使用OWASP ZAP的ZEST脚本身份验证

Question

I m trying to understand how to record login using ZEST script. Once recording the steps, how to reuse it? I tried multiple times but I'm not able to get the right way of doing it.

Answer 1

You need to

1. Define a context
2. Set the Authentication mechanism to scripts
3. Select your Zest script
4. Set relevant Logged In/Out Indicators
5. Add a valid user and password
6. Test it all :)

The following FAQ is for configuring form based auth, but is still mostly relevant for scipts, esp the trouble shooting section: https://github.com/zaproxy/zaproxy/wiki/FAQformauth

If you're still having problems then the ZAP User Group is probably a better forum for getting support: https://groups.google.com/group/zaproxy-users

This article may also be of assistance: Scripting Authenticated Login within ZAP Vulnerability Scanner