Using OWASP Zap from command line in Windows

[NeverBack Down]

Hi,

I can use owasp zap through the GUI provided but I was thinking to create a java method that will call ZAP and will parse the url through java. 

I don't know if this already exists (if yes can you please point the location of it) but I was thinking that if I can use zap through the command line then it's easy to use it through java.

Is there a command like zap -createnewsession "url" ? 

Thanks,

[thc...@gmail.com]

Hi.

There's a Java API client to access/control ZAP:
https://github.com/zaproxy/zap-api-java

For details about the ZAP API:
https://github.com/zaproxy/zaproxy/wiki/ApiDetails

It's also possible to execute some of the functionality through the
command line but it's very limited (compared to ZAP API):
https://github.com/zaproxy/zap-core-help/wiki/HelpCmdline

Best regards.

[NeverBack Down]

Hi , 

I didn't know they have a java API client. Have you ever worked with it? Is it stable?

[Simon Bennetts]

Yes, we do have a java API client, and its very stable :)
I actually use the python one more, but both a code generated and should just work.
If you hit any problems with them then just raise an issue. A lot of people automate ZAP, so making sure that the API is stable and powerful is very important to us.

Cheers,

Simon