ZAP as proxy on macbook

158 views
Skip to first unread message

Jed Parker

unread,
Mar 20, 2024, 11:12:50 AM3/20/24
to ZAP User Group
Hi I have set OS proxy to the ZAP proxy, and install and trust the cert, but when I request to a website, it still shows the err, how can I solve this, thanks a lot
Screenshot 2024-03-20 at 23.06.18.png
Screenshot 2024-03-20 at 23.06.40.pngScreenshot 2024-03-20 at 23.09.12.png

kingthorin+zap

unread,
Mar 20, 2024, 11:14:47 AM3/20/24
to ZAP User Group
Did you add the CA cert to Chrome? (I'm not sure if Chrome uses it's own store or the OS's)
If you did then you probably didn't trust it or you've added as a type other than CA.

Jed Parker

unread,
Mar 20, 2024, 11:20:43 AM3/20/24
to ZAP User Group
Hi thanks for reply, Chrome uses the OS's, and I have trusted it already, but didn't work
Screenshot 2024-03-20 at 23.18.33.png

kingthorin+zap

unread,
Mar 20, 2024, 11:22:11 AM3/20/24
to ZAP User Group
Could you try scanme.nmap.org or demo.testfire.net. Maybe baidu is on HSTS preload 🤷‍♂️

Jed Parker

unread,
Mar 20, 2024, 11:28:32 AM3/20/24
to ZAP User Group
Oh, it works for scanme.nmap.org, really thanks a lot, hhh

Jed Parker

unread,
Mar 20, 2024, 11:31:02 AM3/20/24
to ZAP User Group
But if I want to test HSTS preload site, how can I config ZAP to make it work?

kingthorin+zap

unread,
Mar 20, 2024, 1:07:29 PM3/20/24
to ZAP User Group
See if it works when you launch the browser from within ZAP. (When launched that way a bunch of prefs are set.)
Reply all
Reply to author
Forward
0 new messages