URL Not Found in the Scan Tree

[Chris Gotcu]

Hi all,

I'm a zap newbie and am encountering this message when trying to start an active scan using the REST API: "URL Not Found in the Scan Tree". I've scoured through the API to see if there are any other preliminary steps I need to take registering the URL first?

Thank you,
Chris

[thc...@gmail.com]

Hi.

Yes, you need to access the target URL first (proxy, spider...).

If you are using one of the ZAP API clients you can use the "access URL"
methods ("urlopen" in Python, "accessUrl" in Java...) to proxy it.

Best regards.

> --
> You received this message because you are subscribed to the Google
> Groups "OWASP ZAP User Group" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to zaproxy-user...@googlegroups.com
> <mailto:zaproxy-user...@googlegroups.com>.
> For more options, visit https://groups.google.com/d/optout.

[Chris Gotcu]

Ah ok! I'm using the ruby gem and this worked.

I did try to start a spider first using the API UI but got the following error so I thought I had to do something before starting the spider also

    
{"code":"does_not_exist","message":"Does Not Exist"}

Thank you,
Chris

[thc...@gmail.com]

That's probably issue 2108 [1] (and 2122 [2]).

Ruby gem needs to be updated...


[1] https://github.com/zaproxy/zaproxy/issues/2108
[2] https://github.com/zaproxy/zaproxy/pull/2122

Best regards.

[Jan Fisher]

I had this problem, and for me removing the Context parameter completely off of the request resolved the issue.

Presumably if you state default context and your URL isnt in this it views it as out of scope, but if you remove the context parameter it doesnt seem to care.