Zap - run standalone script

131 views
Skip to first unread message

Shivani Rachakonda

unread,
Jul 18, 2022, 12:03:50 PM7/18/22
to OWASP ZAP Scripts
Hi,

I have few different XSS .zest scripts, which I have wrapped in one long .zest script via Add Zest Action -> Action - Script. I am able to run this manually via ZAP GUI hitting the 'Run ' button. 
I also have a python script, which is able to spider the web app, run an active scan with an imported user authentication context, setup as a late night Cron job.
However, I want to be able to run the long .zest script, containing all the XSS .zest scripts either from command line or as part of the python script.

I have tried these steps, but the xss zest script doesn't run this way. No error in logs.

zap.script.load('xss.zst', 'standalone', 'Mozilla Zest', str(customScriptsLocation), apikey = apiKey)
zap.script.enable('xss.zst', apikey = apiKey)
time.sleep(5)
 zap.urlopen(target)
 zap.script.run_stand_alone_script('xss.zst', apikey = apiKey)
 
 I have seen examples where one can run via zest.sh, but after downloading latest zest-beta-35 addOn, I am unable to find the zest.sh.

Any pointers are greatly appreciated!

Thank you,
Shivani.
 

Reply all
Reply to author
Forward
0 new messages