Using ZAP Fuzzer through ZAP's API

[Wael Ayoub]

Hello,

I am trying to automate penetration tests using ZAP's API, i was trying to see if i can configure zap's fuzzer through the API to create custom payloads and send them automatically without going through the GUI. I was not able to find how this can be achieved till now, so is there a way to do that and if there is, how can i do it?

Regards,
Wael

[psiinon]

Hi Wael,

I'm afraid the fuzzer does not have API support yet: https://github.com/zaproxy/zaproxy/issues/1689

However maybe you are really refering the the Active Scanner (they are different)?

https://www.zaproxy.org/faq/how-can-i-add-my-own-payloads-to-active-scan-rules/

For ways to automate ZAP see https://www.zaproxy.org/docs/automate/

Cheers,

Simon

--
You received this message because you are subscribed to the Google Groups "ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/9f8a9052-e162-4f50-ae80-cf3cb368607bn%40googlegroups.com.

--

ZAP Project leader