Existing page given as not found in ZAP proxy

[Fabio Lanza]

Hi everyone, I am trying to do web app scanning through the proxy browser (Firefox), but I am getting 404 answers in ZAP for requests launched via browser proxy. When I access this same page in a standard browser session, the page loads normally. I am afraid that the issue is related with the authentication redirect, as the page redirects for SSO authentication. Would you agree? If not, what else could be the problem? Is there a configuration for following redirects? Thanks.

[psiinon]

If the page can only be accessed when authenticated then you will need to configure ZAP to handle authentication :)

More details here: https://www.zaproxy.org/docs/authentication/

Cheers,

Simon

On Wed, Aug 23, 2023 at 1:30 PM Fabio Lanza <lanzab...@gmail.com> wrote:

Hi everyone, I am trying to do web app scanning through the proxy browser (Firefox), but I am getting 404 answers in ZAP for requests launched via browser proxy. When I access this same page in a standard browser session, the page loads normally. I am afraid that the issue is related with the authentication redirect, as the page redirects for SSO authentication. Would you agree? If not, what else could be the problem? Is there a configuration for following redirects? Thanks.

--
You received this message because you are subscribed to the Google Groups "ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/cb86098f-8b36-43c3-8574-3ea30a90c95bn%40googlegroups.com.

--

ZAP Project leader

[Fabio Lanza]

Hi Simon, thanks for your input. However, the proxy browser is getting a 404 not found message when accessing the main page, while the normal behavior would be to redirect me to the authentication page. Is this a normal behavior?

Thanks,

Fabio

[psiinon]

Normal for your app? I have no idea :)

Browsers should work the same whether or not they are proxied through ZAP.

If they work differently then its probably because something is detecting that ZAP is being used.

Cheers,

Simon

To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/cfdbc689-2169-4aa6-90d2-ffa7b7c849fdn%40googlegroups.com.

--

ZAP Project leader