Test Mendix apps using ZAP

[Sherry hsiao]

Hello, I'm recently exploring the capability of ZAP. I'm wondering, whether someone knows ZAP supports Mendix apps (i.e., apps built from Mendix low-code) ? 

I would assume it's possible, as DAST/ZAP mainly tests running web applications, and it should be independent on the code language the apps are built. But I would like to have the hypothesis verified from someone who's tried it.

Thank you!

[Simon Bennetts]

Hiya,

ZAP does not "know" or care about the technology used.

If your app has an HTTP(S) interface then ZAP will be able to test it.

However it is also possble to write apps in such a way to make automated testing very hard. You can do that using any technology!

Try it out and see - and report back to us about how you got on :)

Cheers,

Simon

[vicky chavan]

I am facing automation issue with autencation scanning where dynamic csrf and session cookies , how to handle it in automation as it's passed in initial stage but geeti g failed after starting spide and active scans as each request required fresh session which are not properly handling by zap.

Please suggest solution in this

Vicky chavan

--
ZAP by Checkmarx: https://www.zaproxy.org/
---
You received this message because you are subscribed to the Google Groups "ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/zaproxy-users/7e1aeec8-620f-4009-a956-a9a0216d8d59n%40googlegroups.com.

[Simon Bennetts]

Hi Vicky,

For any problems with authentication you should start here: https://www.zaproxy.org/docs/authentication/

If that doesnt solve your problems then get back in touch, but we will need a lot of details.

Cheers,

Simon