Dialogs on ZAP

Active Scan dialog

Mon, 01 Jan 0001 00:00:00 +0000

Active Scan dialog

This dialog launches the active scanner.

Scope

The first tab allows you to select or change the starting point.
If you have more that one scan policies then you will be able to select the one to use.
If the starting point is in one or more Contexts then you will be able to choose one of them.
If that context has any Users defined then you will be able to select one of them.
If you select one of the users then the active scan will be performed as that user, with ZAP (re)authenticating as that user whenever necessary.

Scan Policy Dialog

Mon, 01 Jan 0001 00:00:00 +0000

Scan Policy Dialog

This allows you to enable and disable the rules that are run when performing an active scan.

The first screen allows you to define the default levels as well as the levels for all of the rules in a specific category.

The category screens allow you to define the levels for every individual rule.

Add Alert dialog

Mon, 01 Jan 0001 00:00:00 +0000

Add Alert dialog

This dialog allows you to manually add or change an Alert associated with a specific request.

Fields

The dialog has the following fields:

Add/Edit Breakpoint dialog

Mon, 01 Jan 0001 00:00:00 +0000

Add/Edit Breakpoint dialog

This dialogue allows you to add and edit HTTP breakpoints.

A breakpoint is defined by the following fields:

Location - where the String is checked in the HTTP message: URL, Request Header, Request Body, Response Header, or Response Body.
Match - how the String is interpreted, Regex or Contains, for regular expression or exact match, respectively, in the Location. The regular expression does not need to match the whole content of the Location.
String - the string that triggers the breakpoint.
Inverse - if the result of the Match should be the inverse.
Ignore case - if the case of the String should be ignored.

If you proxy a HTTP message that matches a breakpoint then ZAP will intercept it and allow you to change either the request or the response.

Add Note dialog

Mon, 01 Jan 0001 00:00:00 +0000

Add Note dialog

This allows you to add a note to a request.

Accessed via


	History tab	‘Note…’ right click menu item


	UI Overview	for an overview of the user interface
	Dialogs	for details of the dialogs or popups

Encode / Decode / Hash dialog

Mon, 01 Jan 0001 00:00:00 +0000

The Encode / Decode / Hash dialog is now provided by the Encode / Decode / Hash add-on.

Find dialog

Mon, 01 Jan 0001 00:00:00 +0000

Find dialog

This allows you to find the text you enter in the selected tab.

Accessed via


	Top level Edit menu	‘Find…’ menu item
	Break tab	‘Find…’ right click menu item
	Request tab	‘Find…’ right click menu item
	Response tab	‘Find…’ right click menu item
	Spider tab	‘Find…’ right click menu item


	UI Overview	for an overview of the user interface
	Dialogs	for details of the dialogs or popups

History Filter dialog

Mon, 01 Jan 0001 00:00:00 +0000

History Filter dialog

This dialog allows you to restrict which requests are displayed in the History tab.

Fields

The dialog has the following fields:

Manage Add-ons

Mon, 01 Jan 0001 00:00:00 +0000

Manage Add-ons

This allows you to manage the add-ons that you have installed and download new ones from the Add-on Marketplace.

Two tabs are available:

Installed

This tab shows you the version of ZAP you are running, all of the installed add-ons and allows you to check for any updates to ZAP or any of the add-ons.
Hovering over an add-on will show you more information about it.
You can also uninstall add-ons from this tab - typically add-ons are dynamically removed from the ZAP UI as soon as you uninstall them.

Manual Request Editor dialog

Mon, 01 Jan 0001 00:00:00 +0000

This page was moved.

Manage History Tags dialog

Mon, 01 Jan 0001 00:00:00 +0000

Manage History Tags dialog

This allows you to manage the tags associated with a request.

Accessed via


	History tab	‘Manage History Tags…’ right click menu item


	UI Overview	for an overview of the user interface
	Dialogs	for details of the dialogs or popups

Persist Session dialog

Mon, 01 Jan 0001 00:00:00 +0000

Persist Session dialog

This dialog is shown by default whenever you start a new session, which always happens when ZAP starts.
It allows you to specify how you would like this session persisted, you can also set the default choice so that you are not prompted again.

Persisting a session means it will be stored in a local database that you can access at a later date.

Scan Policy Manager dialog

Mon, 01 Jan 0001 00:00:00 +0000

Scan Policy Manager dialog

This allows you to manage the scan policies that define the rules that are run when performing an active scan.

You can have as many scan policies as you like, and choose which one of them is run when you perform an active scan.

Add

The Add button launches the Scan Policy dialog with all of the settings defaulted.

Scan Progress Dialog

Mon, 01 Jan 0001 00:00:00 +0000

Scan Progress Dialog

This shows you the status of an active scan.

Progress tab

This shows which scan rules are running for each host being scanned, as well as other details such as the elapsed time they have been running and the number of requests made per rule.
It also allows you to skip the rule which is currently being run by clicking on the ‘Skip current running active scan’ button in the Status column.

Spider dialog

Mon, 01 Jan 0001 00:00:00 +0000

This page was moved.

Dialogs on ZAP

Active Scan dialog

Active Scan dialog

Scope

Scan Policy Dialog

Scan Policy Dialog

Add Alert dialog

Add Alert dialog

Fields

Add/Edit Breakpoint dialog

Add/Edit Breakpoint dialog

Add Note dialog

Add Note dialog

Accessed via

See also

Encode / Decode / Hash dialog

Find dialog

Find dialog

Accessed via

See also

History Filter dialog

History Filter dialog

Fields

Manage Add-ons

Manage Add-ons

Installed

Manual Request Editor dialog

Manage History Tags dialog

Manage History Tags dialog

Accessed via

See also

Persist Session dialog

Persist Session dialog

Scan Policy Manager dialog

Scan Policy Manager dialog

Add

Scan Progress Dialog

Scan Progress Dialog

Progress tab

Spider dialog