Skip to content

Instantly share code, notes, and snippets.

@thomashartm
Last active September 3, 2017 12:09
Show Gist options
  • Save thomashartm/95ddad6ff7f5534f54584ba5b27eb14c to your computer and use it in GitHub Desktop.
Save thomashartm/95ddad6ff7f5534f54584ba5b27eb14c to your computer and use it in GitHub Desktop.
Set up a local ZAP test environment
# First start zap locally.
# Starts Zap in daemon mode listening on port 9999 bound to all interfaces with API key disabled
./zap.sh -daemon -host 0.0.0.0 -port 9999 -addoninstallall -config api.disablekey=true -config api.incerrordetails=true -config api.addrs.addr.name=.* -config api.addrs.addr.regex=true
# Starts Zap UI listening on port 9999 bound to all interfaces with API key disabled
./zap.sh -host 0.0.0.0 -port 9999 -addoninstallall -config api.disablekey=true -config api.incerrordetails=true -config api.addrs.addr.name=.* -config api.addrs.addr.regex=true
# Starts Zap in daemon mode listening on port 9999 bound to all interfaces with API key disabled and an http sender script enabled
./zap.sh -daemon -host 0.0.0.0 -port 9999 -addoninstallall -config api.disablekey=true -config api.incerrordetails=true -config script.scripts.name="SenderExample" -config script.scripts.engine="Oracle Nashorn" -config script.scripts.type=httpsender -config script.scripts.enabled=true -config script.scripts.file="scripts/httpsender/sender-example.js" -config api.addrs.addr.name=.* -config api.addrs.addr.regex=true
# Now install python api
# install pip if not available
sudo easy_install pip
# install zap python api
sudo pip install python-owasp-zap-v2.4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment