Search code examples
automationautomated-testsowasp

OWASP zap run in command promt


Is there any way to run OWASP zap in CMD mode?

  1. I have selenium scripts it opens the browser and runs.
  2. When running it auto record all the requests to Zap (already completed).
  3. Now I need to run the OWASP zap zed using Jenkins or using selenium.

Is there any way to do this?

Change the standard mode to attack mode and execute the attack, then email the HTML report.


Solution

  • Yes there is! You can use the zap CLI for that. The CLI let you start an active scan and get the report. There is also the base line scan that is bundled in the docker image, and you can always use the API directly. Each one of these approaches can let you achieve what you want - besides sending an email. This can be done (I hope) with Jenkins.