Multiple Target Scan at the same time using ZAP API in Python

684 views
Skip to first unread message

Xander Eirik

unread,
Mar 18, 2021, 6:00:46 AM3/18/21
to OWASP ZAP User Group
Hi,

I'm kind of new to the ZAP API, Is it possible to Scan multiple targets at the same time using the ZAP API in python ? , If possible please give me an idea on how its done.

thc...@gmail.com

unread,
Mar 18, 2021, 6:24:22 AM3/18/21
to zaprox...@googlegroups.com
Hi.

Yes, you just need to start the scan multiple times with the different
targets.
There are examples in:
https://github.com/zaproxy/zap-api-python/tree/master/src/examples

that show how to start a scan (among other things).

Best regards.

Xander Eirik

unread,
Mar 18, 2021, 12:04:11 PM3/18/21
to OWASP ZAP User Group
Hi when i start these scan with different targets at the same time the reports are getting mixed like some of the scan result of one target is appearing in the other ,I''m retrieving the reports in HTML by the way,Am i missing something here i don't know what i''m doing wrong please help

Simon Bennetts

unread,
Mar 18, 2021, 12:16:50 PM3/18/21
to OWASP ZAP User Group
Thats why we dont really recommend doing that :D
Right now we recommend that the docker packaged scans are best for most people when automating ZAP.
However we are working on a new Automation Framework which will be the recommended option when it matures.
There is also a new reporting add-on which allows you to choose which sites to include in reports, but that doesnt support the API yet - thats coming soon.

Note that we will not be deprecating the API at all, we will keep maintaining and extending it, but for most people the other options are more suitable.

thc...@gmail.com

unread,
Mar 18, 2021, 12:20:38 PM3/18/21
to zaprox...@googlegroups.com
Worth noting that the exportreport add-on allows to create reports for
specific scans using the API.

Best regards.
Reply all
Reply to author
Forward
0 new messages