Scan rules in OWASP ZAP

[Kostya Kosheliuk]

Hello.
Can anyone assist.
After perform active scan in Scan Progress window presented only 4 scan rules.

How can I add all other scan rules?

OWASP ZAP - 2.12.0

Thanks.

[thc...@gmail.com]

Hi.

You need to install the Active scanner rules add-ons:
https://www.zaproxy.org/addons/

Best regards.

[Kostya Kosheliuk]

I have been updated Active scanner rules add-ons. Still present only 4 scan rules.

Should something extra be done?

Thanks.

понедельник, 24 апреля 2023 г. в 10:02:49 UTC+3, thc202:

[thc...@gmail.com]

Assuming the add-ons are properly installed (i.e. all dependencies met),
the only reason for not having the rules while scanning is if they are
not enabled in the selected scan policy.

Best regards.

[Kostya Kosheliuk]

Can you please tell me where these settings are enabled?

понедельник, 24 апреля 2023 г. в 10:23:58 UTC+3, thc202:

[thc...@gmail.com]

https://www.zaproxy.org/docs/desktop/ui/dialogs/scanpolicy/

Best regards.

[Kostya Kosheliuk]

Yes, there was several dependencies problem after installed Active scanner rules add-ons. 

After update Common Library,  Custom Payloads and  OAST Support add-ons - issue is resolved and all scan rules are present.

Thank you.

понедельник, 24 апреля 2023 г. в 10:31:07 UTC+3, thc202: