question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Allow to upload files through the ZAP API

See original GitHub issue

Is your feature request related to a problem? Please describe.

I wish to use ZAP as a daemon in a container as part of a CI pipeline.

However, to do so, I either need to roll a new ZAP image for every type of target I wish to examine or I need to use ZAP as the base image itself.

With GitLab services, you cannot modify the running image on load, so you end up having to run ZAP as the “runner” which is not ideal.

Describe the solution you’d like

I would like any API endpoint that allows for loading from a file on the local filesystem to either:

  1. Have an associated upload endpoint that will put the file into the correct location
  2. Allow me to upload the entire file contents as part of a POST
    • I’m not 100% sure this will work for everything but it will certainly work for anything plain-text

Describe alternatives you’ve considered

I haven’t found any good way around this issue

Screenshots

No response

Additional context

No response

Would you like to help fix this issue?

  • Yes

Issue Analytics

  • State:open
  • Created 10 months ago
  • Comments:14 (14 by maintainers)

github_iconTop GitHub Comments

1reaction
trevor-vaughancommented, Nov 17, 2022

Note, I didn’t say that ZAP doesn’t have storage. I said that I don’t have access to the storage.

0reactions
kingthorincommented, Nov 19, 2022

Note, I didn’t say that ZAP doesn’t have storage. I said that I don’t have access to the storage.

Told you it must be subtle. (Yes you kinda covered this earlier but this made it clear.)

Read more comments on GitHub >

github_iconTop Results From Across the Web

ZAP FileUpload Add-on
The FileUpload add-on's scan rule attempts to upload various types of files with payloads and then tries to retrieve them to identify ...
Read more >
OWASP ZAP FileUpload add-on - YouTube
OWASP ZAP FileUpload add-on is used to find vulnerabilities in File Upload functionality. This video tutorial explains the FileUpload addon, ...
Read more >
Send files in Zaps - Zapier
To send a file in a Zap, you need to use a file object or certain types of URL links.File objects are the...
Read more >
How to upload a file with zap - Google Groups
File uploads are typically performed using an HTTP(S) POST using multipart forms. Try uploading a file while proxying through ZAP - do you...
Read more >
Is there a way to send files in body using OWASP ZAP?
ZAP doesnt have any specific option to make it easy for you, but if you craft it right then it will work. To...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found