owasp-zap-vsts-task icon indicating copy to clipboard operation
owasp-zap-vsts-task copied to clipboard

How can I authenticate into the application used this extension

Open Joshwa15 opened this issue 5 years ago • 6 comments

Please Let me know How to do authenticated scans used this plugin.

Joshwa15 avatar Mar 28 '20 16:03 Joshwa15

Take a look at my repo for authentication scripts. With these steps you can make it work

eL-Prova avatar Sep 01 '20 15:09 eL-Prova

@eL-Prova i did review your repo, i didn't quite to make it work out, do you have blogs or instruction aside from the readme file? thanks

CurlyBytes avatar Sep 19 '20 15:09 CurlyBytes

@cocoytech @eL-Prova for me its does not work, do you have some readme file, it would be helpful

amolcg avatar Sep 22 '20 06:09 amolcg

@eL-Prova i did review your repo, i didn't quite to make it work out, do you have blogs or instruction aside from the readme file? thanks

Hey @cocoytech, what have you tried? I need a little bit more information about your environment. I will upload my steps in my pipeline to my repo. Maybe that can make a little bit more clear how it works.

@amolcg for you the same questions, what have you tried?

eL-Prova avatar Sep 22 '20 08:09 eL-Prova

@cocoytech Approch currently i am trying

  1. Create context with all details, i am testing with Form Based method e.g http://demo.testfire.net/login.jsp
  2. Export context
  3. Power shell, import context ( i have hosted zap on reverse proxy to access api)
  4. Power shell to set ForceUser unable
  5. Start Spider using powershell.
  6. VSTS task, set only Active scan ( currently i am testing , hoping for best) -- uncheck zap session checkbox
  7. Removed context at last from zap

amolcg avatar Sep 22 '20 08:09 amolcg

@eL-Prova Thank you for your attention and Time @amolcg , thanks for the format now I have something in my mind how to define the environment and steps, I'm currently just using GUI for this troubleshooting, I did file the actual setup here from the issue of the actual repo itself

CurlyBytes avatar Sep 22 '20 14:09 CurlyBytes