Auth failure and Auth success in the new ZAP 2.16.1 Output Tab

[Pablo Chamorro]

I'm doing a scan using ZAP 2.16.1. In the new Output Tab I se many authentication failure messages and some authentication success messages. Is that the expected behaviour? The scan task finishes succesfully as usual. How or why are those auth failure events triggered?

Thanks.

[Simon Bennetts]

Hiya,

There are no "expectations" :)

Everything depends on how your app works and how you have configured ZAP.

If you have configured ZAP to handle your authentication correctly then I would hope there would be very few authentication failures, but that depends on your app.

See https://www.zaproxy.org/docs/getting-further/automation/target-scanning-issues/#authentication-failures

Cheers,

Simon