A collection of ZAP scripts provided by the community - pull requests very welcome!
Clone or download
kingthorin Merge pull request #145 from nil0x42/master
HUNT.py: refactor, improve perf & readability, fix bugs
Latest commit c9fad7c Jan 11, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
active Verify scripts can be parsed Aug 20, 2018
api Remove unused imports Aug 27, 2018
authentication Merge pull request #124 from ptrovatelli/authenticationGetsWithRedirect Dec 6, 2018
extender Add extender script with a simple reverse proxy Jul 26, 2018
gradle Update Gradle to 4.10.2 Oct 30, 2018
httpfuzzerprocessor Update JavaDoc links Oct 26, 2018
httpsender Update Alert on Unexpected Content Types Nov 16, 2018
passive HUNT.py: add '(HUNT script)' as alert title suffix Dec 28, 2018
payloadgenerator Update JavaDoc links Oct 26, 2018
payloadprocessor Update JavaDoc links Oct 26, 2018
proxy Update JavaDoc links Oct 26, 2018
sequence Added dirs and readmes for httpsender and sequence scripts. Jul 31, 2015
src/test/java/org/zaproxy Assert scripts are in expected directories Sep 18, 2018
standalone Remove unused imports Aug 27, 2018
targeted Remove unused var and add var declaration Aug 22, 2018
variant Verify scripts can be parsed Aug 20, 2018
websocketfuzzerprocessor Add dir for WebSocket Fuzzer Processor scripts Nov 3, 2017
.gitattributes Verify scripts can be parsed Aug 20, 2018
.gitignore Verify scripts can be parsed Aug 20, 2018
.travis.yml Verify scripts can be parsed Aug 20, 2018
README.md Added ZAP installation instructions Feb 23, 2016
build.gradle.kts Update Gradle to 4.10.2 Oct 30, 2018
gradlew Verify scripts can be parsed Aug 20, 2018
gradlew.bat Verify scripts can be parsed Aug 20, 2018
settings.gradle.kts Verify scripts can be parsed Aug 20, 2018

README.md

community-scripts

A collection of ZAP scripts provided by the community, i.e. you lot :)

The easiest way to use this repo in ZAP is to install the 'Community Scripts' add-on from the ZAP Marketplace.

If you might want to contribute to the repo then you can also clone it to a local directory and then add that to ZAP using the Options / Scripts screen.

Please upload your scripts via pull requests!

For more information on ZAP scripts see:

To discuss any aspect of ZAP scripting please join the zaproxy-scripts group: http://groups.google.com/group/zaproxy-scripts

Please ensure that scripts submitted have the correct extension for the language they are written in.

All scripts in the repo are released under the Apache v2.0 licence.

You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0

By submitting your scripts to this repo you are releasing them under the Apache v2.0 licence, however you may optionally also release them under more lenient licenses via comments in the scripts.