Attacking with OWASP ZAP on CloudFlare hosted websites

716 views
Skip to first unread message

Kristov

unread,
Mar 15, 2016, 4:48:20 PM3/15/16
to OWASP ZAP User Group
Anyone have tips for testing with ZAP against CloudFlare hosted sites? I find that I get a lot of 403 Forbidden responses to ZAP requests.

Simon Bennetts

unread,
Mar 16, 2016, 8:16:34 AM3/16/16
to OWASP ZAP User Group
I'm not aware of any specific settings that would help with CloudFlare.
Are you using authentication with the site?

Cheers,

Simon
Reply all
Reply to author
Forward
0 new messages