Mh07
Mh07

Reputation: 33

ZEST script authentication using OWASP ZAP

I m trying to understand how to record login using ZEST script. Once recording the steps, how to reuse it? I tried multiple times but I'm not able to get the right way of doing it.

Upvotes: 1

Views: 5606

Answers (1)

Simon Bennetts
Simon Bennetts

Reputation: 6186

You need to

  1. Define a context
  2. Set the Authentication mechanism to scripts
  3. Select your Zest script
  4. Set relevant Logged In/Out Indicators
  5. Add a valid user and password
  6. Test it all :)

The following FAQ is for configuring form based auth, but is still mostly relevant for scipts, esp the trouble shooting section: https://github.com/zaproxy/zaproxy/wiki/FAQformauth

If you're still having problems then the ZAP User Group is probably a better forum for getting support: https://groups.google.com/group/zaproxy-users

This article may also be of assistance: Scripting Authenticated Login within ZAP Vulnerability Scanner

Upvotes: 2

Related Questions