Scan Modern Web Apps with Manual Authentication

[Akhmad Syarifurrahman]

Hi,

Currently I working  on the projects to scan modern web apps (frontend using angularjs, and backend using rest api), and in the login page this web apps has implement security feature like ReCaptcha and MFA, i can't using common authentication technique to handle this web. 

Is it possible like this?

1. Add authentication header manually because I have the code and key.
2. Add manually frontend information to browser local storage.

If it possible, how do i do it ?

Thanks.

[thc...@gmail.com]

Hi,

Have you gone through https://www.zaproxy.org/docs/authentication/ ?

1. Use one of
https://www.zaproxy.org/docs/authentication/handling-auth-yourself/
2. Use a Selenium script, but see
https://www.zaproxy.org/docs/authentication/session-handling/#client-side-session-management


Best regards.

[Akhmad Syarifurrahman]

Hi,

Thank you, I am slightly enlightened. And now  I got an error message from the Selenium script like this :

what's wrong if I got this error message?

Thanks.

[Akhmad Syarifurrahman]

Hi,

Oh sorry, this error message appears if I want to save a lot data to localStorage.

Is this related to Selenium driver capabilities, If true how to configure this capability?

Thanks.

[Akhmad Syarifurrahman]

Hi,

Current status I solved the selenium issue.

Thanks

[Simon Bennetts]

Cool.

Do you get enverything else working?

Cheers,

Simon