Issue with Capturing POST Requests during Authentication Setup in ZAP

[Beaula Praharsha]

Hello ZAP Support Team,

I am currently setting up authentication in ZAP, but ZAP is not capturing any POST requests during the login process. Because of this, I am unable to complete the authentication flow and the scan fails authentication.

Here are the details of the issue:

• ZAP Version: [ZAP version 16.2.0]

• Browser Used for Proxying: [Firefox with ZAP root CA installed]

• Steps Followed:

  1. Configured ZAP as proxy and installed the CA certificate.

  2. Attempted login via the browser while ZAP was running.

  3. Expected POST request with login credentials to appear in History tab.

  4. Only GET requests are captured; POST request is missing.

• Tried Solutions: Restarted ZAP and browser, cleared cache, reinstalled certificate. Still no POST requests captured.

Could you please guide me on why POST requests may not be captured and how to troubleshoot this issue? Is there any specific configuration I need to adjust (e.g., in Contexts > Authentication > POST handling)?

Thank you for your support.

Best regards,
Beaula

[Simon Bennetts]

Hi Beaula,

For anything related to authentication you should start here: https://www.zaproxy.org/docs/authentication/

Cheers,

Simon