Allow to upload files through the ZAP API
See original GitHub issueIs your feature request related to a problem? Please describe.
I wish to use ZAP as a daemon in a container as part of a CI pipeline.
However, to do so, I either need to roll a new ZAP image for every type of target I wish to examine or I need to use ZAP as the base image itself.
With GitLab services, you cannot modify the running image on load, so you end up having to run ZAP as the “runner” which is not ideal.
Describe the solution you’d like
I would like any API endpoint that allows for loading from a file on the local filesystem to either:
- Have an associated
upload
endpoint that will put the file into the correct location - Allow me to upload the entire file contents as part of a
POST
- I’m not 100% sure this will work for everything but it will certainly work for anything plain-text
Describe alternatives you’ve considered
I haven’t found any good way around this issue
Screenshots
No response
Additional context
No response
Would you like to help fix this issue?
- Yes
Issue Analytics
- State:
- Created 10 months ago
- Comments:14 (14 by maintainers)
Top Results From Across the Web
ZAP FileUpload Add-on
The FileUpload add-on's scan rule attempts to upload various types of files with payloads and then tries to retrieve them to identify ...
Read more >OWASP ZAP FileUpload add-on - YouTube
OWASP ZAP FileUpload add-on is used to find vulnerabilities in File Upload functionality. This video tutorial explains the FileUpload addon, ...
Read more >Send files in Zaps - Zapier
To send a file in a Zap, you need to use a file object or certain types of URL links.File objects are the...
Read more >How to upload a file with zap - Google Groups
File uploads are typically performed using an HTTP(S) POST using multipart forms. Try uploading a file while proxying through ZAP - do you...
Read more >Is there a way to send files in body using OWASP ZAP?
ZAP doesnt have any specific option to make it easy for you, but if you craft it right then it will work. To...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Note, I didn’t say that ZAP doesn’t have storage. I said that I don’t have access to the storage.
Told you it must be subtle. (Yes you kinda covered this earlier but this made it clear.)