logs.txt

2017-08-09T11:38:28.148459764Z Found Java version 1.8.0_111-internal
2017-08-09T11:38:28.177835375Z Available memory: 1999 MB
2017-08-09T11:38:28.185716651Z Setting jvm heap size: -Xmx499m
2017-08-09T11:38:44.816523011Z 5722 [main] INFO org.zaproxy.zap.DaemonBootstrap  - OWASP ZAP 2.6.0 started 09/08/17 11:38:44
2017-08-09T11:38:45.788296197Z 6607 [main] INFO org.parosproxy.paros.common.AbstractParam  - Setting config api.disablekey = true was null
2017-08-09T11:38:45.788336152Z 6607 [main] INFO org.parosproxy.paros.common.AbstractParam  - Setting config database.recoverylog = false was null
2017-08-09T11:38:45.788348439Z 6608 [main] INFO org.parosproxy.paros.common.AbstractParam  - Setting config connection.timeoutInSecs = 120 was null
2017-08-09T11:38:45.788358427Z 6608 [main] INFO org.parosproxy.paros.common.AbstractParam  - Setting config api.addrs.addr.name = .* was null
2017-08-09T11:38:45.788366618Z 6608 [main] INFO org.parosproxy.paros.common.AbstractParam  - Setting config api.addrs.addr.regex = true was null
2017-08-09T11:38:45.946421357Z 6848 [main] INFO org.parosproxy.paros.network.SSLConnector  - Reading supported SSL/TLS protocols...
2017-08-09T11:38:45.946463011Z 6849 [main] INFO org.parosproxy.paros.network.SSLConnector  - Using a SSLEngine...
2017-08-09T11:38:49.014080853Z 9921 [main] INFO org.parosproxy.paros.network.SSLConnector  - Done reading supported SSL/TLS protocols: [SSLv2Hello, SSLv3, TLSv1, TLSv1.1, TLSv1.2]
2017-08-09T11:38:49.113758752Z 10021 [main] INFO org.parosproxy.paros.extension.option.OptionsParamCertificate  - Unsafe SSL renegotiation disabled.
2017-08-09T11:38:52.797619137Z 13704 [main] INFO hsqldb.db..ENGINE  - open start - state not modified
2017-08-09T11:38:53.642237588Z 14549 [main] INFO hsqldb.db..ENGINE  - dataFileCache open start
2017-08-09T11:38:53.804306033Z 14696 [main] INFO hsqldb.db..ENGINE  - dataFileCache open end
2017-08-09T11:38:55.226481841Z 16032 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory  - Loading extensions
2017-08-09T11:38:59.737283520Z 20644 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory  - Installed add-ons: [[id=pscanrules, fileVersion=19], [id=jxbrowserlinux64, fileVersion=1], [id=zest, fileVersion=23], [id=jxbrowser, fileVersion=2], [id=invoke, fileVersion=6], [id=fuzz, fileVersion=8, version=2.0.1], [id=selenium, fileVersion=10, version=1.1.0], [id=jxbrowserlinux32, fileVersion=1], [id=websocket, fileVersion=12], [id=alertFilters, fileVersion=4], [id=directorylistv1, fileVersion=3], [id=reveal, fileVersion=2], [id=diff, fileVersion=7], [id=ascanrules, fileVersion=26], [id=gettingStarted, fileVersion=6], [id=replacer, fileVersion=2], [id=help, fileVersion=7], [id=saverawmessage, fileVersion=3], [id=tips, fileVersion=6], [id=coreLang, fileVersion=11], [id=scripts, fileVersion=18], [id=quickstart, fileVersion=19], [id=onlineMenu, fileVersion=5], [id=webdriverlinux, fileVersion=2], [id=bruteforce, fileVersion=6], [id=spiderAjax, fileVersion=17]]
2017-08-09T11:39:01.453965143Z 22357 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory  - Extensions loaded
2017-08-09T11:39:02.181134812Z 23086 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Change user agent to other browsers. 
2017-08-09T11:39:02.181177365Z 23087 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Detect insecure or potentially malicious content in HTTP responses.
2017-08-09T11:39:02.183245649Z 23087 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Detect and alert 'Set-cookie' attempt in HTTP response for modification.
2017-08-09T11:39:02.191728751Z 23087 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Avoid browser cache (strip off IfModifiedSince)
2017-08-09T11:39:02.192338069Z 23099 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log cookies sent by browser.
2017-08-09T11:39:02.192408890Z 23100 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log unique GET queries into file:filter/get.xls
2017-08-09T11:39:02.192881361Z 23100 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log unique POST queries into file:  filter/post.xls
2017-08-09T11:39:02.196984567Z 23100 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Log request and response into file: filter/message.txt
2017-08-09T11:39:02.197066575Z 23102 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP request body using defined pattern.
2017-08-09T11:39:02.197428170Z 23102 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP request header using defined pattern.
2017-08-09T11:39:02.197495495Z 23102 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP response body using defined pattern.
2017-08-09T11:39:02.197507282Z 23102 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Replace HTTP response header using defined pattern.
2017-08-09T11:39:02.197517171Z 23102 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory  - loaded filter Send ZAP session request ID
2017-08-09T11:39:02.415526190Z Aug 09, 2017 11:39:02 AM java.util.prefs.FileSystemPreferences$1 run
2017-08-09T11:39:02.415603704Z INFO: Created user preferences directory.
2017-08-09T11:39:03.041766259Z 23949 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows ZAP to check for updates
2017-08-09T11:39:03.130564941Z 24037 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionViewOption
2017-08-09T11:39:03.131990146Z 24038 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionEdit
2017-08-09T11:39:03.132891037Z 24040 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionFilter
2017-08-09T11:39:03.137102822Z 24043 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Provides a rest based API for controlling and accessing ZAP
2017-08-09T11:39:03.427658019Z 24332 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionState
2017-08-09T11:39:03.427690683Z 24332 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionReport
2017-08-09T11:39:03.427733934Z 24332 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHistory
2017-08-09T11:39:03.427789272Z 24334 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Show hidden fields and enable disabled fields
2017-08-09T11:39:03.435076114Z 24337 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Search messages for strings and regular expressions 
2017-08-09T11:39:03.439098710Z 24345 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Encode/Decode/Hash...
2017-08-09T11:39:03.439195003Z 24345 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows you to intercept and modify requests and responses
2017-08-09T11:39:03.527221649Z 24368 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Passive scanner
2017-08-09T11:39:03.897807346Z 24793 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Script Passive Scan Rules
2017-08-09T11:39:03.897847601Z 24793 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Stats Passive Scan Rule
2017-08-09T11:39:03.897897844Z 24794 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Application Error Disclosure
2017-08-09T11:39:03.897906135Z 24794 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Incomplete or No Cache-control and Pragma HTTP Header Set
2017-08-09T11:39:03.897915025Z 24794 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Content-Type Header Missing
2017-08-09T11:39:03.897923116Z 24795 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cookie No HttpOnly Flag
2017-08-09T11:39:03.897928810Z 24795 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cookie Without Secure Flag
2017-08-09T11:39:03.897936901Z 24795 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cross-Domain JavaScript Source File Inclusion
2017-08-09T11:39:03.897945191Z 24795 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Web Browser XSS Protection Not Enabled
2017-08-09T11:39:03.897953282Z 24796 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Secure Pages Include Mixed Content
2017-08-09T11:39:03.897961073Z 24797 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Password Autocomplete in Browser
2017-08-09T11:39:03.897968965Z 24797 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Private IP Disclosure
2017-08-09T11:39:03.897977056Z 24798 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Session ID in URL Rewrite
2017-08-09T11:39:03.897985147Z 24798 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: X-Content-Type-Options Header Missing
2017-08-09T11:39:03.897996134Z 24798 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: X-Frame-Options Header Scanner
2017-08-09T11:39:03.967242007Z 24870 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows you to view and manage alerts
2017-08-09T11:39:03.967285858Z 24870 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Active scanner, heavily based on the original Paros active scanner, but with additional tests added
2017-08-09T11:39:04.004240285Z 24901 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Spider used for automatically finding URIs on a site
2017-08-09T11:39:04.010965455Z 24916 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing A set of common popup menus for miscellaneous tasks
2017-08-09T11:39:04.011000116Z 24917 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Forced browsing of files and directories using code from the OWASP DirBuster tool
2017-08-09T11:39:04.011831885Z 24919 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionManualRequest
2017-08-09T11:39:04.013260186Z 24919 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Compares 2 sessions and generates an HTML file showing the differences
2017-08-09T11:39:04.015090437Z 24922 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Invoke external applications passing context related information such as URLs and parameters
2017-08-09T11:39:04.016977824Z 24923 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Handles anti cross site request forgery (CSRF) tokens
2017-08-09T11:39:04.020813529Z 24928 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionAuthentication
2017-08-09T11:39:04.158793548Z 25066 [ZAP-daemon] INFO org.zaproxy.zap.extension.authentication.ExtensionAuthentication  - Loaded authentication method types: [Form-based Authentication, HTTP/NTLM Authentication, Manual Authentication, Script-based Authentication]
2017-08-09T11:39:04.168759191Z 25076 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Creates a dynamic SSL certificate to allow SSL communications to be intercepted without warnings being generated by the browser
2017-08-09T11:39:04.169793733Z 25077 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Logs errors to the Output tab in development mode only
2017-08-09T11:39:04.169820003Z 25077 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionUserManagement
2017-08-09T11:39:04.178171154Z 25085 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Summarise and analyse FORM and URL parameters as well as cookies
2017-08-09T11:39:04.187682305Z 25095 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Script integration
2017-08-09T11:39:04.252605218Z 25158 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Scripting console, supports all JSR 223 scripting languages
2017-08-09T11:39:04.252678036Z 25159 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionForcedUser
2017-08-09T11:39:04.254849306Z 25160 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Extension handling HTTP sessions
2017-08-09T11:39:04.258944421Z 25166 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Zest is a specialized scripting language from Mozilla specifically designed to be used in security tools
2017-08-09T11:39:05.319789711Z 26226 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionDiff
2017-08-09T11:39:05.321094450Z 26228 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionRequestPostTableView
2017-08-09T11:39:05.322826910Z 26229 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionSessionManagement
2017-08-09T11:39:05.332184434Z 26239 [ZAP-daemon] INFO org.zaproxy.zap.extension.sessions.ExtensionSessionManagement  - Loaded session management method types: [Cookie-based Session Management, HTTP Authentication Session Management]
2017-08-09T11:39:05.333698838Z 26241 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelRequestFormTableView
2017-08-09T11:39:05.335129636Z 26242 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Capture messages from WebSockets with the ability to set breakpoints.
2017-08-09T11:39:05.373301300Z 26264 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Core UI related functionality.
2017-08-09T11:39:05.373342553Z 26275 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionAuthorization
2017-08-09T11:39:05.411106773Z 26283 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing AJAX Spider, uses Crawljax
2017-08-09T11:39:05.411173099Z 26285 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Handles adding Global Excluded URLs
2017-08-09T11:39:05.411184286Z 26285 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Adds menu item to refresh the Sites tree
2017-08-09T11:39:05.411192177Z 26285 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Adds support for configurable keyboard shortcuts for all of the ZAP menus.
2017-08-09T11:39:05.411200368Z 26285 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing OWASP ZAP User Guide
2017-08-09T11:39:05.411207860Z 26287 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Provides a URL suitable for calling from target sites
2017-08-09T11:39:05.411215751Z 26305 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows you to configure which extensions are loaded when ZAP starts 
2017-08-09T11:39:05.411223143Z 26306 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelComponentonentAll
2017-08-09T11:39:05.411230834Z 26306 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelHexView
2017-08-09T11:39:05.412167386Z 26307 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelImageView
2017-08-09T11:39:05.412190660Z 26307 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelLargeRequestView
2017-08-09T11:39:05.412210937Z 26307 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelLargeResponseView
2017-08-09T11:39:05.412220326Z 26307 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelRequestQueryCookieTableView
2017-08-09T11:39:05.412228717Z 26307 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionHttpPanelSyntaxHighlightTextView
2017-08-09T11:39:05.412237207Z 26307 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Active and passive rule configuration
2017-08-09T11:39:05.412915848Z 26319 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Statistics
2017-08-09T11:39:05.417179374Z 26323 [ZAP-daemon] INFO org.zaproxy.zap.extension.stats.ExtensionStats  - Start recording in memory stats
2017-08-09T11:39:05.420814704Z 26328 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Passive Scan Rules
2017-08-09T11:39:05.420876735Z 26328 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionJxBrowserLinux64
2017-08-09T11:39:05.420885725Z 26328 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtSelJxBrowserLinux64
2017-08-09T11:39:05.514921443Z 26405 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionJxBrowser
2017-08-09T11:39:05.518039852Z 26423 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Provides the foundation for concrete message types (for example, HTTP, WebSockets) expose fuzzer implementations.
2017-08-09T11:39:05.530297728Z 26437 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows to fuzz HTTP messages.
2017-08-09T11:39:05.530978166Z 26438 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Provides WebDrivers to control several browsers using Selenium and includes HtmlUnit browser.
2017-08-09T11:39:05.540806063Z 26448 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionJxBrowserLinux32
2017-08-09T11:39:05.541442251Z 26448 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtSelJxBrowserLinux32
2017-08-09T11:39:05.543017987Z 26450 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Allows to fuzz WebSocket messages.
2017-08-09T11:39:05.544251506Z 26451 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Context alert rules filter
2017-08-09T11:39:05.547407772Z 26454 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Active Scan Rules
2017-08-09T11:39:05.548888414Z 26456 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing The ZAP Getting Started Guide
2017-08-09T11:39:05.550033632Z 26457 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Easy way to replace strings in requests and responses
2017-08-09T11:39:05.554741262Z 26461 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing ExtensionSaveRawHttpMessage
2017-08-09T11:39:05.555671121Z 26462 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Tips and Tricks
2017-08-09T11:39:05.556620458Z 26464 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Translations of the core language files
2017-08-09T11:39:05.560095567Z 26465 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing Quick Start panel 
2017-08-09T11:39:05.560130028Z 26467 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader  - Initializing The Online menu links
2017-08-09T11:39:05.836722459Z 26743 [ZAP-daemon] INFO org.zaproxy.zap.extension.callback.ExtensionCallback  - Started callback server on 0.0.0.0:32907
2017-08-09T11:39:05.836758319Z 26743 [ZAP-daemon] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL  - Creating new root CA certificate
2017-08-09T11:39:08.093557732Z 29000 [ZAP-daemon] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL  - New root CA certificate created
2017-08-09T11:40:35.879340988Z 116786 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/replacer-beta-3.zap
2017-08-09T11:40:35.880169261Z 116787 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/jxbrowser-alpha-4.zap
2017-08-09T11:40:35.880508880Z 116788 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/jxbrowserlinux64-alpha-2.zap
2017-08-09T11:40:35.880529357Z 116788 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/jxbrowserlinux32-alpha-2.zap
2017-08-09T11:40:35.940729658Z 116848 [ZAP-daemon] INFO org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate  - Installing new addon jxbrowserlinux32 v2
2017-08-09T11:40:35.992631349Z 116900 [ZAP-daemon] INFO org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate  - Installing new addon jxbrowserlinux64 v2
2017-08-09T11:40:36.048551142Z 116956 [ZAP-daemon] INFO org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate  - Installing new addon jxbrowser v4
2017-08-09T11:40:36.192828111Z 117085 [ZAP-daemon] INFO org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate  - Installing new addon replacer v3
2017-08-09T11:40:36.218039884Z 117125 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on update check complete
2017-08-09T11:40:36.232909337Z 117127 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Downloading add-on from: https://github.com/zaproxy/zap-extensions/releases/download/2.6/pscanrulesAlpha-alpha-15.zap
2017-08-09T11:40:36.250027372Z 117155 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Downloading add-on from: https://github.com/zaproxy/zap-extensions/releases/download/2.6/pscanrulesBeta-beta-16.zap
2017-08-09T11:40:43.492537441Z 124400 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/replacer-beta-3.zap
2017-08-09T11:40:43.492913221Z 124400 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/jxbrowser-alpha-4.zap
2017-08-09T11:40:43.493035284Z 124400 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/jxbrowserlinux64-alpha-2.zap
2017-08-09T11:40:43.493290299Z 124401 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/jxbrowserlinux32-alpha-2.zap
2017-08-09T11:40:43.493424748Z 124401 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/pscanrulesBeta-beta-16.zap
2017-08-09T11:40:43.495271980Z 124402 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine  - Add-on downloaded to: /home/zap/.ZAP/plugin/pscanrulesAlpha-alpha-15.zap
2017-08-09T11:40:43.500692611Z 124408 [ZAP-daemon] INFO org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate  - Installing new addon pscanrulesAlpha v15
2017-08-09T11:40:43.599077660Z 124506 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Base64 Disclosure
2017-08-09T11:40:43.599279534Z 124506 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Big Redirect Detected (Potential Sensitive Information Leak)
2017-08-09T11:40:43.599293019Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Content Cacheability
2017-08-09T11:40:43.599430365Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cookie Without SameSite Attribute
2017-08-09T11:40:43.599441053Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Content Security Policy (CSP) Header Not Set
2017-08-09T11:40:43.599545337Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cross-Domain Misconfiguration
2017-08-09T11:40:43.599560420Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Directory Browsing
2017-08-09T11:40:43.599661606Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: An example passive scan rule which loads data from a file
2017-08-09T11:40:43.599922414Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Example Passive Scanner: Denial of Service
2017-08-09T11:40:43.599929706Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Hash Disclosure
2017-08-09T11:40:43.600067852Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Heartbleed OpenSSL Vulnerability (Indicative)
2017-08-09T11:40:43.600074544Z 124507 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Image Location Scanner
2017-08-09T11:40:43.600079539Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Insecure Component
2017-08-09T11:40:43.600406872Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: HTTP to HTTPS Insecure Transition in Form Post
2017-08-09T11:40:43.600809721Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: HTTPS to HTTP Insecure Transition in Form Post
2017-08-09T11:40:43.600842384Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Retrieved from Cache
2017-08-09T11:40:43.600869554Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Server Leaks Version Information via "Server" HTTP Response Header Field
2017-08-09T11:40:43.601250228Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Source Code Disclosure
2017-08-09T11:40:43.601280094Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Strict-Transport-Security Header Scanner
2017-08-09T11:40:43.601324245Z 124508 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Timestamp Disclosure
2017-08-09T11:40:43.601334633Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: User Controllable Charset
2017-08-09T11:40:43.601517828Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Cookie Poisoning
2017-08-09T11:40:43.601534809Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: User Controllable HTML Element Attribute (Potential XSS)
2017-08-09T11:40:43.601546296Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: User Controllable JavaScript Event (XSS)
2017-08-09T11:40:43.601824185Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Open Redirect
2017-08-09T11:40:43.601840167Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Username Hash Found
2017-08-09T11:40:43.601859546Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: X-Backend-Server Header Information Leak
2017-08-09T11:40:43.601870234Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: X-ChromeLogger-Data (XCOLD) Header Information Leak
2017-08-09T11:40:43.602057124Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: X-Debug-Token Information Leak
2017-08-09T11:40:43.602076603Z 124509 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)
2017-08-09T11:40:43.613154999Z 124520 [ZAP-daemon] INFO org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate  - Installing new addon pscanrulesBeta v16
2017-08-09T11:40:43.636885931Z 124544 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Charset Mismatch
2017-08-09T11:40:43.636915198Z 124544 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Loosely Scoped Cookie
2017-08-09T11:40:43.637017283Z 124544 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Absence of Anti-CSRF Tokens
2017-08-09T11:40:43.637025774Z 124544 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Information Disclosure - Debug Error Messages
2017-08-09T11:40:43.637047550Z 124544 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Information Disclosure - Sensitive Informations in URL
2017-08-09T11:40:43.637146039Z 124545 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Information Disclosure - Sensitive Information in HTTP Referrer Header
2017-08-09T11:40:43.637155029Z 124545 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Information Disclosure - Suspicious Comments
2017-08-09T11:40:43.637271599Z 124545 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Weak Authentication Method
2017-08-09T11:40:43.637279989Z 124545 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Insecure JSF ViewState
2017-08-09T11:40:43.637974712Z 124545 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: HTTP Parameter Override
2017-08-09T11:40:43.638122846Z 124545 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan  - loaded passive scan rule: Viewstate Scanner
2017-08-09T11:40:43.643264289Z 124550 [ZAP-daemon] INFO org.zaproxy.zap.DaemonBootstrap  - ZAP is now listening on 0.0.0.0:8090