owasp-zap-vsts-task
owasp-zap-vsts-task copied to clipboard
How can I authenticate into the application used this extension
Please Let me know How to do authenticated scans used this plugin.
Take a look at my repo for authentication scripts. With these steps you can make it work
@eL-Prova i did review your repo, i didn't quite to make it work out, do you have blogs or instruction aside from the readme file? thanks
@cocoytech @eL-Prova for me its does not work, do you have some readme file, it would be helpful
@eL-Prova i did review your repo, i didn't quite to make it work out, do you have blogs or instruction aside from the readme file? thanks
Hey @cocoytech, what have you tried? I need a little bit more information about your environment. I will upload my steps in my pipeline to my repo. Maybe that can make a little bit more clear how it works.
@amolcg for you the same questions, what have you tried?
@cocoytech Approch currently i am trying
- Create context with all details, i am testing with Form Based method e.g http://demo.testfire.net/login.jsp
- Export context
- Power shell, import context ( i have hosted zap on reverse proxy to access api)
- Power shell to set ForceUser unable
- Start Spider using powershell.
- VSTS task, set only Active scan ( currently i am testing , hoping for best) -- uncheck zap session checkbox
- Removed context at last from zap
@eL-Prova Thank you for your attention and Time @amolcg , thanks for the format now I have something in my mind how to define the environment and steps, I'm currently just using GUI for this troubleshooting, I did file the actual setup here from the issue of the actual repo itself