http://rpsit.org.in/ ] EXCLUDE FROM CONTEXT = [ ] STARTING POINT (URL) = [ http://rpsit.org.in/ ] REPORT FILENAME = [ JENKINS_ZAP_VULNERABILITY_REPORT ] REPORT TITLE = [ scan_test_report ] COMMAND LINE = [ZAP Jenkins Plugin] END PRE-BUILD ENVIRONMENT VARIABLE REPLACEMENT [ZAP Jenkins Plugin] CLEAR LOGS IN SETTINGS... ZAP HOME DIRECTORY [ C:\Program Files\OWASP\Zed Attack Proxy\ZAP ] JENKINS WORKSPACE [ C:\Program Files (x86)\Jenkins\workspace\21_July ] CLEARING ZAP HOME DIRECTORY/LOGS [ C:\Program Files\OWASP\Zed Attack Proxy\ZAP\zap.log ] LOG HAS BEEN FOUND DELETE [zap.log] FROM [C:\Program Files\OWASP\Zed Attack Proxy\ZAP\zap.log] [ZAP Jenkins Plugin] START BUILD STEP [ZAP Jenkins Plugin] PLUGIN VALIDATION (PLG), VARIABLE VALIDATION AND ENVIRONMENT INJECTOR EXPANSION (EXP) ZAP INSTALLATION DIRECTORY = [ C:\Program Files\OWASP\Zed Attack Proxy\ ] (EXP) HOST = [ 127.0.0.1 ] (EXP) PORT = [ 8090 ] (EXP) CONTEXT NAME = [ test ] (EXP) INCLUDE IN CONTEXT = [ http://rpsit.org.in/ ] (EXP) EXCLUDE FROM CONTEXT = [ ] (EXP) STARTING POINT (URL) = [ http://rpsit.org.in/ ] (EXP) REPORT FILENAME = [ JENKINS_ZAP_VULNERABILITY_REPORT ] [ZAP Jenkins Plugin] CONFIGURE RUN COMMANDS for [ C:\Program Files\OWASP\Zed Attack Proxy\zap.bat ] [ZAP Jenkins Plugin] EXECUTE LAUNCH COMMAND [Zed Attack Proxy] $ "C:\Program Files\OWASP\Zed Attack Proxy\zap.bat" -daemon -host 127.0.0.1 -port 8090 -config api.key=ZAPROXY-PLUGIN -dir "C:\Program Files\OWASP\Zed Attack Proxy\ZAP" [ZAP Jenkins Plugin] INITIALIZATION [ START ] C:\Program Files\OWASP\Zed Attack Proxy>if exist "C:\WINDOWS\system32\config\systemprofile\OWASP ZAP\.ZAP_JVM.properties" (set /p jvmopts= 0<"C:\WINDOWS\system32\config\systemprofile\OWASP ZAP\.ZAP_JVM.properties" ) else (set jvmopts=-Xmx512m ) C:\Program Files\OWASP\Zed Attack Proxy>java -Xmx512m -jar zap-2.9.0.jar -daemon -host 127.0.0.1 -port 8090 -config api.key=ZAPROXY-PLUGIN -dir "C:\Program Files\OWASP\Zed Attack Proxy\ZAP" 0 [main] INFO org.zaproxy.zap.DaemonBootstrap - OWASP ZAP 2.9.0 started 25/07/20 13:13:10 with home C:\Program Files\OWASP\Zed Attack Proxy\ZAP\ 47 [main] INFO org.parosproxy.paros.common.AbstractParam - Setting config api.key = ZAPROXY-PLUGIN was ZAPROXY-PLUGIN 56 [main] INFO org.parosproxy.paros.network.SSLConnector - Reading supported SSL/TLS protocols... 56 [main] INFO org.parosproxy.paros.network.SSLConnector - Using a SSLEngine... 89 [main] INFO org.parosproxy.paros.network.SSLConnector - Done reading supported SSL/TLS protocols: [SSLv2Hello, SSLv3, TLSv1, TLSv1.1, TLSv1.2] 108 [main] INFO org.parosproxy.paros.extension.option.OptionsParamCertificate - Unsafe SSL renegotiation disabled. 680 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open start 690 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open end 762 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory - Loading extensions 990 [ZAP-daemon] WARN org.zaproxy.zap.control.AddOnCollection - Failed to create add-on for webdriverwindows java.util.zip.ZipException: error in opening zip file at java.util.zip.ZipFile.open(Native Method) at java.util.zip.ZipFile.<init>(Unknown Source) at java.util.zip.ZipFile.<init>(Unknown Source) at java.util.zip.ZipFile.<init>(Unknown Source) at org.zaproxy.zap.control.AddOn.loadManifestFile(AddOn.java:565) at org.zaproxy.zap.control.AddOn.<init>(AddOn.java:656) at org.zaproxy.zap.control.AddOnCollection.load(AddOnCollection.java:142) at org.zaproxy.zap.control.AddOnCollection.<init>(AddOnCollection.java:59) at org.zaproxy.zap.control.AddOnCollection.<init>(AddOnCollection.java:51) at org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate.getPreviousVersionInfo(ExtensionAutoUpdate.java:1112) at org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate.initialize(ExtensionAutoUpdate.java:178) at org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate.<init>(ExtensionAutoUpdate.java:167) at org.zaproxy.zap.control.CoreFunctionality.createExtensions(CoreFunctionality.java:82) at org.zaproxy.zap.control.CoreFunctionality.getBuiltInExtensions(CoreFunctionality.java:60) at org.zaproxy.zap.control.ExtensionFactory.loadAllExtension(ExtensionFactory.java:104) at org.parosproxy.paros.control.Control.addExtension(Control.java:181) at org.parosproxy.paros.control.AbstractControl.loadExtension(AbstractControl.java:54) at org.parosproxy.paros.control.Control.init(Control.java:137) at org.parosproxy.paros.control.Control.initSingletonWithoutViewAndProxy(Control.java:367) at org.zaproxy.zap.HeadlessBootstrap.initControl(HeadlessBootstrap.java:58) at org.zaproxy.zap.DaemonBootstrap$1.run(DaemonBootstrap.java:78) at java.lang.Thread.run(Unknown Source) 1699 [ZAP-daemon] WARN org.zaproxy.zap.control.AddOn - Invalid add-on: C:\Program Files\OWASP\Zed Attack Proxy\ZAP\plugin\webdriverwindows-release-18.zap. error in opening zip file 1796 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory - Installed add-ons: [[id=alertFilters, version=10.0.0], [id=bruteforce, version=9.0.0], [id=diff, version=10.0.0], [id=directorylistv1, version=4.0.0], [id=fuzz, version=12.0.0], [id=gettingStarted, version=11.0.0], [id=help, version=10.0.0], [id=importurls, version=7.0.0], [id=invoke, version=10.0.0], [id=onlineMenu, version=7.0.0], [id=replacer, version=8.0.0], [id=reveal, version=3.0.0], [id=saverawmessage, version=5.0.0], [id=savexmlmessage, version=0.1.0], [id=scripts, version=26.0.0], [id=tips, version=7.0.0], [id=webdriverwindows, version=16.0.0], [id=websocket, version=21.0.0]] 1993 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory - Extensions loaded 2101 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows ZAP to check for updates 2106 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Options Extension 2106 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Edit Menu Extension 2106 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides a rest based API for controlling and accessing ZAP 2120 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Session State Extension 2120 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Report Extension 2120 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing History Extension 2122 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Show hidden fields and enable disabled fields 2123 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Search messages for strings and regular expressions 2124 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Encode/Decode/Hash... 2124 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to intercept and modify requests and responses 2125 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Passive scanner 2131 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Script Passive Scan Rules 2131 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Stats Passive Scan Rule 2159 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to view and manage alerts 2161 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Active scanner, heavily based on the original Paros active scanner, but with additional tests added 2170 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Spider used for automatically finding URIs on a site 2177 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing A set of common popup menus for miscellaneous tasks 2178 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Forced browsing of files and directories using code from the OWASP DirBuster tool 2179 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Manual Request Editor Extension 2179 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Compares 2 sessions and generates an HTML file showing the differences 2179 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Invoke external applications passing context related information such as URLs and parameters 2180 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Handles anti cross site request forgery (CSRF) tokens 2183 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Authentication Extension 2201 [ZAP-daemon] INFO org.zaproxy.zap.extension.authentication.ExtensionAuthentication - Loaded authentication method types: [Form-based Authentication, HTTP/NTLM Authentication, Manual Authentication, Script-based Authentication, JSON-based Authentication] 2203 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Creates a dynamic SSL certificate to allow SSL communications to be intercepted without warnings being generated by the browser 2282 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Logs errors to the Output tab in development mode only 2282 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Users Extension 2288 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Summarise and analyse FORM and URL parameters as well as cookies 2289 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Script integration 2319 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Scripting console, supports all JSR 223 scripting languages 2451 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Forced User Extension 2452 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Extension handling HTTP sessions 2455 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionDiff 2456 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Post Table View Extension 2456 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Session Management Extension 2462 [ZAP-daemon] INFO org.zaproxy.zap.extension.sessions.ExtensionSessionManagement - Loaded session management method types: [Cookie-based Session Management, HTTP Authentication Session Management, Script-based Session Management] 2463 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Form Table View Extension 2464 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Capture messages from WebSockets with the ability to set breakpoints. 2477 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to import a file containing URLs which ZAP will access, adding them to the Sites tree 2478 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Core UI related functionality. 2478 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Authorization Extension 2479 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Manages the local proxy configurations 2480 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Handles adding Global Excluded URLs 2480 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Adds menu item to refresh the Sites tree 2480 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing OWASP ZAP User Guide 2480 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides a URL suitable for calling from target sites 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to configure which extensions are loaded when ZAP starts 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Combined HTTP Panels Extension 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Hex View Extension 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Image View Extension 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Large Request View Extension 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Large Response View Extension 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Query Table View Extension 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing HTTP Panel Syntax Highlighter View Extension 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Adds support for configurable keyboard shortcuts for all of the ZAP menus. 3931 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Active and passive rule configuration 3934 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Statistics 3936 [ZAP-daemon] INFO org.zaproxy.zap.extension.stats.ExtensionStats - Start recording in memory stats 3938 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Context alert rules filter 3940 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides the foundation for concrete message types (for example, HTTP, WebSockets) expose fuzzer implementations. 3941 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows to fuzz HTTP messages. 3942 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing The ZAP Getting Started Guide 3942 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing The Online menu links 3942 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Easy way to replace strings in requests and responses 3947 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionSaveRawHttpMessage 3947 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionSaveXMLHttpMessage 3947 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Tips and Tricks 3947 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows to fuzz WebSocket messages. 4097 [ZAP-daemon] INFO org.zaproxy.zap.extension.callback.ExtensionCallback - Started callback server on 0.0.0.0:51871 4228 [ZAP-daemon] INFO org.zaproxy.zap.DaemonBootstrap - ZAP is now listening on 127.0.0.1:8090 [ZAP Jenkins Plugin] INITIALIZATION [ SUCCESSFUL ] [ZAP Jenkins Plugin] PERSIST SESSION TO: [ C:\Program Files (x86)\Jenkins\workspace\21_July\24_July.session ] 4587 [ZAP-ProxyThread-2] INFO org.parosproxy.paros.control.Control - Save Session 4618 [Thread-5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 4620 [Thread-5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit end 4638 [Thread-5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Database closed 4814 [Thread-5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open start 4816 [Thread-5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open end [ZAP Jenkins Plugin] REMOVE EXTERNAL SITES [ FALSE ] INTERNAL SITES: [ ] GET SITES [ZAP Jenkins Plugin] CREATE NEW CONTEXT [ test ] [ZAP Jenkins Plugin] INCLUDE IN CONTEXT [ http://rpsit.org.in/ ] [ZAP Jenkins Plugin] EXCLUDE FROM CONTEXT [ZAP Jenkins Plugin] ALERT FILTERS: [ None ] [ZAP Jenkins Plugin] AUTHENTICATION ENABLED [ FALSE ] [ZAP Jenkins Plugin] AUTHENTICATION MODE [ FORM_BASED ] [ZAP Jenkins Plugin] ATTACK MODE(S) INITIATED [ZAP Jenkins Plugin] SPIDER SCAN ENABLED [ TRUE ] SPIDER SCAN SETTINGS AUTHENTICATED SPIDER SCAN [ FALSE ] RECURSE: [ TRUE ] SUB TREE ONLY: [ FALSE ] MAX CHILDREN: [ 0 ] CONTEXT NAME: [ test ] [ZAP Jenkins Plugin] SPIDER SCAN THE SITE [ http://rpsit.org.in/ ] 5146 [ZAP-SpiderInitThread-0] INFO org.zaproxy.zap.extension.spider.SpiderThread - Starting spidering scan on Context: test at Sat Jul 25 13:13:16 IST 2020 5157 [ZAP-SpiderInitThread-0] INFO org.zaproxy.zap.spider.Spider - Spider initializing... [ZAP Jenkins Plugin] SPIDER SCAN STATUS [ 0% ] [ZAP Jenkins Plugin] ALERTS COUNT [ 0 ] 5191 [ZAP-SpiderInitThread-0] INFO org.zaproxy.zap.spider.Spider - Starting spider... 6743 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6744 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6744 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6745 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6745 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6747 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6748 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [JavaScript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: JavaScript: 6749 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6749 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 6860 [ZAP-cfu] WARN org.zaproxy.zap.control.AddOnCollection - Failed to create add-on for webdriverwindows java.util.zip.ZipException: error in opening zip file at java.util.zip.ZipFile.open(Native Method) at java.util.zip.ZipFile.<init>(Unknown Source) at java.util.zip.ZipFile.<init>(Unknown Source) at java.util.zip.ZipFile.<init>(Unknown Source) at org.zaproxy.zap.control.AddOn.loadManifestFile(AddOn.java:565) at org.zaproxy.zap.control.AddOn.<init>(AddOn.java:656) at org.zaproxy.zap.control.AddOnCollection.load(AddOnCollection.java:142) at org.zaproxy.zap.control.AddOnCollection.<init>(AddOnCollection.java:59) at org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate$8.run(ExtensionAutoUpdate.java:1197) 8561 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 8562 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 8562 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 8563 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 8563 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 8564 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 8565 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [JavaScript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: JavaScript: 8566 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 8566 [ZAP-SpiderThreadPool-0-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: [ZAP Jenkins Plugin] SPIDER SCAN STATUS [ 66% ] [ZAP Jenkins Plugin] ALERTS COUNT [ 0 ] 10427 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10427 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10428 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10429 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10429 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10429 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10431 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [JavaScript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: JavaScript: 10432 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10432 [ZAP-SpiderThreadPool-0-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL [javascript:] in the spidering process (on base http://rpsit.org.in/): Expected scheme-specific part at index 11: javascript: 10454 [ZAP-SpiderThreadPool-0-thread-1] INFO org.zaproxy.zap.spider.Spider - Spidering process is complete. Shutting down... 10456 [ZAP-SpiderShutdownThread-0] INFO org.zaproxy.zap.extension.spider.SpiderThread - Spider scanning complete: true [ZAP Jenkins Plugin] AJAX SPIDER ENABLED [ FALSE ] SKIP AXAJ SPIDER FOR THE SITE [ http://rpsit.org.in/ ] [ZAP Jenkins Plugin] ACTIVE SCAN ENABLED [ TRUE ] ACTIVE SCAN SETTINGS AUTHENTICATED ACTIVE SCAN [ FALSE ] POLICY: [ Default policy ] RECURSE: [ TRUE ] [ZAP Jenkins Plugin] ACTIVE SCAN THE SITE [ http://rpsit.org.in/ ] 15234 [ZAP-ProxyThread-14] INFO org.parosproxy.paros.core.scanner.Scanner - scanner started [ZAP Jenkins Plugin] ACTIVE SCAN STATUS [ 0% ] [ZAP Jenkins Plugin] ALERTS COUNT [ 0 ] [ZAP Jenkins Plugin] MESSAGES COUNT [ 4 ] 15542 [Thread-9] INFO org.parosproxy.paros.core.scanner.HostProcess - Scanning 1 node(s) from http://rpsit.org.in 15543 [Thread-9] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://rpsit.org.in | ScriptsActiveScanner strength MEDIUM threshold MEDIUM 15547 [Thread-9] INFO org.parosproxy.paros.core.scanner.HostProcess - skipped plugin [no scripts enabled] http://rpsit.org.in | ScriptsActiveScanner in 0.004s with 0 message(s) sent and 0 alert(s) raised. 15547 [Thread-9] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host http://rpsit.org.in in 0.308s with 0 alert(s) raised. 15548 [Thread-8] INFO org.parosproxy.paros.core.scanner.Scanner - scanner completed in 0.314s [ZAP Jenkins Plugin] CLEAR WORKSPACE OF PREVIOUS REPORT(S) [ FALSE ] SKIP CLEARING WORKSPACE [ZAP Jenkins Plugin] GENERATE REPORT(S) [ TRUE ] [ XML ] SAVED TO [ C:\Program Files (x86)\Jenkins\workspace\21_July\reports\JENKINS_ZAP_VULNERABILITY_REPORT.xml ] [ HTML ] SAVED TO [ C:\Program Files (x86)\Jenkins\workspace\21_July\reports\JENKINS_ZAP_VULNERABILITY_REPORT.html ] [ZAP Jenkins Plugin] CREATE JIRA ISSUES [ FALSE ] SKIP CREATING JIRA ISSUES [ZAP Jenkins Plugin] SUMMARY... ALERTS COUNT [ 0 ] MESSAGES COUNT [ 6 ] [ZAP Jenkins Plugin] SHUTDOWN [ START ] 21654 [ZAP-Shutdown] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 21664 [ZAP-Shutdown] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit end 21680 [ZAP-Shutdown] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Database closed 21788 [ZAP-Shutdown] INFO org.zaproxy.zap.extension.api.CoreAPI - OWASP ZAP 2.9.0 terminated. [ZAP Jenkins Plugin] SHUTDOWN [ SUCCESSFUL ] [ZAP Jenkins Plugin] LOG SEARCH... ZAP HOME DIRECTORY [ C:\Program Files\OWASP\Zed Attack Proxy\ZAP ] JENKINS WORKSPACE [ C:\Program Files (x86)\Jenkins\workspace\21_July ] CLEARING WORKSPACE/LOGS [ C:\Program Files\OWASP\Zed Attack Proxy\ZAP\zap.log ] LOG HAS BEEN FOUND COPY [zap.log] TO [C:\Program Files (x86)\Jenkins\workspace\21_July\logs\zap.log] Finished: SUCCESS
Reply all
Reply to author
Forward
0 new messages