Request to API URL https://myurl.internal:8080 from 10.x.x.x not permitted

72 views
Skip to first unread message

legolas1233

unread,
Mar 15, 2021, 11:41:57 PM3/15/21
to OWASP ZAP User Group

I'm trying to evaluate zaproxy and running it on a Red Hat 7 system. There is no GUI.
ZAP Version - 2.10.0

Brought zap on the command line

./zap.sh -daemon -host 0.0.0.0 -config api.addrs.addr.name=10.x.x.x -config api.disablekey=true

However when we try to hit it from a browser on 10.x.x.x, we get a EMPTY RESPONSE. Below is what we see on the console,

241934 [ZAP-ProxyThread-73] WARN org.zaproxy.zap.extension.api.API - Request to API URL https://myurl.internal:8080/ from 10.x.x.x not permitted 498447 [ZAP-ProxyThread-123] WARN org.zaproxy.zap.extension.api.API - Request to API URL https://myurl.internal:8080/UI with host header 10.x.x.x not permitted

Surely I'm missing something. Can you help me find out what it is?

Simon Bennetts

unread,
Mar 16, 2021, 5:13:59 AM3/16/21
to OWASP ZAP User Group
By default ZAP does not accept API requests from remote IP addresses.
Reply all
Reply to author
Forward
0 new messages