bdd-security

bdd-security copied to clipboard

connection exception

1

Hi can anybody help me with the below error. when i run through gradlew i am facing the below errors. 1. net.continuumsecurity.proxy.ProxyException Caused by: org.zaproxy.clientapi.core.ClientApiException Caused by: java.net.ConnectException 2. at...

ionicappworld

Connection refused

5

Any idea why am I seeing this error. net.continuumsecurity.proxy.ProxyException: org.zaproxy.clientapi.core.ClientApiException: java.net.ConnectException: Connection refused at net.continuumsecurity.proxy.ZAProxyScanner.validateMinimumRequiredZapVersion(ZAProxyScanner.java:112) at net.continuumsecurity.proxy.ZAProxyScanner.(ZAProxyScanner.java:54) at net.continuumsecurity.steps.AppScanningSteps.getScanner(AppScanningSteps.java:81) at net.continuumsecurity.steps.AppScanningSteps.disableAllScanners(AppScanningSteps.java:76) at ✽.And a scanner with all policies disabled(app_scan.feature:7) Caused...

lfatty

I have been trying to test a server that supports 2 way SSl with BDD-Security but it keeps throwing exceptions on each run. Is there a way to specify a...

ucugo

OWASP Application Security Validation Mapped to BDD-Security Security Requirements

3

I was thinking about way we could map OWASP Application Security Verification Standards to BDD-Security security requirements in each story. https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project

lfatty

net.continuumsecurity.proxy.ProxyException: org.zaproxy.clientapi.core.ClientApiException: N''existe pas (does_not_exist) : Default Context

3

Hello, i changed the baseUrl to access to my application http://localhost://Forum/ and then tried to run basic ZAP scanning: with the command below ./runstory.sh app_scan but an error is shown...

wassilaahamila

Use groovy script to define the WebDriver steps

1

This relates to the **cukesecure** branch, not the **master** branch of BDD-Security. Currently, the framework reads the config.xml file and loads the Java class define in the tag: e.g.: `net.continuumsecurity.examples.ropeytasks.RopeyTasksApplication`...

iriusrisk

iriusrisk

Dockerize bdd-security

2

I am thinking about way we could dockerize bed-security framework.

lfatty

Without the slash at the end ZAP doesn't recognise the URL as being part of the http history. Investigate best way to fix.

iriusrisk

Zaproxy Error: Data File size limit is reached

1

This is the error that keep showing during scan: [ZAP-ActiveScanner-1] FATAL hsqldb.db.HSQLDB379AF3DEBD.ENGINE - data file reached maximum size /var/lib/jenkins/.ZAP/session/untitled1.data [java] 106425634 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascan.ActiveScan - java.sql.SQLException: Data File size limit...

lfatty