Skip to content

Commit 8b3efbe

Browse files
authored
Merge pull request #1867 from zapbot/update-site-content
Update site content
2 parents 0516109 + fb102d4 commit 8b3efbe

5 files changed

Lines changed: 10 additions & 4 deletions

File tree

docs/testapps/altoroj/index.html

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -216,6 +216,7 @@ <h3 id="crawling">Crawling <a class="header-link" href="#crawling"><svg class="f
216216
</span></span></code></pre></div>
217217
<h3 id="scanning">Scanning <a class="header-link" href="#scanning"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3>
218218
<p>We are not aware of a definitive list of the vulnerabilities in AltoroJ.</p>
219+
<p>Not too surprisingly you will need to configure the <a href="/docs/desktop/addons/automation-framework/job-ascan/">activeScan</a> job, and you will probably want to generate a <a href="/docs/desktop/addons/report-generation/automation/">report</a>.</p>
219220
</main>
220221
</article>
221222
</section>

docs/testapps/crapi/index.html

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -283,6 +283,7 @@ <h3 id="scanning">Scanning <a class="header-link" href="#scanning"><svg class="f
283283
<li>The NoSQL Injection in the coupon validation functionality.</li>
284284
<li>The SSRF in the contact mechanic functionality.</li>
285285
</ul>
286+
<p>Not too surprisingly you will need to configure the <a href="/docs/desktop/addons/automation-framework/job-ascan/">activeScan</a> job, and you will probably want to generate a <a href="/docs/desktop/addons/report-generation/automation/">report</a>.</p>
286287
</main>
287288
</article>
288289
</section>

docs/testapps/ginnjuiceshop/index.html

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -218,6 +218,9 @@ <h3 id="crawling">Crawling <a class="header-link" href="#crawling"><svg class="f
218218
</span></span></code></pre></div>
219219
<h3 id="scanning">Scanning <a class="header-link" href="#scanning"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3>
220220
<p>Gin &amp; Juice Shop has a well documented set of <a href="https://ginandjuice.shop/vulnerabilities">vulnerabilities</a>.</p>
221+
<p>Not too surprisingly you will need to configure the <a href="/docs/desktop/addons/automation-framework/job-ascan/">activeScan</a> job, and you will probably want to generate a <a href="/docs/desktop/addons/report-generation/automation/">report</a>.</p>
222+
<p>Some of the Gin N Juice shop vulnerabilities can only be found using <a href="/blog/2021-08-23-oast-with-owasp-zap/">OAST</a>. You will need to configure ZAP to use OAST as it is disabled by default,
223+
due to the fact that it will send data to 3rd party services.</p>
221224
</main>
222225
</article>
223226
</section>

docs/testapps/juiceshop/index.html

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -246,6 +246,7 @@ <h3 id="crawling">Crawling <a class="header-link" href="#crawling"><svg class="f
246246
<h3 id="scanning">Scanning <a class="header-link" href="#scanning"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3>
247247
<p>Although Juice Shop has lots of vulnerabilities, many of them can be very challenging for a DAST tool to identify.</p>
248248
<p>The only significant vulnerability that we are aware of which ZAP should be able to identify but cannot is the DOM XSS vulnerability in the Search box.</p>
249+
<p>Not too surprisingly you will need to configure the <a href="/docs/desktop/addons/automation-framework/job-ascan/">activeScan</a> job, and you will probably want to generate a <a href="/docs/desktop/addons/report-generation/automation/">report</a>.</p>
249250
</main>
250251
</article>
251252
</section>

0 commit comments

Comments
 (0)