Hi,
I have few different XSS .zest scripts, which I have wrapped in one long .zest script via Add Zest Action -> Action - Script. I am able to run this manually via ZAP GUI hitting the 'Run ' button.
I also have a python script, which is able to spider the web app, run an active scan with an imported user authentication context, setup as a late night Cron job.
However, I want to be able to run the long .zest script, containing all the XSS .zest scripts either from command line or as part of the python script.
I have tried these steps, but the xss zest script doesn't run this way. No error in logs.
zap.script.load('xss.zst', 'standalone', 'Mozilla Zest', str(customScriptsLocation), apikey = apiKey)
zap.script.enable('xss.zst', apikey = apiKey)
time.sleep(5)
zap.urlopen(target)
zap.script.run_stand_alone_script('xss.zst', apikey = apiKey)
I have seen examples where one can run via zest.sh, but after downloading latest zest-beta-35 addOn, I am unable to find the zest.sh.
Any pointers are greatly appreciated!
Thank you,
Shivani.