Skip to content

Commit

Permalink
Merge pull request #42 from gdgd009xcd/ARCADIUS241202
Browse files Browse the repository at this point in the history
Arcadius241202
  • Loading branch information
gdgd009xcd authored Dec 3, 2024
2 parents 774d426 + 3aa940a commit 34bb821
Show file tree
Hide file tree
Showing 452 changed files with 3,491 additions and 3,267 deletions.
4 changes: 2 additions & 2 deletions .github/workflows/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@ on:
- 'v*' # Push events to matching v*, i.e. v1.0, v20.15.10

env:
ZAP_ADDON_BUILD_DIR: 'addOns/automacrobuilder/build/zapAddOn'
ZAP_ADDON_BUILD_TASK: 'addOns:automacrobuilder:jarZapAddOn'
ZAP_ADDON_BUILD_DIR: 'addOns/requestRecorderForZAP/build/zapAddOn'
ZAP_ADDON_BUILD_TASK: 'addOns:requestRecorderForZAP:jarZapAddOn'

jobs:
build:
Expand Down
34 changes: 17 additions & 17 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
## AutoMacrobuilder for ZAPROXY.
## RequestRecorder for ZAP.


AutoMacro Builder is an extension of ZAPROXY. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information. This Extension records the http request sequence of the web application, tracks the anti-CSRF token and session cookies, and can tests it by ZAPROXY tools(ActiveScan).
RequestRecorder is an extension of Zed Attack Proxy(ZAP). You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information. This Extension records the http request sequence of the web application, tracks the anti-CSRF token and session cookies, and can tests it by ZAPROXY tools(ActiveScan).
To summarize the above, this addon can build multistep request sequence without scripting,
and can use them with tool such as scanners or manual request on ZAPROXY.
and can use them with tool such as scanners or manual request on ZAP.

![LANG](https://img.shields.io/github/languages/top/gdgd009xcd/AutoMacroBuilderForZAP)
![LICENSE](https://img.shields.io/github/license/gdgd009xcd/AutoMacroBuilderForZAP)
Expand All @@ -12,14 +12,14 @@ and can use them with tool such as scanners or manual request on ZAPROXY.

## Prerequisite

* ZAPROXY ver 2.13.0 or later
* ZAP ver 2.13.0 or later
* java ver 11 or later

## how to use

Click here below: <BR>
  <A href="https://github.com/gdgd009xcd/AutoMacroBuilderForZAP/wiki/1.0.-OverView">English manuals</A><BR>
  <A href="https://github.com/gdgd009xcd/AutoMacroBuilderForZAP/wiki/2.0.%E6%A6%82%E8%A6%81%EF%BC%88%E6%97%A5%E6%9C%AC%E8%AA%9E%EF%BC%89">Japanese manuals</A> <BR>
  <A href="https://github.com/gdgd009xcd/RequestRecorder/wiki/1.0.-OverView">English manuals</A><BR>
  <A href="https://github.com/gdgd009xcd/RequestRecorder/wiki/2.0.%E6%A6%82%E8%A6%81%EF%BC%88%E6%97%A5%E6%9C%AC%E8%AA%9E%EF%BC%89">Japanese manuals</A> <BR>



Expand All @@ -29,7 +29,7 @@ I tested member registration my sample page which has CSRF token. below is resul
Test Environment: <A href="https://github.com/gdgd009xcd/WEBSAMPSQLINJ">WEBSAMPSQLINJ</A> Docker image(docker-compose)
Scantarget: [Modify User] 3.2.moduser.php (See <A href="https://github.com/gdgd009xcd/WEBSAMPSQLINJ#sitemap">Sitemap</A>)
ZAPROXY Version: 2.10.0-SNAPSHOT
Addon: AutoMacroBuilderForZAP ver0.9.6, ActiveScan rule addons(See below).
Addon: RequestRecorder ver0.9.6, ActiveScan rule addons(See below).
ZAPROXY Mode: Standard mode

<table style="font-size: 70%;">
Expand All @@ -46,21 +46,21 @@ The add-on is built with [Gradle]: https://gradle.org/

To download & build this addon, simply run:

$ git clone https://github.com/gdgd009xcd/AutoMacroBuilderForZAP.git
$ cd AutoMacroBuilderForZAP/
$ ./gradlew addOns:automacrobuilder:jarZapAddOn
$ git clone https://github.com/gdgd009xcd/RequestRecorder.git
$ cd RequestRecorder/
$ ./gradlew addOns:requestRecorderForZAP:jarZapAddOn

The add-on will be placed in the directory `AutoMacroBuilderForZAP/addOns/automacrobuilder/build/zapAddOn/bin`
The add-on will be placed in the directory `RequestRecorder/addOns/requestRecorderForZAP/build/zapAddOn/bin`

$ cd addOns/automacrobuilder/build/zapAddOn/bin
$ ls
automacrobuilder-alpha-0.9.7.zap
$
$ cd addOns/requestRecorderForZAP/build/zapAddOn/bin
$ ls
requestRecorderForZAP-beta-1.2.1.zap
$

* Gradle builds may fail due to network connection timeouts for downloading dependencies. If you have such problems, please retry the gradlew command each time. or you can download addon file from [release page](https://github.com/gdgd009xcd/AutoMacroBuilderForZAP/releases)
* Gradle builds may fail due to network connection timeouts for downloading dependencies. If you have such problems, please retry the gradlew command each time. or you can download addon file from [release page](https://github.com/gdgd009xcd/RequestRecorder/releases)

## FAQ
### FAQ is [here](https://github.com/gdgd009xcd/AutoMacroBuilderForZAP/wiki/9.1.-FAQ)
### FAQ is [here](https://github.com/gdgd009xcd/RequestRecorder/wiki/9.1.-FAQ)

## Author
### [gdgd009xcd](https://gdgd009xcd.github.io/)
Expand Down
2 changes: 1 addition & 1 deletion _config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,6 @@ remote_theme: pages-themes/architect@v0.2.0
plugins:
- jekyll-remote-theme # add this line to the plugins list if you already have one
- jekyll-sitemap
title: AutoMacroBuilderForZap
title: RequestRecorder
show_downloads: true
description: You can build multi-step request sequences without scripting and can use them on ZAPROXY.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

Loading

0 comments on commit 34bb821

Please sign in to comment.