how to use selenium authentication macro for owasp zap docker

[Nicollas Teixeira]

Hello guys, im trying to use a Selenium macro for login authentication in owasp zap docker stable version. I've tried a few ways but without success. In the GUI version I managed but I didn't find any documentation or anything like that for the container version. I already tried modifying the dockerfile and making zap use firefox/chrome headless for authentication, but it didn't work. Im new to ZAP so if anyone can help me with this i would appreciate.

[Simon Bennetts]

The ZAP Automation Framework (AF) support all of the authentication mechanisms supported by ZAP.

You can get authentication working in the desktop then create amd test an AF plan in the desktop which you can export and run from the commandline.

Also have a look at the new Browser Based Authentication: https://www.zaproxy.org/docs/desktop/addons/authentication-helper/browser-auth/

Cheers,

Simon

[Nicollas Teixeira]

So, should i execute what i want in GUI version and just export the context to run in docker version?

[Simon Bennetts]

Yes, configure and test your context in the ZAP GUI.

Then you can either create and export an AF plan or just export the context.

Cheers,

Simon

[Nicollas Teixeira]

could you send me a link or something like that to how use selenium script on GUI? 

[Simon Bennetts]

See this blog post: https://www.zaproxy.org/blog/2023-02-01-authenticating-using-selenium/

Note that theres also a new Browser based authentication option - https://www.zaproxy.org/docs/desktop/addons/authentication-helper/browser-auth/

I plan to document that more when I get a chance...

Cheers,

Simon