API testing

[d money]

Hello,

 I'm just getting started api testing with zap. I am using Zap 2.14 in combination with postman. My target api is vampi, an intentional vulnerable api designed for security testing. I have it running on localhost. Postman is proxying the request through zap. The setup seems to be working. I can spider the api and then run an active scan. I see all of the request scrolling the zap. The issue is I'm getting zero alerts. It is an intentionally vulnerable api so I would expect something. Is there a setting somewhere that I'm missing? Maybe a sensitivity setting?

[d money]

[SOLVED]
I figured out my problem. I needed to set the context. I did that and it worked. 

[Simon Bennetts]

Thanks for letting us know!

[Danial hussain]

Hello ;

i am facing this issue

Open ZAP and go for Manual Explore Copy URL and paste it in “URL to explore” Click on Launch Browser but it is showing me error that provided browser not found

although my browser is install on pc both the chrome and firefox

[Simon Bennetts]

Please dont ask new questions on unrelated conversations.

Oh, and also check the FAQs before posting: https://www.zaproxy.org/faq/how-can-i-fix-browser-was-not-found/ :)