How to include HTTP raw request to ZAP?
179 views
Skip to first unread message
HAHWUL
Oct 19, 2021, 10:33:27 AM10/19/21
to OWASP ZAP User Group
Hi team and zap users :D
I have a small question, is there a any way can i include HTTP Raw Request to ZAP?
Of course, I know ZAP can similar include it as an "include OpenAPI definition". However, I wonder if there is a way to include a single HTTP Raw Requset in ZAP 🤔
e.g (HTTP Raw Requset)
====
POST https://www.hahwul.com/ HTTP/1.1
Host: www.hahwul.com
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
====
GET seems to be possible to some extent with API requests, but other method(e.g POST)s are difficult.
If you know how to do it, please help me! If there's nothing, I'll use the 3rd party tool(e.g httpie, curl) to deliver it to the ZAP Proxy port in the last way 😭
HAHWUL
Oct 19, 2021, 10:36:38 AM10/19/21
to OWASP ZAP User Group
For your information, it is being used in CI/CD Pipeline, so I wonder if it will be possible with API :D
2021년 10월 19일 화요일 오후 11시 33분 27초 UTC+9에 HAHWUL님이 작성:
kingthorin+owaspzap
Oct 19, 2021, 10:50:05 AM10/19/21
to OWASP ZAP User Group
IIRC there's a 'sendRequest' API endpoint you can use, or you can export a HAR from any browser and then use sendHarRequest.
thc...@gmail.com
Oct 19, 2021, 10:50:58 AM10/19/21
to zaprox...@googlegroups.com
HAHWUL
Oct 19, 2021, 10:59:26 AM10/19/21
to OWASP ZAP User Group
Oh, it supports the HAR format!! I have a feeling how to deal with it.
Thank you so much THC and Rick 😄
Enjoy you rest of the day!
2021년 10월 19일 화요일 오후 11시 50분 58초 UTC+9에 thc202님이 작성:
Reply all
Reply to author
Forward
0 new messages