json-plus report by zap-api-scan.py

57 views

Skip to first unread message

Julia Khanbekova

unread,

Mar 13, 2025, 8:22:17 AMMar 13

to ZAP User Group

Hi, Simon!

I run scan by script zap-api-scan.py and for result I need report json-plus(with requests and responses). How can I get it with zap-api-scan.py?

kingthorin+zap

unread,

Mar 13, 2025, 9:54:19 AMMar 13

to ZAP User Group

You'd need to switch to a different automation option vs the packaged scans (python scripts).

The Automation Framework is your best bet:

https://www.zaproxy.org/docs/automate/

Julia Khanbekova

unread,

Mar 13, 2025, 12:22:45 PMMar 13

to ZAP User Group

I didn't understand your answer. Could you write in more detail what needs to be done to solve my problem?

Julia Khanbekova

unread,

Mar 13, 2025, 12:27:51 PMMar 13

to ZAP User Group

In scans run by zap-api-scan.py script it is not possible to obtain a json-plus report? Did I understand you correctly?

On Thursday, March 13, 2025 at 4:54:19 PM UTC+3 kingthorin+zap wrote:

Simon Bennetts

unread,

Mar 18, 2025, 8:36:34 AMMar 18

to ZAP User Group

That is correct, the packaged scans are limited, and do not allow you to specify the report type.

For more flexibility use the Automation Framework (AF).

You can start with this AF plan which is equivalent to the packaged API scan: https://github.com/zaproxy/community-scripts/blob/main/other/af-plans/ApiScanExample.yaml

Cheers,

Simon

Reply all

Reply to author

Forward

0 new messages