ERROR LOGIN CSRF _token Laravel

[José Borges]

I'm trying to authenticate myself in an application in laravel with csrf _token configured, however I only give authentication error, I'm using Oracle Nashorn script

https://github.com/zaproxy/zap-api-docs/blob/master/source/scripts/auth-dvwa.js

Can someone help me ?

[Simon Bennetts]

No, we dont have access to your application.

But we can help you to help yourself :)

You need to understand how your apps authentication works - if you cant do that then you cant configure ZAP to understand it.

So authenticate to you app manually while proxying through ZAP, then try to configure ZAP to authenticate and then go through all of the relevant requests and responses and see whats different.

There are a load of authentication videos on https://www.zaproxy.org/videos-list/ which should help you understand ZAPs authentication support better.

Cheers,

Simon

[thc...@gmail.com]

Hi.

The form-based auth handles anti-csrf tokens (if they are defined in the
options).

Unless you have other requirements it's probably easier to use that
instead of script auth.

Best regards.

[José Borges]

Authentication of the same is similar to this, I believe that if I can access this same system I can solve my problem. 

Url: https://tmf-uat.iptquote.com/login.php

Login: superadmin

Senha: primo868

As I mentioned, I'm using the script. 

https://github.com/zaproxy/zap-api-docs/blob/master/source/scripts/auth-dvwa.js