export settings from gui to docker

[Nicollas Teixeira]

are there any way to export my settings from zap gui to a file to execute on docker? i mean settings settings, not context or something like that, setting like these in the picture:

[psiinon]

The ZAP settings are stored in a file called "config.xml" which is stored in the ZAP config directory: https://www.zaproxy.org/faq/what-is-the-default-directory-that-zap-uses/

You can just copy this file into the right place in the docker image.

The plan is for the Automation Framework to make it easy to reproduce what you do manually in automation.

We're not there yet, but we're getting there :)

If you have any specific requirements in this space then I'd love to hear them :)

Cheers,

Simon

On Thu, Aug 24, 2023 at 7:38 PM Nicollas Teixeira <nicollas...@gmail.com> wrote:

are there any way to export my settings from zap gui to a file to execute on docker? i mean settings settings, not context or something like that, setting like these in the picture:

--
You received this message because you are subscribed to the Google Groups "ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/4af32a52-d03a-4977-a423-dff7ac7c7091n%40googlegroups.com.

--

ZAP Project leader

[Nicollas Teixeira]

Oh okay, do you know if is possible to customize these "active scan input vectors" using docker without customize the docker image? i mean setting them like parameters when executing the container

[psiinon]

The things you can configure for the active scanner via the AF are given on https://www.zaproxy.org/docs/desktop/addons/automation-framework/job-ascan/

However you can set any option via the commandline: https://www.zaproxy.org/faq/how-do-you-find-out-what-key-to-use-to-set-a-config-value-on-the-command-line/

Cheers,

Simon

To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/6245019c-f0af-40ee-9fad-a54b1d5a2a8bn%40googlegroups.com.

--

ZAP Project leader

[Nicollas Teixeira]

would be this one? 

[psiinon]

No, they are all under the "<scanner>" element.

Some of them are bitmaps so I recommend you follow the advice in https://www.zaproxy.org/faq/how-do-you-find-out-what-key-to-use-to-set-a-config-value-on-the-command-line/

Cheers,

Simon

To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/034657cd-6b74-41d7-a952-b78b43d84fb1n%40googlegroups.com.

--

ZAP Project leader