• Type: Bug
• Resolution: Not A Defect
• Priority: Minor
• Component/s: zaproxy-plugin
• Labels:

  • configuration
• Environment:

  Hide

  org.jenkins-ci.main:jenkins-war:1.609.1
  fr.novia:zaproxy:1.1.1
  org.zaproxy:zap-api:2.4
  
  Custom Tools Plugin 0.4.4
  
  Hudson Seleniumhq plugin 0.4
  
  OWASP Markup Formatter Plugin 1.1
  
  Iceweasel 31.7.0
  
  Selenium server 2.46.0
  
  ZAProxy 2.4.0
  
  4.0.5 boot2docker

  Show

  org.jenkins-ci.main:jenkins-war:1.609.1 fr.novia:zaproxy:1.1.1 org.zaproxy:zap-api:2.4 Custom Tools Plugin 0.4.4 Hudson Seleniumhq plugin 0.4 OWASP Markup Formatter Plugin 1.1 Iceweasel 31.7.0 Selenium server 2.46.0 ZAProxy 2.4.0 4.0.5 boot2docker

1. 

   SeleniumConfigLudovic.PNG

   17 kB

   2015-07-17 09:55

2. sel_test.html

   2 kB

   2015-07-10 12:40

3. set_suite.html

   0.5 kB

   2015-07-10 12:40

4. report_zap.html

   88 kB

   2015-07-10 09:37

5. 

   jenkins_2.png

   35 kB

   2015-07-10 08:39

6. 

   jenkins_1.png

   36 kB

   2015-07-10 08:39

7. report_zap_jenkins.html

   1.18 MB

   2015-07-10 08:36

8. testresult.html

   5 kB

   2015-07-10 08:35

9. rapport_desktop.html

   91 kB

   2015-07-10 07:56

10. stdout.txt

    33 kB

    2015-07-07 09:11

[JENKINS-29265] Active scan not working with selenium

Farid Boukerche created issue - 2015-07-07 09:20

Farid Boukerche made changes - 2015-07-10 08:36

Attachment		New: report_zap_jenkins.html [ 30144 ]
Attachment		New: testresult.html [ 30145 ]
Attachment		New: rapport_desktop.html [ 30146 ]
Description	Original: Hello Ludovic, I'm trying to set up ZAP under Jenkins using Selenium, but I cannot get the same results as ZAP GUI on my desktop. General information :  - My webapp for testing is DVWA  - Capture a user sequence using Selenium plugin for Firefox  - Launch a ZAP scan (Default Profile using HIGH and INSANE) via GUI (firefox is wired to the ZAP proxy) using the same sequence, export results  - Doing the same thing using Jenkins, start ZAP proxy, configure Firefox to go through ZAP proxy, launch selenium tests, launch scans using the Zap plugin. But it won't show me any High alerts :( (at least, it should show me an SQLI alert) (cf: jenkins build logs attached) Am I doing something wrong ? Cheers, Farid.	New: Hello Ludovic, I'm trying to set up ZAP under Jenkins using Selenium, but I cannot get the same results as ZAP GUI on my desktop. General information :  - My webapp for testing is DVWA  - Capture a user sequence using Selenium plugin for Firefox  - Launch a ZAP scan (Default Profile using HIGH and INSANE) via GUI (firefox is wired to the ZAP proxy) using the same sequence, export results  - Doing the same thing using Jenkins, start ZAP proxy, configure Firefox to go through ZAP proxy, launch selenium tests, launch scans using the Zap plugin. But it won't show me any High alerts :( (at least, it should show me an SQLI alert) (cf: jenkins build logs attached) Am I doing something wrong ? EDIT : reports CI and Desktop added Cheers, Farid.

Farid Boukerche made changes - 2015-07-10 08:40

Attachment		New: jenkins_1.png [ 30147 ]
Attachment		New: jenkins_2.png [ 30148 ]
Description	Original: Hello Ludovic, I'm trying to set up ZAP under Jenkins using Selenium, but I cannot get the same results as ZAP GUI on my desktop. General information :  - My webapp for testing is DVWA  - Capture a user sequence using Selenium plugin for Firefox  - Launch a ZAP scan (Default Profile using HIGH and INSANE) via GUI (firefox is wired to the ZAP proxy) using the same sequence, export results  - Doing the same thing using Jenkins, start ZAP proxy, configure Firefox to go through ZAP proxy, launch selenium tests, launch scans using the Zap plugin. But it won't show me any High alerts :( (at least, it should show me an SQLI alert) (cf: jenkins build logs attached) Am I doing something wrong ? EDIT : reports CI and Desktop added Cheers, Farid.	New: Hello Ludovic, I'm trying to set up ZAP under Jenkins using Selenium, but I cannot get the same results as ZAP GUI on my desktop. General information :  - My webapp for testing is DVWA  - Capture a user sequence using Selenium plugin for Firefox  - Launch a ZAP scan (Default Profile using HIGH and INSANE) via GUI (firefox is wired to the ZAP proxy) using the same sequence, export results  - Doing the same thing using Jenkins, start ZAP proxy, configure Firefox to go through ZAP proxy, launch selenium tests, launch scans using the Zap plugin. But it won't show me any High alerts :( (at least, it should show me an SQLI alert) (cf: jenkins build logs attached) Am I doing something wrong ? EDIT : reports CI and Desktop added + job configuration Cheers, Farid.

Farid Boukerche made changes - 2015-07-10 09:40

Attachment

New: report_zap.html [ 30150 ]

Farid Boukerche made changes - 2015-07-10 12:42

Attachment		New: sel_test.html [ 30156 ]
Attachment		New: set_suite.html [ 30157 ]

Ludovic Roucoux made changes - 2015-07-17 09:55

Attachment

New: SeleniumConfigLudovic.PNG [ 30189 ]

Ludovic Roucoux made changes - 2015-07-17 13:42

Resolution		New: Not A Defect [ 7 ]
Status	Original: Open [ 1 ]	New: Closed [ 6 ]

R. Tyler Croy made changes - 2016-07-26 00:01

Workflow

Original: JNJira [ 164134 ]

New: JNJira + In-Review [ 208962 ]