Import HAR file to zap-full-scan.py

[LearnWork Smart (TheNoobEngineer)]

Hi, how do i impart  HTTP Archive (HAR) format file to Zap command line too, e.g.  zap-full-scan.py? 

[psiinon]

You cant - thats one of the restrictions of the packaged scans.

However you can use the Automation Framework (AF) :)

https://www.zaproxy.org/docs/automate/automation-framework/

FYI we are migrating the packaged scans to use the AF under the covers..

Cheers,

Simon

On Mon, Jul 31, 2023 at 8:00 PM LearnWork Smart (TheNoobEngineer) <learnwo...@gmail.com> wrote:

Hi, how do i impart  HTTP Archive (HAR) format file to Zap command line too, e.g.  zap-full-scan.py? 

--
You received this message because you are subscribed to the Google Groups "OWASP ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/374ed3c2-6fa5-4f2e-af07-cc7a971df3f4n%40googlegroups.com.

--

OWASP ZAP Project leader

[LearnWork Smart (TheNoobEngineer)]

Thanks for response! 

I understand that Zap GitHub action, https://github.com/marketplace/actions/owasp-zap-full-scan,  executes "zap-full-scan.py" (for full scan)

Is Zap AF available on GitHub action? 

I am hoping to automate authenticated scan via GitHub action. While the scan is profiled with imported context and HAR files  :) 

[psiinon]

Thats planned, but we dont have an eta yet :/

To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/e308c240-359b-4a24-b3a4-9fe43c05635fn%40googlegroups.com.