OWASP ZAP 代理冻结

Question

I recently started doing some exercises on Hacking-Lab .

In one task I wanted to do an "active scan" on a website. The scan run up to 100% fairly quickly, but then the ZAP tool was frozen. I could not click on anything but the close button. However, the tool still captures packets from the internet.

The guys from Hacking-Lab suggested to use a different JDK from Oracle instead of the OpenJDK they used. Unfortunately, this did not work.

Does someone has the same problem or a hint how to solve that problem?

Thank you!

Answer 1

是的，尝试安装 oracle JDK 而不是 Open JDK，然后根据需要在它们之间切换，但如果切换或不切换，请检查 java 版本......这对我有用。

Answer 2

In my case, If I click a large size of JavaScript file (or a link) from the Alert tab then the application freezes instantly or moves slow. So, I did the following steps and it relieved the issue:

1. Double click an event that doesn't cause the issue from the History tab.
2. Right click in the response body area, go to Syntax, disable Auto Detect and set Plain. Then right click again, go to View, disable Word Wrap.
3. Navigate any JavaScript file from the Alert tab to see the difference.

If you want more help, try uploading an issue to the GitHub repository .

Answer 3

We have a FAQ for that :) https://github.com/zaproxy/zaproxy/wiki/FAQhelp

Simon (ZAP Project Lead)