ZAP Active scan in selenium tests
1,191 views
Skip to first unread message
NIKESH YADAV
Oct 17, 2017, 3:45:37 AM10/17/17
to OWASP ZAP User Group
Hi,
I am working on a test project to automate the security testing through zap. I am able to setup jenkins, zap, selenium environment. And for test cases passive scanning is working properly.
But i am not able to do active scanning.
Environment: zap is running in daemon mode on a different box. Passing zap address or port to selenium through jenkins.
Passive scan is starting by default. How can i start active scan?
Thanks in advance.
Regards,
Nikesh
I am working on a test project to automate the security testing through zap. I am able to setup jenkins, zap, selenium environment. And for test cases passive scanning is working properly.
But i am not able to do active scanning.
Environment: zap is running in daemon mode on a different box. Passing zap address or port to selenium through jenkins.
Passive scan is starting by default. How can i start active scan?
Thanks in advance.
Regards,
Nikesh
thc...@gmail.com
Oct 17, 2017, 3:51:39 AM10/17/17
to zaprox...@googlegroups.com
Hi.
You would have to use the ZAP API to start the active scan. [1][2]
There's a ZAP Jenkins plugin that allows to do that though. [3]
[1] https://github.com/zaproxy/zaproxy/wiki/ApiDetails
[2] https://github.com/zaproxy/zaproxy/wiki/ApiGen_ascan
[3] https://wiki.jenkins.io/display/JENKINS/zap+plugin
Best regards.
You would have to use the ZAP API to start the active scan. [1][2]
There's a ZAP Jenkins plugin that allows to do that though. [3]
[1] https://github.com/zaproxy/zaproxy/wiki/ApiDetails
[2] https://github.com/zaproxy/zaproxy/wiki/ApiGen_ascan
[3] https://wiki.jenkins.io/display/JENKINS/zap+plugin
Best regards.
NIKESH YADAV
Oct 30, 2017, 9:37:40 PM10/30/17
to OWASP ZAP User Group
Hi,
i am using this *curl -X GET 'http://localhost:8080/JSON/ascan/action/scan/?zapapiformat=JSON&apikey=1234'* in pre steps in execute shell. But it is not starting the active scan. Can you help me with this ?
Thanks
Nikesh
i am using this *curl -X GET 'http://localhost:8080/JSON/ascan/action/scan/?zapapiformat=JSON&apikey=1234'* in pre steps in execute shell. But it is not starting the active scan. Can you help me with this ?
Thanks
Nikesh
thc...@gmail.com
Oct 31, 2017, 4:58:22 AM10/31/17
to zaprox...@googlegroups.com
Hi.
It seems it's missing the target of the scan, provided with "url" query
parameter, for example, to start the scan against http://example.com/
one would call:
http://localhost:8080/JSON/ascan/action/scan/?apikey=1234&url=http%3A%2F%2Fexample.com%2F
Best regards.
It seems it's missing the target of the scan, provided with "url" query
parameter, for example, to start the scan against http://example.com/
one would call:
http://localhost:8080/JSON/ascan/action/scan/?apikey=1234&url=http%3A%2F%2Fexample.com%2F
Best regards.
NIKESH YADAV
Nov 2, 2017, 1:30:57 AM11/2/17
to OWASP ZAP User Group
Hi,
It's not working for me.
i am doing this -->
In pre build steps Execute shell :
1. curl -X GET "http://ip_of_zap_host:8080/JSON/core/action/deleteAllAlerts/?zapapiformat=JSON&apikey=1234"
2. curl 'http://ip_of_zap_host:8080/JSON/core/action/excludeFromProxy/?zapapiformat=JSON&apikey=1234®ex=example.com
3. curl 'http://ip_of_zap_host:8080/JSON/ascan/action/scan/?zapapiformat=JSON&apikey=1234&url=https%3A%2F%2Fexample.com%2F'
In build steps:
Root POM -> TestSuite/pom.xml
Goals and options -> -pl neo -am clean validate compile install -P Cucumber -DbaseUrl="${BaseUrl}" -DenableSecurity="${enableSecurity}" -Dzap_address="${zap_address}" -Dzap_port="${zap_port}" -Dzap_api_key="${zap_api_key}" -Denv="${ENVIRONMENT}" -Dcucumber.options="src/test/resources/features" -Dit.test="${EXECUTION}" -DincludeTags="${INCLUDE_TAGS}" -DexcludeTags="${EXCLUDE_TAGS}" -DmaxParallelTestThreads="${MAX_PARALLEL_THREADS}" -DfailIfNoTests=false
Post step Execute shell :
echo $WORKSPACE
wget "http://ip_of_zap_host:8080/OTHER/core/other/htmlreport/?apikey=1234" -O $WORKSPACE/TestSuite/neo/target/zapResult.html
Please help in this.
Thanks in advance
Nikesh
It's not working for me.
i am doing this -->
In pre build steps Execute shell :
1. curl -X GET "http://ip_of_zap_host:8080/JSON/core/action/deleteAllAlerts/?zapapiformat=JSON&apikey=1234"
2. curl 'http://ip_of_zap_host:8080/JSON/core/action/excludeFromProxy/?zapapiformat=JSON&apikey=1234®ex=example.com
3. curl 'http://ip_of_zap_host:8080/JSON/ascan/action/scan/?zapapiformat=JSON&apikey=1234&url=https%3A%2F%2Fexample.com%2F'
In build steps:
Root POM -> TestSuite/pom.xml
Goals and options -> -pl neo -am clean validate compile install -P Cucumber -DbaseUrl="${BaseUrl}" -DenableSecurity="${enableSecurity}" -Dzap_address="${zap_address}" -Dzap_port="${zap_port}" -Dzap_api_key="${zap_api_key}" -Denv="${ENVIRONMENT}" -Dcucumber.options="src/test/resources/features" -Dit.test="${EXECUTION}" -DincludeTags="${INCLUDE_TAGS}" -DexcludeTags="${EXCLUDE_TAGS}" -DmaxParallelTestThreads="${MAX_PARALLEL_THREADS}" -DfailIfNoTests=false
Post step Execute shell :
echo $WORKSPACE
wget "http://ip_of_zap_host:8080/OTHER/core/other/htmlreport/?apikey=1234" -O $WORKSPACE/TestSuite/neo/target/zapResult.html
Please help in this.
Thanks in advance
Nikesh
NIKESH YADAV
Nov 2, 2017, 1:39:07 AM11/2/17
to OWASP ZAP User Group
Hi,
One more thing when i build this above configuration than it will stop here
One more thing when i build this above configuration than it will stop here
curl 'http://ip_of_zap_host:8080/JSON/ascan/action/scan/?zapapiformat=JSON&apikey=1234&url=https%3A%2F%2Fexample.com%2f' % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed
Thanks
Nikesh
thc...@gmail.com
Nov 3, 2017, 5:43:55 AM11/3/17
to zaprox...@googlegroups.com
Hi.
The step 3 needs to be done as a post step if you want to active scan
the requests proxied during the Selenium tests.
Regarding the step 2, is it correct? That would exclude the target (and
ZAP would not be able to later active scan it).
Note the step 3 was most likely failing because there was nothing to
scan (yet).
Best regards.
The step 3 needs to be done as a post step if you want to active scan
the requests proxied during the Selenium tests.
Regarding the step 2, is it correct? That would exclude the target (and
ZAP would not be able to later active scan it).
Note the step 3 was most likely failing because there was nothing to
scan (yet).
Best regards.
tov...@gmail.com
Feb 27, 2018, 5:45:39 AM2/27/18
to OWASP ZAP User Group
Hi Nikesh,
I am working on a POC to integrate existing selenium tests with ZAP. Can you point to some references. I have setup Jenkins with ZAP plugin and ZAP installed in the machine.
Blocked to proceed with the below error.
ERROR: org.zaproxy.clientapi.core.ClientApiException: java.net.SocketException: Unexpected end of file from server at org.zaproxy.clientapi.core.ClientApi.callApiDom(ClientApi.java:329) at org.zaproxy.clientapi.core.ClientApi.callApi(ClientApi.java:311) at org.zaproxy.clientapi.gen.Core.shutdown(Core.java:243) at org.jenkinsci.plugins.zap.ZAPDriver.stopZAP(ZAPDriver.java:2131) at org.jenkinsci.plugins.zap.ZAPDriver.executeZAP(ZAPDriver.java:1242) at org.jenkinsci.plugins.zap.ZAPBuilder$ZAPDriverCallable.invoke(ZAPBuilder.java:448) at org.jenkinsci.plugins.zap.ZAPBuilder$ZAPDriverCallable.invoke(ZAPBuilder.java:436) at hudson.FilePath.act(FilePath.java:996) at hudson.FilePath.act(FilePath.java:974) at org.jenkinsci.plugins.zap.ZAPBuilder.perform(ZAPBuilder.java:292) at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:779) at hudson.model.Build$BuildExecution.build(Build.java:206) at hudson.model.Build$BuildExecution.doRun(Build.java:163) at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:534) at hudson.model.Run.execute(Run.java:1728) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) at hudson.model.ResourceController.execute(ResourceController.java:98) at hudson.model.Executor.run(Executor.java:405) Caused by: java.net.SocketException: Unexpected end of file from server at sun.net.www.http.HttpClient.parseHTTPHeader(Unknown Source) at sun.net.www.http.HttpClient.parseHTTP(Unknown Source) at sun.net.www.http.HttpClient.parseHTTPHeader(Unknown Source) at sun.net.www.http.HttpClient.parseHTTP(Unknown Source) at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source) at java.net.HttpURLConnection.getResponseCode(Unknown Source) at org.zaproxy.clientapi.core.ClientApi.getConnectionInputStream(ClientApi.java:339) at org.zaproxy.clientapi.core.ClientApi.callApiDom(ClientApi.java:327) ... 18 more
12389 [ZAP-daemon] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL - New root CA certificate created 12390 [ZAP-daemon] ERROR org.parosproxy.paros.core.proxy.ProxyServer - Cannot listen on port 127.0.0.1:8080 Cannot listen on port 127.0.0.1:8080Picked up JAVA_TOOL_OPTIONS: -Djava.vendor="Sun Microsystems Inc."Thanks in Advance
kingthorin+owaspzap
Feb 27, 2018, 5:48:30 AM2/27/18
to OWASP ZAP User Group
Free up 8080 or have ZAP listen on a different port.
tov...@gmail.com
Feb 28, 2018, 2:59:37 AM2/28/18
to OWASP ZAP User Group
I am see ZAP is listening when hit the URL http://localhost:8080 from browser. but when i tried it from Jenkins job by running the selenium tests, i am getting the below error. Any help?
responses 6921 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionSaveRawHttpMessage 6922 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Tips and Tricks 6922 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows to fuzz WebSocket messages. 7543 [ZAP-daemon] INFO org.zaproxy.zap.extension.callback.ExtensionCallback - Started callback server on 0.0.0.0:64569 7544 [ZAP-daemon] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL - Creating new root CA certificate8648 [ZAP-daemon] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL - New root CA certificate created 8650 [ZAP-daemon] ERROR org.parosproxy.paros.core.proxy.ProxyServer - Cannot listen on port localhost:8080 Cannot listen on port localhost:8080
kingthorin+owaspzap
Feb 28, 2018, 5:44:15 AM2/28/18
to OWASP ZAP User Group
It seems 8080 is in use when using Selenium, so either free up the port (re-configure whatever is using it) or configure ZAP to use a different port (along with whatever is then using ZAP).
https://github.com/zaproxy/zap-core-help/wiki/HelpUiDialogsOptionsLocalproxy
https://github.com/zaproxy/zap-core-help/wiki/HelpUiDialogsOptionsLocalproxy
tov...@gmail.com
Mar 1, 2018, 8:12:20 AM3/1/18
to OWASP ZAP User Group
Got resolved with the above error. But now i got a different error where I want to scan the site say https://example.com/ and all other urls under this site.
I am getting the below error. Any help/suggestions.
I am using ZAP 2.7.0 Jenkins plugin.
133402 [ZAP-ProxyThread-16] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/spider/action/scanAsUser/?apikey=ZAPROXY-PLUGIN&recurse=true&subtreeOnly=false&contextId=1&userId=0&url=https://example.com%2F&maxChildren=0&
The provided url is not in the required context (url_not_in_context) : url at org.zaproxy.zap.extension.spider.SpiderAPI.scanURL(SpiderAPI.java:455) at org.zaproxy.zap.extension.spider.SpiderAPI.handleApiAction(SpiderAPI.java:253) at org.zaproxy.zap.extension.api.API.handleApiRequest(API.java:431) at org.parosproxy.paros.core.proxy.ProxyThread.processHttp(ProxyThread.java:456) at org.parosproxy.paros.core.proxy.ProxyThread.run(ProxyThread.java:317) at java.lang.Thread.run(Thread.java:745) ERROR: org.zaproxy.clientapi.core.ClientApiException: The provided url is not in the required context at org.zaproxy.clientapi.core.ApiResponseFactory.getResponse(ApiResponseFactory.java:32) at org.zaproxy.clientapi.core.ClientApi.callApi(ClientApi.java:312) at org.zaproxy.clientapi.gen.Spider.scanAsUser(Spider.java:206) at org.jenkinsci.plugins.zap.ZAPDriver.spiderScanURL(ZAPDriver.java:1867) at org.jenkinsci.plugins.zap.ZAPDriver.executeZAP(ZAPDriver.java:1191) at org.jenkinsci.plugins.zap.ZAPBuilder$ZAPDriverCallable.invoke(ZAPBuilder.java:448) at org.jenkinsci.plugins.zap.ZAPBuilder$ZAPDriverCallable.invoke(ZAPBuilder.java:436) at hudson.FilePath.act(FilePath.java:996) at hudson.FilePath.act(FilePath.java:974) at org.jenkinsci.plugins.zap.ZAPBuilder.perform(ZAPBuilder.java:292) at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:779) at hudson.model.Build$BuildExecution.build(Build.java:206) at hudson.model.Build$BuildExecution.doRun(Build.java:163) at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:534) at hudson.model.Run.execute(Run.java:1728) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) at hudson.model.ResourceController.execute(ResourceController.java:98) at hudson.model.Executor.run(Executor.java:405) [ZAP Jenkins Plugin] SHUTDOWN [ START ] 133412 [ZAP-ProxyThread-17] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/core/action/shutdown/?apikey=ZAPROXY-PLUGIN 133414 [ZAP-ProxyThread-17] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest returning: <?xml version="1.0" encoding="UTF-8" standalone="no"?><shutdown>OK</shutdown>
thc...@gmail.com
Mar 1, 2018, 8:21:22 AM3/1/18
to zaprox...@googlegroups.com
Hi.
Most likely the context is not properly configured (in Session
Properties > Include in Context). If you want to scan all pages under
the site you can do so with:
https://example\.com.*
Best regards.
Most likely the context is not properly configured (in Session
Properties > Include in Context). If you want to scan all pages under
the site you can do so with:
https://example\.com.*
Best regards.
tov...@gmail.com
Mar 1, 2018, 8:36:29 AM3/1/18
to OWASP ZAP User Group
Hi,
This is how i have configured.
thc...@gmail.com
Mar 1, 2018, 8:44:03 AM3/1/18
to zaprox...@googlegroups.com
Note that the entries represent regular expressions. It's missing a dot
before the star:
https://example.com/op/.*
Best regards.
> <https://lh3.googleusercontent.com/-dPibD6btdZQ/WpgBws2iI7I/AAAAAAAALJo/WnO1s9yczdoLDtDCSWKa4KMrtiGQ7NJVACLcBGAs/s1600/Capture.JPG>
before the star:
https://example.com/op/.*
Best regards.
> <https://lh3.googleusercontent.com/-dPibD6btdZQ/WpgBws2iI7I/AAAAAAAALJo/WnO1s9yczdoLDtDCSWKa4KMrtiGQ7NJVACLcBGAs/s1600/Capture.JPG>
>
>
>
> On Thursday, March 1, 2018 at 6:51:22 PM UTC+5:30, thc202 wrote:
>>
>> Hi.
>>
>> Most likely the context is not properly configured (in Session
>> Properties > Include in Context). If you want to scan all pages under
>> the site you can do so with:
>> https://example\.com.*
>>
>> Best regards.
>>
>
>
> On Thursday, March 1, 2018 at 6:51:22 PM UTC+5:30, thc202 wrote:
>>
>> Hi.
>>
>> Most likely the context is not properly configured (in Session
>> Properties > Include in Context). If you want to scan all pages under
>> the site you can do so with:
>> https://example\.com.*
>>
>> Best regards.
>>
tov...@gmail.com
Mar 1, 2018, 9:01:55 AM3/1/18
to OWASP ZAP User Group
Hi,
I am able to make progress. Thanks for the help. I see now the below debug log keep on rolling. Does this mean the security scan is in progress or am I missing anything..?
536355 [ZAP-ProxyThread-328] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/ascan/view/status/?apikey=ZAPROXY-PLUGIN&scanId=&
536356 [ZAP-ProxyThread-328] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest returning: <?xml version="1.0" encoding="UTF-8" standalone="no"?><status>52</status>
[ZAP Jenkins Plugin] ACTIVE SCAN STATUS [ 52% ]
536360 [ZAP-ProxyThread-329] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/core/view/numberOfAlerts/?baseurl=&apikey=ZAPROXY-PLUGIN&
536361 [ZAP-ProxyThread-329] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest returning: <?xml version="1.0" encoding="UTF-8" standalone="no"?><numberOfAlerts>2</numberOfAlerts>
[ZAP Jenkins Plugin] ALERTS COUNT [ 2 ]
536368 [ZAP-ProxyThread-330] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/core/view/numberOfMessages/?baseurl=&apikey=ZAPROXY-PLUGIN&
536377 [ZAP-ProxyThread-330] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest returning: <?xml version="1.0" encoding="UTF-8" standalone="no"?><numberOfMessages>173</numberOfMessages>
[ZAP Jenkins Plugin] MESSAGES COUNT [ 173 ]
thc...@gmail.com
Mar 1, 2018, 9:04:48 AM3/1/18
to zaprox...@googlegroups.com
Yes, the active scan is running.
Best regards.
Best regards.
Message has been deleted
tov...@gmail.com
Mar 1, 2018, 9:44:04 AM3/1/18
to OWASP ZAP User Group
Thanks. One more thing looking for clarification.
I am following the below steps:
1. Create selenium scripts with FF driver profile with proxy of ZAP
2. Create a Jenkins JOB
3. Build flow: Initialize ZAP as a pre-build >> Run {maven} selenium tests >> Execute ZAP >> Reports.
Once I run the Job, selenium scripts ran successfully and FF driver closed, and after that ZAP spider and other scans started. I see a FF browser got opened while the scan is in progress but no URL or page is launched in the opened browser. Is that what is expected? When I closed this FF and see the below log. Should i keep the browser open..?
269268 [ZAP-ProxyThread-113] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/ajaxSpider/view/status/?apikey=ZAPROXY-PLUGIN 269270 [ZAP-ProxyThread-113] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest returning: <?xml version="1.0" encoding="UTF-8" standalone="no"?><status>running</status> 269274 [ZAP-ProxyThread-114] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/ajaxSpider/view/status/?apikey=ZAPROXY-PLUGIN 269275 [ZAP-ProxyThread-114] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest returning: <?xml version="1.0" encoding="UTF-8" standalone="no"?><status>running</status> [ZAP Jenkins Plugin] AJAX SPIDER STATUS [ running ] 269280 [ZAP-ProxyThread-115] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest http://zap/xml/core/view/numberOfAlerts/?baseurl=&apikey=ZAPROXY-PLUGIN& 269282 [ZAP-ProxyThread-115] DEBUG org.zaproxy.zap.extension.api.API - handleApiRequest returning: <?xml version="1.0" encoding="UTF-8" standalone="no"?><numberOfAlerts>2</numberOfAlerts> [ZAP Jenkins Plugin] ALERTS COUNT [ 2 ] 272296 [ZAP-AjaxSpiderApi] WARN org.zaproxy.zap.extension.spiderAjax.SpiderThread - Failed to start browser firefox com.google.inject.ProvisionException: Guice provision errors: 1) Error in custom provider, org.openqa.selenium.WebDriverException: Process unexpectedly closed with status: 0 Build info: version: 'unknown', revision: 'unknown', time: 'unknown' System info: host: '********', ip: '*******', os.name: 'Windows 8.1', os.arch: 'amd64', os.version: '6.3', java.version: '1.8.0_51' Driver info: driver.version: FirefoxDriver remote stacktrace: stack backtrace: 0: 0x47e934 - <no info> 1: 0x47f0a3 - <no info> 2: 0x442649 - <no info> 3: 0x449cc3 - <no info> 4: 0x42a890 - <no info> 5: 0x406f5e - <no info> 6: 0x40cfc9 - <no info> 7: 0x6bef19 - <no info> 8: 0x420756 - <no info> 9: 0x6b96e0 - <no info> 10: 0x7ffe771f8364 - BaseThreadInitThunk at com.crawljax.di.ConfigurationModule.configure(ConfigurationModule.java:47) while locating com.crawljax.browser.EmbeddedBrowser for parameter 0 at com.crawljax.core.CrawlerContext.<init>(CrawlerContext.java:33) while locating com.crawljax.core.CrawlerContext for parameter 0 at com.crawljax.core.Crawler.<init>(Crawler.java:75) while locating com.crawljax.core.Crawler for parameter 2 at com.crawljax.core.CrawlTaskConsumer.<init>(CrawlTaskConsumer.java:30) while locating com.crawljax.core.CrawlTaskConsumer 1 error at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:987) at com.crawljax.core.CrawlController.call(CrawlController.java:66) at com.crawljax.core.CrawljaxRunner.call(CrawljaxRunner.java:37) at org.zaproxy.zap.extension.spiderAjax.SpiderThread.run(SpiderThread.java:219) at java.lang.Thread.run(Thread.java:745) Caused by: org.openqa.selenium.WebDriverException: Process unexpectedly closed with status: 0 Build info: version: 'unknown', revision: 'unknown', time: 'unknown' System info: host: '*****', ip: '*****', os.name: 'Windows 8.1', os.arch: 'amd64', os.version: '6.3', java.version: '1.8.0_51' Driver info: driver.version: FirefoxDriver remote stacktrace: stack backtrace: 0: 0x47e934 - <no info> 1: 0x47f0a3 - <no info> 2: 0x442649 - <no info> 3: 0x449cc3 - <no info> 4: 0x42a890 - <no info> 5: 0x406f5e - <no info> 6: 0x40cfc9 - <no info> 7: 0x6bef19 - <no info> 8: 0x420756 - <no info> 9: 0x6b96e0 - <no info> 10: 0x7ffe771f8364 - BaseThreadInitThunk at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) at java.lang.reflect.Constructor.newInstance(Constructor.java:422) at org.openqa.selenium.remote.W3CHandshakeResponse.lambda$new$0(W3CHandshakeResponse.java:57) at org.openqa.selenium.remote.W3CHandshakeResponse$$Lambda$137/660693360.apply(Unknown Source) at org.openqa.selenium.remote.W3CHandshakeResponse.lambda$getResponseFunction$2(W3CHandshakeResponse.java:104) at org.openqa.selenium.remote.W3CHandshakeResponse$$Lambda$139/1207074427.apply(Unknown Source) at org.openqa.selenium.remote.ProtocolHandshake.lambda$createSession$0(ProtocolHandshake.java:123) at org.openqa.selenium.remote.ProtocolHandshake$$Lambda$140/1574579430.apply(Unknown Source) at java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:193) at java.util.Spliterators$ArraySpliterator.tryAdvance(Spliterators.java:958) at java.util.stream.ReferencePipeline.forEachWithCancel(ReferencePipeline.java:126) at java.util.stream.AbstractPipeline.copyIntoWithCancel(AbstractPipeline.java:529) at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:516) at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:502) at java.util.stream.FindOps$FindOp.evaluateSequential(FindOps.java:152) at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) at java.util.stream.ReferencePipeline.findFirst(ReferencePipeline.java:464) at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:126) at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:73) at org.openqa.selenium.remote.HttpCommandExecutor.execute(HttpCommandExecutor.java:142) at org.openqa.selenium.remote.service.DriverCommandExecutor.execute(DriverCommandExecutor.java:83) at org.openqa.selenium.remote.RemoteWebDriver.execute(RemoteWebDriver.java:600) at org.openqa.selenium.remote.RemoteWebDriver.startSession(RemoteWebDriver.java:219) at org.openqa.selenium.remote.RemoteWebDriver.<init>(RemoteWebDriver.java:142) at org.openqa.selenium.firefox.FirefoxDriver.<init>(FirefoxDriver.java:120) at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriverImpl(ExtensionSelenium.java:683) at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:628) at org.zaproxy.zap.extension.selenium.internal.BuiltInSingleWebDriverProvider.getWebDriver(BuiltInSingleWebDriverProvider.java:62) at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriverImpl(ExtensionSelenium.java:600) at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:491) at org.zaproxy.zap.extension.spiderAjax.SpiderThread$AjaxSpiderBrowserBuilder.get(SpiderThread.java:430) at org.zaproxy.zap.extension.spiderAjax.SpiderThread$AjaxSpiderBrowserBuilder.get(SpiderThread.java:400) at com.google.inject.util.Providers$3.get(Providers.java:109) at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40) at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38) at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62) at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84) at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254) at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38) at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62) at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84) at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254) at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38) at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62) at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84) at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254) at com.google.inject.internal.InjectorImpl$4$1.call(InjectorImpl.java:978) at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1024) at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:974) ... 4 more 272312 [ZAP-AjaxSpiderApi] INFO org.zaproxy.zap.extension.spiderAjax.SpiderThread - Stopping proxy... 272413 [ZAP-AjaxSpiderApi] INFO org.zaproxy.zap.extension.spiderAjax.SpiderThread - Proxy stopped. 272413 [ZAP-AjaxSpiderApi] INFO org.zaproxy.zap.extension.spiderAjax.SpiderThread - Finished Crawljax: API - Everything in Scope
- show quoted text -
Reply all
Reply to author
Forward
0 new messages