ZAP API scripts import

[Amelia Gherdan]

Hello,

Is there a way to add custom scripts with API requests to a remote ZAP Instance?

[Simon Bennetts]

There is - see https://www.zaproxy.org/docs/desktop/start/features/api/#filexfer

Cheers,

Simon

[Amelia Gherdan]

Hi Simon

Thank you for your fast reply.

I have a folder with ZAP scripts with passive/active folders inside.

Is there a way to import them from REST API and to enable them? Solution provided is for a file, right?

[Simon Bennetts]

The REST API only supports uploading one file at a time.

To handle folders of scripts there are 2 other options:

• Manually copying them to the target (or building into the container) and then start ZAP with the option to load all of the files in a specific directory
• Putting the folders in a shared drive that can be accessed by the ZAP instances, and then loading them as above.

For loading directories of scripts see https://www.zaproxy.org/docs/desktop/ui/dialogs/options/script/#directories

You cant currently specify which directories to loads scripts from via the API, but you can set them via the command line as per https://www.zaproxy.org/faq/how-do-you-find-out-what-key-to-use-to-set-a-config-value-on-the-command-line/

Cheers,

Simon