Unable to get *responses* from facebook server in zap proxy

[zapp...@gmail.com]

Hello

I am not getting Server responses* from facebook in zapp proxy. I installed certificate in browser rest of all websites working fine except Facebook. Kindly help me out

Regards

zapp

[kingthorin+owaspzap]

Likely key pinning

https://github.com/zaproxy/zaproxy/wiki/FAQcertpinning

[zapp...@gmail.com]

Hello

Burp suite is capturing and not getting any pinning issue? But when i try to intercept in www.facebook.com i am getting encoded response from server. ?

Why is that?

Regards

ZAhid Ali

On Sunday, December 25, 2016 at 8:21:33 AM UTC+5, kingthorin+owaspzap wrote:

Likely key pinning

https://github.com/zaproxy/zaproxy/wiki/FAQcertpinning

[kingthorin+owaspzap]

Ok first you weren't getting responses, now you're getting "encoddd" responses.

You're going to be much more specific.

[zapp...@gmail.com]

Hello

Sir here is the link i captured a video and uploaded on youtube that what exactly i am getting responses from facebook server.

https://youtu.be/M6Q0opfx5zI

Have a look

Regards

Zahid Ali

[thc...@gmail.com]

Hi.

Is ZAP Root CA cert really installed and trusted? The error code
("SEC_ERROR_UNKNOWN_ISSUER") seems to indicate that it's not.


Regarding the encoded response, ZAP does not yet support that encoding.
[1] Although, in weekly releases all unsupported encodings are removed
from the request. [2]


[1] https://github.com/zaproxy/zaproxy/issues/2198
[2] https://github.com/zaproxy/zaproxy/wiki/Downloads#zap-weekly

Best regards.

[kingthorin+owaspzap]

It would be interesting to know what the eneeding is? Perhaps brotli?

https://github.com/zaproxy/zaproxy/issues/2198

[thc...@gmail.com]

Yes.

Best regards.