Authentication using browser Local storage

[Rudy Moniaga]

Hi,

I am new with OWASP Zap tool and wondering if it's possible to inject browser local storage when scanning using Zap.

Thanks,

Rudy

[Simon Bennetts]

Hi Rudy,

Yes it is.

I think I cover that in this video: https://play.vidyard.com/igf3A8UdZ6QAGiFjEpLH86

The ZAP selenium script which actually injects content into local storage is https://github.com/zaproxy/community-scripts/blob/main/selenium/Selenium%20Juice%20Shop.js

Cheers,

Simon