简体   繁体   English

在公司代理后面使用OWASP ZAP

[英]Using OWASP ZAP behind a corporate proxy

Is there any way to use ZAP behind a corporate proxy? 有什么方法可以在公司代理后面使用ZAP? Ie I want to configure my browser to use the local proxy provided by ZAP, and then ZAP should send the request through our global proxy: 即我想将浏览器配置为使用ZAP提供的本地代理,然后ZAP应该通过我们的全局代理发送请求:

Firefox -> ZAP -> WSA proxy (NTLM) -> Intarweb

Even if ZAP doesn't support NTLM proxies it would be good to know, as I'm also running CNTLM locally for those applications that can't handle the authentication properly. 即使ZAP不支持NTLM代理,也应该知道,因为我还在本地为那些无法正确处理身份验证的应用程序运行CNTLM。

(I tried searching for a solution but it's of course impossible to find anything to do with proxies for an application that has "proxy" in the name ... :/ ) (我尝试搜索解决方案,但是对于名称为...:/的“代理”应用程序,当然不可能找到与代理有关的任何内容)

Besides that it should be possible to configure the proxy used by ZAP like you would do for any other Java based application ZAP provides a setting for that: Open Options and then Connection and specify your proxy settings. 除此之外,应该有可能像配置其他基于Java的应用程序一样配置ZAP使用的代理ZAP为此提供了一个设置:打开“ Options ,然后“ Connection并指定您的代理设置。

You can read about this here: https://code.google.com/p/zaproxy/issues/detail?id=1633 您可以在这里阅读有关内容: https : //code.google.com/p/zaproxy/issues/detail?id=1633

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM