Hi ZAP Team
I run OWASP ZAP with Automation Framework (CLI, yaml file).
I also use corporate proxy and I put proxy settings in config file
After run zap.sh with my yaml file I got this error in zap.log file:
2023-10-20 00:50:17,255 [main ] INFO CommandLine - Job spiderAjax started
2023-10-20 00:50:17,259 [ZAP-AjaxSpiderAuto] INFO SpiderThread - Running Crawljax (with firefox-headless): Auto - Context: NoAuthContext
2023-10-20 00:50:17,261 [ZAP-AjaxSpiderAuto] INFO SpiderThread - Starting proxy...
2023-10-20 00:50:17,263 [ZAP-AjaxSpiderAuto] INFO SpiderThread - Proxy started, listening at port [34555].
2023-10-20 00:50:17,506 [ZAP-AjaxSpiderAuto] INFO Plugins - Loaded org.zaproxy.zap.extension.spiderAjax.SpiderThread$DummyPlugin@733e0e48 as a OnBrowserCreatedPlugin
2023-10-20 00:50:18,074 [ZAP-AjaxSpiderAuto] WARN SpiderThread - Failed to start browser firefox-headless
com.google.inject.ProvisionException: Unable to provision, see the following errors:
1) [Guice/ErrorInCustomProvider]: SessionNotCreatedException: Could not start a new session. Response code 500. Message: Process unexpectedly closed with status 1
Host info: host: '1', ip: '0.0.0.1'
Build info: version: '4.14.0', revision: 'e5a96349ce'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '5.15.0-69-generic', java.version: '21'
Driver info: FirefoxDriver
Command: [null, newSession {capabilities=[Capabilities {acceptInsecureCerts: true, browserName: firefox, moz:debuggerAddress: true, moz:firefoxOptions: {args: [-headless], prefs: {browser.tabs.documentchannel: false, devtools.jsonview.enabled: false, dom.serviceWorkers.enabled: true, network.captive-portal-service.enabled: false, network.proxy.allow_hijacking_localhost: true, network.proxy.http: 127.0.0.1, network.proxy.http_port: 34555, network.proxy.no_proxies_on: , network.proxy.share_proxy_settings: true, network.proxy.ssl: 127.0.0.1, network.proxy.ssl_port: 34555, network.proxy.type: 1}}}]}]
at ConfigurationModule.configure(ConfigurationModule.java:47)
\_ installed by: CoreModule -> ConfigurationModule
at CrawlerContext.<init>(CrawlerContext.java:33)
\_ for 1st parameter
at Crawler.<init>(Crawler.java:75)
\_ for 1st parameter
at CrawlTaskConsumer.<init>(CrawlTaskConsumer.java:30)
\_ for 3rd parameter
while locating CrawlTaskConsumer
Learn more:
https://github.com/google/guice/wiki/ERROR_IN_CUSTOM_PROVIDER
1 error
======================
Full classname legend:
======================
ConfigurationModule: "com.crawljax.di.ConfigurationModule"
CoreModule: "com.crawljax.di.CoreModule"
CrawlTaskConsumer: "com.crawljax.core.CrawlTaskConsumer"
Crawler: "com.crawljax.core.Crawler"
CrawlerContext: "com.crawljax.core.CrawlerContext"
FirefoxDriver: "org.openqa.selenium.firefox.FirefoxDriver"
SessionNotCreatedException: "org.openqa.selenium.SessionNotCreatedException"
========================
End of classname legend:
========================
at com.google.inject.internal.InternalProvisionException.toProvisionException(InternalProvisionException.java:251) ~[?:?]
at com.google.inject.internal.InjectorImpl$1.get(InjectorImpl.java:1103) ~[?:?]
at com.crawljax.core.CrawlController.call(CrawlController.java:66) ~[?:?]
at com.crawljax.core.CrawljaxRunner.call(CrawljaxRunner.java:37) ~[?:?]
at org.zaproxy.zap.extension.spiderAjax.SpiderThread.run(SpiderThread.java:281) ~[?:?]
at java.lang.Thread.run(Thread.java:1583) [?:?]
Caused by: org.openqa.selenium.SessionNotCreatedException: Could not start a new session. Response code 500. Message: Process unexpectedly closed with status 1
Host info: host: '1', ip: '0.0.0.1'
Build info: version: '4.14.0', revision: 'e5a96349ce'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '5.15.0-69-generic', java.version: '21'
Driver info: org.openqa.selenium.firefox.FirefoxDriver
Command: [null, newSession {capabilities=[Capabilities {acceptInsecureCerts: true, browserName: firefox, moz:debuggerAddress: true, moz:firefoxOptions: {args: [-headless], prefs: {browser.tabs.documentchannel: false, devtools.jsonview.enabled: false, dom.serviceWorkers.enabled: true, network.captive-portal-service.enabled: false, network.proxy.allow_hijacking_localhost: true, network.proxy.http: 127.0.0.1, network.proxy.http_port: 34555, network.proxy.no_proxies_on: , network.proxy.share_proxy_settings: true, network.proxy.ssl: 127.0.0.1, network.proxy.ssl_port: 34555, network.proxy.type: 1}}}]}]
at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:140) ~[?:?]
at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:96) ~[?:?]
at org.openqa.selenium.remote.ProtocolHandshake.createSession(ProtocolHandshake.java:68) ~[?:?]
at org.openqa.selenium.remote.HttpCommandExecutor.execute(HttpCommandExecutor.java:163) ~[?:?]
at org.openqa.selenium.remote.service.DriverCommandExecutor.invokeExecute(DriverCommandExecutor.java:196) ~[?:?]
at org.openqa.selenium.remote.service.DriverCommandExecutor.execute(DriverCommandExecutor.java:171) ~[?:?]
at org.openqa.selenium.remote.RemoteWebDriver.execute(RemoteWebDriver.java:602) ~[?:?]
at org.openqa.selenium.remote.RemoteWebDriver.startSession(RemoteWebDriver.java:236) ~[?:?]
at org.openqa.selenium.remote.RemoteWebDriver.<init>(RemoteWebDriver.java:163) ~[?:?]
at org.openqa.selenium.firefox.FirefoxDriver.<init>(FirefoxDriver.java:156) ~[?:?]
at org.openqa.selenium.firefox.FirefoxDriver.<init>(FirefoxDriver.java:151) ~[?:?]
at org.openqa.selenium.firefox.FirefoxDriver.<init>(FirefoxDriver.java:132) ~[?:?]
at org.openqa.selenium.firefox.FirefoxDriver.<init>(FirefoxDriver.java:127) ~[?:?]
at org.openqa.selenium.firefox.FirefoxDriver.<init>(FirefoxDriver.java:112) ~[?:?]
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriverImpl(ExtensionSelenium.java:1106) ~[?:?]
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:928) ~[?:?]
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:896) ~[?:?]
at org.zaproxy.zap.extension.selenium.internal.BuiltInSingleWebDriverProvider.getWebDriver(BuiltInSingleWebDriverProvider.java:63) ~[?:?]
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriverImpl(ExtensionSelenium.java:776) ~[?:?]
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:576) ~[?:?]
at org.zaproxy.zap.extension.selenium.ExtensionSelenium.getWebDriver(ExtensionSelenium.java:549) ~[?:?]
at org.zaproxy.zap.extension.spiderAjax.SpiderThread$AjaxSpiderBrowserBuilder.get(SpiderThread.java:495) ~[?:?]
at org.zaproxy.zap.extension.spiderAjax.SpiderThread$AjaxSpiderBrowserBuilder.get(SpiderThread.java:463) ~[?:?]
at com.google.inject.util.Providers$GuicifiedProvider.get(Providers.java:121) ~[?:?]
at com.google.inject.internal.ProviderInternalFactory.provision(ProviderInternalFactory.java:86) ~[?:?]
at com.google.inject.internal.InternalFactoryToInitializableAdapter.provision(InternalFactoryToInitializableAdapter.java:57) ~[?:?]
at com.google.inject.internal.ProviderInternalFactory.circularGet(ProviderInternalFactory.java:60) ~[?:?]
at com.google.inject.internal.InternalFactoryToInitializableAdapter.get(InternalFactoryToInitializableAdapter.java:47) ~[?:?]
at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:40) ~[?:?]
at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:60) ~[?:?]
at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:113) ~[?:?]
at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91) ~[?:?]
at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:296) ~[?:?]
at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:40) ~[?:?]
at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:60) ~[?:?]
at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:113) ~[?:?]
at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91) ~[?:?]
at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:296) ~[?:?]
at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:40) ~[?:?]
at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:60) ~[?:?]
at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:113) ~[?:?]
at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91) ~[?:?]
at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:296) ~[?:?]
at com.google.inject.internal.InjectorImpl$1.get(InjectorImpl.java:1100) ~[?:?]
... 4 more
2023-10-20 00:50:18,108 [ZAP-AjaxSpiderAuto] INFO SpiderThread - Stopping proxy...
2023-10-20 00:50:18,111 [ZAP-AjaxSpiderAuto] INFO SpiderThread - Proxy stopped.
2023-10-20 00:50:18,112 [ZAP-AjaxSpiderAuto] INFO SpiderThread - Finished Crawljax: Auto - Context: NoAuthContext
2023-10-20 00:50:18,261 [main ] INFO CommandLine - Job spiderAjax found 0 URLs