diff --git a/docs/automate/automation-framework/index.html b/docs/automate/automation-framework/index.html index d695ba7f43..3f81ee2f2d 100644 --- a/docs/automate/automation-framework/index.html +++ b/docs/automate/automation-framework/index.html @@ -147,6 +147,8 @@

Automation Framework

  • ZAP Chat 07 Automation Framework Part 1 An introduction to the framework
  • ZAP Chat 08 Automation Framework Part 2 Details on the environment, passiveScan-config job, and alertFilter job
  • ZAP Chat 09 Automation Framework Part 3 Details on the requester job and replacer job
    • +
  • ZAP Chat 10 Automation Framework Part 4 Details on the spider job and spiderAjax job
    • +
  • ZAP Chat 11 Automation Framework Part 5 Details on the openapi, soap, and graphql jobs

    • Framework Overview

    diff --git a/index.xml b/index.xml index be8fc718a7..e3ebf8be36 100644 --- a/index.xml +++ b/index.xml @@ -5240,7 +5240,7 @@ Scope This can either be ‘Global’ for a Global Alert Filter /videos-list/ This lists all of the Official ZAP Videos, in reverse chronological order - ZAP changes so much that older videos may well be out of date. -Series Title Length Tags Date ZAP Chat ZAP Chat 09 Automation Framework Part 3 22:20 automation 2023/11/29 ZAP Chat ZAP Chat 08 Automation Framework Part 2 24:01 automation 2023/11/23 ZAP Chat ZAP Chat 07 Automation Framework Part 1 27:05 automation 2023/11/15 ZAP Chat ZAP Chat 06 Automation Introduction 36:59 automation 2023/11/09 ZAP Chat ZAP Chat 05 Modern Apps Part 1 19:14 browser modern 2023/11/03 ZAP Chat ZAP Chat 04 ZAPit 20:50 automation reconnaissance 2023/10/18 ZAP Chat ZAP Chat 03 Break Points 12:46 breakpoints manual 2023/09/15 ZAP Chat ZAP Chat 02 Authentication Tester 14:48 authentication automation 2023/09/15 ZAP Chat ZAP Chat 01 Introduction 1:03 intro 2023/09/15 A Deep Dive into OWASP ZAP (feat. +Series Title Length Tags Date ZAP Chat ZAP Chat 11 Automation Framework Part 5 - APIs 15:42 api automation 2023/12/14 ZAP Chat ZAP Chat 10 Automation Framework Part 4 - Spidering 24:25 automation spider 2023/12/14 ZAP Chat ZAP Chat 09 Automation Framework Part 3 - Requests 22:20 automation 2023/11/29 ZAP Chat ZAP Chat 08 Automation Framework Part 2 - Environment 24:01 automation 2023/11/23 ZAP Chat ZAP Chat 07 Automation Framework Part 1 - Introduction 27:05 automation introduction 2023/11/15 ZAP Chat ZAP Chat 06 Automation Introduction 36:59 automation introduction 2023/11/09 ZAP Chat ZAP Chat 05 Modern Apps Part 1 19:14 browser modern 2023/11/03 ZAP Chat ZAP Chat 04 ZAPit 20:50 automation reconnaissance 2023/10/18 ZAP Chat ZAP Chat 03 Break Points 12:46 breakpoints manual 2023/09/15 ZAP Chat ZAP Chat 02 Authentication Tester 14:48 authentication automation 2023/09/15 ZAP Chat ZAP Chat 01 Introduction 1:03 intro 2023/09/15 A Deep Dive into OWASP ZAP (feat. diff --git a/search/index.json b/search/index.json index 9eea80c62c..dc531bba02 100644 --- a/search/index.json +++ b/search/index.json @@ -3653,7 +3653,7 @@ "keywords": ["automation","framework","guide"], "tags": ["guide"], "summary": "The new Automation Framework will in time replace the Command Line and Packaged Scan options. It allows you to control ZAP via one YAML file and provides more flexibility while not being tied to any specific container technology.\nThe Automation Framework is included with the latest version of ZAP as well as the stable docker image.", - "content": "new automation framework will time replace command line packaged scan options allows you control zap via one yaml file provides more flexibility while not being tied any specific container technology included latest version stable docker image plugable many existing addons have been enhanced support covered following chat videos: 07 part introduction 08 details environment passivescanconfig job alertfilter 09 requester replacer overview how get started see main help page supports: which defines all applications plan can act authentication mechanisms supported by tests used validate outcome jobs full set currently other are: activescan runs active scanner alert filter configuration provided filters addon delay waits specified until condition met graphql schema import harhttp archive modsecurity2 logs messages containing urls locally openapi definition passive passivescanwait finish processing current queue strings requests responses report generation requestor sends targets script adds removes scripts soap wsdl spider traditional spiderajax ajax future changes planned tracker issue updating has found cause problems when defined depreciated longer does anything from 212 use standard af autorun option: addoninstall addonid install addonuninstall uninstall addonupdate update times need: zapsh example1 example2 example3 cmd zapyaml exit value run then with: 0: ran without reported 1: failed error 2: there were warnings even failonwarning parameter false need case linux macos like: bash pathtoyourafplanyaml ne " + "content": "new automation framework will time replace command line packaged scan options allows you control zap via one yaml file provides more flexibility while not being tied any specific container technology included latest version stable docker image plugable many existing addons have been enhanced support covered following chat videos: 07 part introduction 08 details environment passivescanconfig job alertfilter 09 requester replacer 10 spider spiderajax 11 openapi soap graphql jobs overview how get started see main help page supports: which defines all applications plan can act authentication mechanisms supported by tests used validate outcome full set currently other are: activescan runs active scanner alert filter configuration provided filters addon delay waits specified until condition met schema import harhttp archive modsecurity2 logs messages containing urls locally definition passive passivescanwait finish processing current queue strings requests responses report generation requestor sends targets script adds removes scripts wsdl traditional ajax future changes planned tracker issue updating has found cause problems when defined depreciated longer does anything from 212 use standard af autorun option: addoninstall addonid install addonuninstall uninstall addonupdate update times need: zapsh example1 example2 example3 cmd zapyaml exit value run then with: 0: ran without reported 1: failed error 2: there were warnings even failonwarning parameter false need case linux macos like: bash pathtoyourafplanyaml ne " }, { "url": "/blog/2021-03-04-zapcon-is-nearly-here/", @@ -4108,8 +4108,8 @@ "title": "All ZAP Videos", "keywords": ["","all","videos","zap"], "tags": null, - "summary": "This lists all of the Official ZAP Videos, in reverse chronological order - ZAP changes so much that older videos may well be out of date.\nSeries Title Length Tags Date ZAP Chat ZAP Chat 09 Automation Framework Part 3 22:20 automation 2023/11/29 ZAP Chat ZAP Chat 08 Automation Framework Part 2 24:01 automation 2023/11/23 ZAP Chat ZAP Chat 07 Automation Framework Part 1 27:05 automation 2023/11/15 ZAP Chat ZAP Chat 06 Automation Introduction 36:59 automation 2023/11/09 ZAP Chat ZAP Chat 05 Modern Apps Part 1 19:14 browser modern 2023/11/03 ZAP Chat ZAP Chat 04 ZAPit 20:50 automation reconnaissance 2023/10/18 ZAP Chat ZAP Chat 03 Break Points 12:46 breakpoints manual 2023/09/15 ZAP Chat ZAP Chat 02 Authentication Tester 14:48 authentication automation 2023/09/15 ZAP Chat ZAP Chat 01 Introduction 1:03 intro 2023/09/15 A Deep Dive into OWASP ZAP (feat.", - "content": "lists all official zap videos reverse chronological order changes much that older may out date series title length tags chat 09 automation framework part 22:20 20231129 08 24:01 20231123 07 27:05 20231115 06 introduction 36:59 20231109 05 modern apps 19:14 browser 20231103 04 zapit 20:50 reconnaissance 20231018 03 break points 12:46 breakpoints manual 20230915 02 authentication tester 14:48 01 1:03 intro deep dive into owasp feat simon bennetts big fix 2023 by snyk 14:38 20230329 zapcon 2022 api security testing workshop 2:24:35 fuzzing openapi soap 20220309 how contribute 1:31:03 development automated github actions 1:31:57 githubaction everybody 44:05 20220308 top ten 2021 39:07 owasptop10 outofband application 42:52 oast more power 34zap34 demystifying addons 40:29 project updates 38:07 approaches panel 40:31 final frontier automating dynamic 43:14 driveby pentesting scripts 38:19 integration 37:19 demodays: visual 48:31 demodays hud 20220120 outstanding 22:50 award waspy 20211117 using across enterprise 38:51 appsecpodcast 20211110 2110 17:53 docker release reporting retesting statistics 20211109 first look: 49:50 afterhours 20210804 evolution appsec: perspectives from decade building 40:00 rsa 20210720 websockets 18:06 20210715 33:09 20210610 zest scripting 29:22 20210513 29:19 20210506 33:49 20210415 59:08 conference 20210412 setting up dev environment 32:02 20210325 report generation 23:52 20210318 whole hours 4:31:39 20210309 democratizing test dsls 47:47 36:10 mobile 37:37 pakistani fintech 34:42 enhancing feedback based 40:40 starting program shoestring 28:23 ask me anything 1:03:55 ama authenticated packaged scans 28:33 forcedusermode packagedscan 20210225 27:50 cmdline daemon scanhooks 20210218 cicd 1:29:05 20210216 configuration 26:37 config contexts scanpolicy 20210213 active scanning 31:26 activescan attackmode inputvectors 20210122 passive 27:35 passivescan 20210111 2100 27:44 custompages formhandler graphql 20201218 28:35 20201210 sites tree 30:26 datadrivennode sitetree structuralparameter 20201124 exploring other ways 20:23 explore forcedbrowse logfileimport swagger urlimport ajax spider 21:09 ajaxspider 34:46 desktop interface 31:54 21:42 help 36:45 20200924 web developers 1:17:06 20200716 addo 8:02 20200417 command line 14:03 52:52 auth 2:31 simple bodgeit juiceshop 23:30 1:57 sso juice shop 35:35 scan 11:37 20200403 11:53 proxy httpsender 10:12 20200323 targeted 9:59 9:32 form 12:59 basic digest 9:57 290 10:43 20200204 marketplace 9:47 website resource update 10:22 9:45 10:26 20191212 8:33 your 10:35 10:39 20191126 10:06 downloads 7:43 download welcome introducing 25:57 20190415 tutorials launch 6:20 browserlaunch 20170822 58:00 20161120 ci pipeline 30:15 baselinescan 20161115 57:19 20160729 16:07 20160304 advanced features 46:56 20150609 240 10:20 20150414 ui spidering 50:13 20150402 a1: injection 6:36 20141020 websites 8:22 20140820 53:25 20140703 session users management 18:11 20131221 innovations 51:18 20131121 practical 51:48 20130211 200 overview 11:30 20130208 tutorial 7:23 20121012 initial setup guide 5:48 20120801 qa 15:52 20120613 " + "summary": "This lists all of the Official ZAP Videos, in reverse chronological order - ZAP changes so much that older videos may well be out of date.\nSeries Title Length Tags Date ZAP Chat ZAP Chat 11 Automation Framework Part 5 - APIs 15:42 api automation 2023/12/14 ZAP Chat ZAP Chat 10 Automation Framework Part 4 - Spidering 24:25 automation spider 2023/12/14 ZAP Chat ZAP Chat 09 Automation Framework Part 3 - Requests 22:20 automation 2023/11/29 ZAP Chat ZAP Chat 08 Automation Framework Part 2 - Environment 24:01 automation 2023/11/23 ZAP Chat ZAP Chat 07 Automation Framework Part 1 - Introduction 27:05 automation introduction 2023/11/15 ZAP Chat ZAP Chat 06 Automation Introduction 36:59 automation introduction 2023/11/09 ZAP Chat ZAP Chat 05 Modern Apps Part 1 19:14 browser modern 2023/11/03 ZAP Chat ZAP Chat 04 ZAPit 20:50 automation reconnaissance 2023/10/18 ZAP Chat ZAP Chat 03 Break Points 12:46 breakpoints manual 2023/09/15 ZAP Chat ZAP Chat 02 Authentication Tester 14:48 authentication automation 2023/09/15 ZAP Chat ZAP Chat 01 Introduction 1:03 intro 2023/09/15 A Deep Dive into OWASP ZAP (feat.", + "content": "lists all official zap videos reverse chronological order changes much that older may out date series title length tags chat 11 automation framework part apis 15:42 api 20231214 10 spidering 24:25 spider 09 requests 22:20 20231129 08 environment 24:01 20231123 07 introduction 27:05 20231115 06 36:59 20231109 05 modern apps 19:14 browser 20231103 04 zapit 20:50 reconnaissance 20231018 03 break points 12:46 breakpoints manual 20230915 02 authentication tester 14:48 01 1:03 intro deep dive into owasp feat simon bennetts big fix 2023 by snyk 14:38 20230329 zapcon 2022 security testing workshop 2:24:35 fuzzing openapi soap 20220309 how contribute 1:31:03 development automated github actions 1:31:57 githubaction everybody 44:05 20220308 top ten 2021 39:07 owasptop10 outofband application 42:52 oast more power 34zap34 demystifying addons 40:29 project updates 38:07 approaches panel 40:31 final frontier automating dynamic 43:14 driveby pentesting scripts 38:19 integration 37:19 demodays: visual 48:31 demodays hud 20220120 outstanding 22:50 award waspy 20211117 using across enterprise 38:51 appsecpodcast 20211110 2110 17:53 docker release reporting retesting statistics 20211109 first look: 49:50 afterhours 20210804 evolution appsec: perspectives from decade building 40:00 rsa 20210720 websockets 18:06 20210715 33:09 20210610 zest scripting 29:22 20210513 29:19 20210506 33:49 20210415 59:08 conference 20210412 setting up dev 32:02 20210325 report generation 23:52 20210318 whole hours 4:31:39 20210309 democratizing test dsls 47:47 36:10 mobile 37:37 pakistani fintech 34:42 enhancing feedback based 40:40 starting program shoestring 28:23 ask me anything 1:03:55 ama authenticated packaged scans 28:33 forcedusermode packagedscan 20210225 27:50 cmdline daemon scanhooks 20210218 cicd 1:29:05 20210216 configuration 26:37 config contexts scanpolicy 20210213 active scanning 31:26 activescan attackmode inputvectors 20210122 passive 27:35 passivescan 20210111 2100 27:44 custompages formhandler graphql 20201218 28:35 20201210 sites tree 30:26 datadrivennode sitetree structuralparameter 20201124 exploring other ways 20:23 explore forcedbrowse logfileimport swagger urlimport ajax 21:09 ajaxspider 34:46 desktop interface 31:54 21:42 help 36:45 20200924 web developers 1:17:06 20200716 addo 8:02 20200417 command line 14:03 52:52 auth 2:31 simple bodgeit juiceshop 23:30 1:57 sso juice shop 35:35 scan 11:37 20200403 11:53 proxy httpsender 10:12 20200323 targeted 9:59 9:32 form 12:59 basic digest 9:57 290 10:43 20200204 marketplace 9:47 website resource update 10:22 9:45 10:26 20191212 8:33 your 10:35 10:39 20191126 10:06 downloads 7:43 download welcome introducing 25:57 20190415 tutorials launch 6:20 browserlaunch 20170822 58:00 20161120 ci pipeline 30:15 baselinescan 20161115 57:19 20160729 16:07 20160304 advanced features 46:56 20150609 240 10:20 20150414 ui 50:13 20150402 a1: injection 6:36 20141020 websites 8:22 20140820 53:25 20140703 session users management 18:11 20131221 innovations 51:18 20131121 practical 51:48 20130211 200 overview 11:30 20130208 tutorial 7:23 20121012 initial setup guide 5:48 20120801 qa 15:52 20120613 " }, { "url": "/docs/alerts/10020/", diff --git a/tags/guide/index.html b/tags/guide/index.html index fc3fa89e6f..f09b163c97 100644 --- a/tags/guide/index.html +++ b/tags/guide/index.html @@ -231,7 +231,7 @@

    Posted Tuesday March 9, 2021 - 542 Words + 572 Words
    The new Automation Framework will in time replace the Command Line and Packaged Scan options. It allows you to control ZAP via one YAML file and provides more flexibility while not being tied to any specific container technology. The Automation Framework is included with the latest version of ZAP as well as the stable docker image.
    diff --git a/videos-list/index.html b/videos-list/index.html index 7c5b958843..9b71237736 100644 --- a/videos-list/index.html +++ b/videos-list/index.html @@ -150,6 +150,50 @@

    All ZAP Videos

    + + + + ZAP Chat + + + + + ZAP Chat 11 Automation Framework Part 5 - APIs + + + + 15:42 + + + api automation + + + 2023/12/14 + + + + + + + ZAP Chat + + + + + ZAP Chat 10 Automation Framework Part 4 - Spidering + + + + 24:25 + + + automation spider + + + 2023/12/14 + + + @@ -158,7 +202,7 @@

    All ZAP Videos

    - ZAP Chat 09 Automation Framework Part 3 + ZAP Chat 09 Automation Framework Part 3 - Requests @@ -180,7 +224,7 @@

    All ZAP Videos

    - ZAP Chat 08 Automation Framework Part 2 + ZAP Chat 08 Automation Framework Part 2 - Environment @@ -202,14 +246,14 @@

    All ZAP Videos

    - ZAP Chat 07 Automation Framework Part 1 + ZAP Chat 07 Automation Framework Part 1 - Introduction 27:05 - automation + automation introduction 2023/11/15 @@ -231,7 +275,7 @@

    All ZAP Videos

    36:59 - automation + automation introduction 2023/11/09 diff --git a/zap-chat/index.html b/zap-chat/index.html index ea46ab05cd..7dd0775415 100644 --- a/zap-chat/index.html +++ b/zap-chat/index.html @@ -226,6 +226,24 @@

    ZAP Chat Videos

    +
    + + +
    + +
    + +
    + +
    + + +
    + +
    + +
    +