ZAP docker webswing API

[Alessandro Pezzè]

Hello, is it possible to access ZAP APIs using the image https://github.com/zaproxy/zaproxy/wiki/WebSwing?

I tried the :8080/UI and :8090/UI but i dont see the common html page. Webswing however works.

Thanks

[thc...@gmail.com]

Hi.

Yes, if you expose the port ZAP is listening to (when starting the
container) and allow external access to the API (e.g. host's address).

Which (host) OS are you using?

Best regards.

[Alessandro Pezzè]

I am on Win 10, using standard docker (not windows containers)

This is part of my docker-compose.yml

  zaproxy:
    image: 'owasp/zap2docker-stable'
    hostname: 'zaproxy'
    ports:
      - '8080:8080'
      - '8090:8090'
    volumes:
      - ./...:/...
    restart: always
    command: 'zap-webswing.sh -host 0.0.0.0 -config api.disablekey=true -config database.recoverylog=false -config connection.timeoutInSecs=120 -config api.addrs.addr.name=.* -config api.addrs.addr.regex=true'

[thc...@gmail.com]

Yeah, I was referring to the Docker container :)

Which address are you using to access the API?

Best regards.

[Alessandro Pezzè]

On windows I use 10.0.75.2, I cant use localhost

[Alessandro Pezzè]

However I also access it from other containers, and the address that i use is http://zaproxy:8080/UI or http://zaproxy:8090/UI