Setting max children and max rule duration -cmd

[Carl Newton]

Hi,

Could anyone help me set the "Maximum Children to Crawl" and the "Max Rule duration" settings when using the -cmd? I thought it would be something like:

zaproxy -cmd -quickurl https://example.com -config maxChildren=1 -config maxRuleDurationInMins=1 -quickprogress

But it doesn't appear to tell me when I have set a key value pair that doesn't exist, or if the syntax I've added is correct. Also, I attempted to export a config file to see what was available, and these two settings don't appear in it.

Is there any way of setting these in cmd mode?

Thanks

[thc...@gmail.com]

Hi.

Did you try
https://www.zaproxy.org/faq/how-do-you-find-out-what-key-to-use-to-set-a-config-value-on-the-command-line/
?

Best regards.

[Carl Newton]

Hi, yes this is the page I followed to generate the config file as described previously. The config file doesn't contain keys for those two settings.

--
You received this message because you are subscribed to the Google Groups "OWASP ZAP User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to zaproxy-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/zaproxy-users/03b63ebe-4853-9863-18b7-0c808ea4877f%40gmail.com.

[Simon Bennetts]

Change them in the ZAP desktop and then the file will contain them :)

As per that FAQ.

[thc...@gmail.com]

It seems you are just missing the parent key, they are:
scanner.maxRuleDurationInMins
spider.maxChildren

Best regards.

[Carl Newton]

Thanks guys. For future reference, I seem to be tripping up between where I can find things on my local machine with the desktop version (mac os), and the command line software I'm trying to use on a server. I would like to be able to find these values myself, but the desktop version doesn't appear to come with a command line option, and so I don't know how I'd be able to export to a directory with the desktop version to investigate the config.xml file. If you could just point me into that final direction I should be self-sufficient from that point. Apologies for all of the questions.

Thanks again.

[Simon Bennetts]

ZAP does have a command line option on Mac OS (and all supported platforms).

It is detailed here: https://www.zaproxy.org/faq/how-can-you-start-zap/

And you dont need to export the config file, ZAP just writes to it whenever you update the options. By default its in the, default directory: https://www.zaproxy.org/faq/what-is-the-default-directory-that-zap-uses/

Cheers,

Simon

[Carl Newton]

Awesome! Thank you for your help!