diff --git a/addons/index.html b/addons/index.html index ca7fe57d38..457b50ab4d 100644 --- a/addons/index.html +++ b/addons/index.html @@ -196,7 +196,7 @@

ZAP Marketplace

Repository - Download + Download @@ -209,7 +209,7 @@

ZAP Marketplace

ascanrules - 61 + 62 release @@ -218,7 +218,7 @@

ZAP Marketplace

ZAP Dev Team - 2024-01-24 + 2024-01-26 @@ -231,7 +231,7 @@

ZAP Marketplace

Repository - Download + Download @@ -244,7 +244,7 @@

ZAP Marketplace

ascanrulesAlpha - 45 + 46 alpha @@ -253,7 +253,7 @@

ZAP Marketplace

ZAP Dev Team - 2024-01-16 + 2024-01-26 @@ -266,7 +266,7 @@

ZAP Marketplace

Repository - Download + Download @@ -279,7 +279,7 @@

ZAP Marketplace

ascanrulesBeta - 49 + 50 beta @@ -288,7 +288,7 @@

ZAP Marketplace

ZAP Dev Team - 2024-01-16 + 2024-01-26 @@ -874,7 +874,7 @@

ZAP Marketplace

Repository - Download + Download @@ -887,7 +887,7 @@

ZAP Marketplace

commonlib - 1.21.0 + 1.22.0 release @@ -896,7 +896,7 @@

ZAP Marketplace

ZAP Dev Team - 2024-01-16 + 2024-01-26 @@ -2595,7 +2595,7 @@

ZAP Marketplace

Repository - Download + Download @@ -2608,7 +2608,7 @@

ZAP Marketplace

openapi - 38 + 39 beta @@ -2617,7 +2617,7 @@

ZAP Marketplace

ZAP Dev Team plus Joanna Bona, Nathalie Bouchahine, Artur Grzesica, Mohammad Kamar, Markus Kiss, Michal Materniak, Marcin Spiewak, and SDA SE Open Industry Solutions - 2023-10-23 + 2024-01-26 @@ -2663,7 +2663,7 @@

ZAP Marketplace

Repository - Download + Download @@ -2676,7 +2676,7 @@

ZAP Marketplace

pscanrules - 54 + 55 release @@ -2685,7 +2685,7 @@

ZAP Marketplace

ZAP Dev Team - 2024-01-16 + 2024-01-26 @@ -3349,7 +3349,7 @@

ZAP Marketplace

Repository - Download + Download @@ -3362,7 +3362,7 @@

ZAP Marketplace

selenium - 15.17.0 + 15.18.0 release @@ -3371,7 +3371,7 @@

ZAP Marketplace

ZAP Dev Team - 2024-01-18 + 2024-01-26 @@ -3487,7 +3487,7 @@

ZAP Marketplace

Repository - Download + Download @@ -3500,7 +3500,7 @@

ZAP Marketplace

spider - 0.8.0 + 0.9.0 release @@ -3509,7 +3509,7 @@

ZAP Marketplace

ZAP Dev Team - 2023-12-19 + 2024-01-26 diff --git a/docs/desktop/addons/active-scan-rules-alpha/index.html b/docs/desktop/addons/active-scan-rules-alpha/index.html index be83be8e81..e450851c73 100644 --- a/docs/desktop/addons/active-scan-rules-alpha/index.html +++ b/docs/desktop/addons/active-scan-rules-alpha/index.html @@ -1624,10 +1624,15 @@

LDAP Injection Alert ID: 40015.

NoSQL Injection - MongoDB

-

This rule attempts to identify MongoDB specific NoSQL Injection vulnerabilities. It attempts various types of attacks including: boolean based, error based, time based, and authentication bypass. It will also attempt JSON parameter specific payloads if the scan is configured to include JSON parameter variants.

+

This rule attempts to identify MongoDB specific NoSQL Injection vulnerabilities. It attempts various types of attacks including: boolean based, error based, time based, and authentication bypass. It does not include time based attacks. It will also attempt JSON parameter specific payloads if the scan is configured to include JSON parameter variants.

Latest code: MongoDbInjectionScanRule.java

Alert ID: 40033.

+

NoSQL Injection - MongoDB (Time Based)

+

This rule attempts to identify MongoDB specific NoSQL Injection vulnerabilities using only time based attacks.

+

Latest code: MongoDbInjectionTimingScanRule.java

+

Alert ID: 90039.

+

Web Cache Deception

This rule attempts to identify Web Cache Deception vulnerabilities. It checks whether a static path appended to original URIs can be used to leak sensitive user information or not.