diff --git a/addons/index.html b/addons/index.html
index 2c138752ed..5c8ca1917b 100644
--- a/addons/index.html
+++ b/addons/index.html
@@ -522,7 +522,7 @@ <h1 class="text--white">ZAP Marketplace</h1>
             <a class="no-border" title="Repository" href="https://github.com/zaproxy/zap-extensions/" target="_blank" rel="noopener noreferrer"><img alt="Repository" src="/img/addons/source.png" /></a>
             
             
-            <a class="no-border" title="Download" href="https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.50.0/automation-beta-0.50.0.zap" target="_blank" rel="noopener noreferrer"><img alt="Download" src="/img/addons/download.png" /></a>
+            <a class="no-border" title="Download" href="https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.51.0/automation-beta-0.51.0.zap" target="_blank" rel="noopener noreferrer"><img alt="Download" src="/img/addons/download.png" /></a>
             
             
             
@@ -535,7 +535,7 @@ <h1 class="text--white">ZAP Marketplace</h1>
             automation
         </td>
         <td align="center">
-            0.50.0
+            0.51.0
         </td>
         <td >
             beta
@@ -544,7 +544,7 @@ <h1 class="text--white">ZAP Marketplace</h1>
             ZAP Dev Team
         </td>
         <td align="center">
-            2025-06-20
+            2025-07-17
         </td>
     </tr>
     
diff --git a/docs/desktop/addons/automation-framework/environment/index.html b/docs/desktop/addons/automation-framework/environment/index.html
index e757970d56..4341ab96ad 100644
--- a/docs/desktop/addons/automation-framework/environment/index.html
+++ b/docs/desktop/addons/automation-framework/environment/index.html
@@ -1883,7 +1883,10 @@ <h1 id="automation-framework---environment">Automation Framework - Environment</
         exclude:                       # List of tech to exclude, as per https://www.zaproxy.org/techtags/ (just use last names)
         include:                       # List of tech to include, should only be used when targeting specific techs, the exclude takes precedence when configuring the context.
       structure:
-        structuralParameters:          # List of names of structural parameters.
+        structuralParameters:          # List of names of structural parameters
+        dataDrivenNodes:               # List of data driven nodes
+        - name:                        # String, name of the data driven node
+          regex:                       # String, regex of the data driven node, must contain 2 or 3 regex groups
       users:                           # List of one or more users available to use for authentication
       - name:                          # String, the name to be used by the jobs
         credentials:                   # List of user credentials - may include any required for scripts
diff --git a/docs/desktop/addons/automation-framework/gui/index.html b/docs/desktop/addons/automation-framework/gui/index.html
index a4d2d2cbbe..38e18c062c 100644
--- a/docs/desktop/addons/automation-framework/gui/index.html
+++ b/docs/desktop/addons/automation-framework/gui/index.html
@@ -1859,6 +1859,11 @@ <h2 id="automation-tab">Automation Tab <a class="header-link" href="#automation-
 <h3 id="plan-sub-tab">Plan sub-tab <a class="header-link" href="#plan-sub-tab"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3>
 <p>A graphical representation of the plan which also shows the state of the plan when it is run.<br>
 You can edit any of the elements of the plan by double clicking on them.</p>
+<p>You can also change the following general job options via the plan table:</p>
+<ul>
+<li>Enabled - only jobs that are enabled will run.</li>
+<li>Always Run - enabled jobs with this option will run even if the plan exits early.</li>
+</ul>
 
 <h3 id="output-sub-tab">Output sub-tab <a class="header-link" href="#output-sub-tab"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3>
 <p>Any output generated when you load or run the plan.</p>
diff --git a/docs/desktop/addons/automation-framework/index.html b/docs/desktop/addons/automation-framework/index.html
index 14087a97be..1e5049ebfb 100644
--- a/docs/desktop/addons/automation-framework/index.html
+++ b/docs/desktop/addons/automation-framework/index.html
@@ -1892,7 +1892,6 @@ <h2 id="file-paths">File Paths <a class="header-link" href="#file-paths"><svg cl
 <p>All file and directory paths can either be absolute or relative to the directory containing the plan. Relative paths are recommended for portability.</p>
 
 <h2 id="jobs">Jobs <a class="header-link" href="#jobs"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h2>
-<p>The jobs can be enabled/disabled through the GUI and the automation plan, with the <code>enabled</code> flag. Jobs are enabled by default.</p>
 <p>The following automation jobs are supported by this add-on:</p>
 <ul>
 <li><a href="/docs/desktop/addons/automation-framework/job-ascanconfig/">activeScan-config</a> - configures the active scanner</li>
@@ -1904,6 +1903,13 @@ <h2 id="jobs">Jobs <a class="header-link" href="#jobs"><svg class="fill-current
 <li><a href="/docs/desktop/addons/automation-framework/job-exitstatus/">exitStatus</a> - sets ZAP&rsquo;s exit code based on scan results</li>
 </ul>
 
+<h3 id="gen-options">General Job Options <a class="header-link" href="#gen-options"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3>
+<p>The following options can be applied to all jobs, via the automation plan or the <a href="/docs/desktop/addons/automation-framework/gui/">GUI</a>:</p>
+<ul>
+<li><code>enabled</code> - only jobs that are enabled will run.</li>
+<li><code>alwaysRun</code> - enabled jobs with this option will run even if the plan exits early.</li>
+</ul>
+
 <h3 id="importance-of-job-order">Importance of Job Order <a class="header-link" href="#importance-of-job-order"><svg class="fill-current o-60 hover-accent-color-light" height="22px" viewBox="0 0 24 24" width="22px" xmlns="http://www.w3.org/2000/svg"><path d="M0 0h24v24H0z" fill="none"/><path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z" fill="currentColor"/></svg></a></h3>
 <p>The order of jobs is relevant and important. For example:</p>
 <ul>
diff --git a/docs/desktop/addons/automation-framework/index.xml b/docs/desktop/addons/automation-framework/index.xml
index bf5e738552..310271d5d4 100644
--- a/docs/desktop/addons/automation-framework/index.xml
+++ b/docs/desktop/addons/automation-framework/index.xml
@@ -47,7 +47,7 @@
       <link>/docs/desktop/addons/automation-framework/job-ascanconfig/</link>
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
       <guid>/docs/desktop/addons/automation-framework/job-ascanconfig/</guid>
-      <description>&lt;h1 id=&#34;automation-framework---activescan-config-job&#34;&gt;Automation Framework - activeScan-config Job&lt;/h1&gt;&#xA;&lt;p&gt;This job configures the active scanner, for custom active scans (e.g. Sequence).&lt;/p&gt;&#xA;&#xA;&lt;h2 id=&#34;yaml&#34;&gt;YAML &lt;a class=&#34;header-link&#34; href=&#34;#yaml&#34;&gt;&lt;svg class=&#34;fill-current o-60 hover-accent-color-light&#34; height=&#34;22px&#34; viewBox=&#34;0 0 24 24&#34; width=&#34;22px&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;&lt;path d=&#34;M0 0h24v24H0z&#34; fill=&#34;none&#34;/&gt;&lt;path d=&#34;M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z&#34; fill=&#34;currentColor&#34;/&gt;&lt;/svg&gt;&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;pre tabindex=&#34;0&#34;&gt;&lt;code&gt;  - type: activeScan-config                # Configures the settings of the active scanner.&#xA;    parameters:&#xA;      maxRuleDurationInMins:               # Int: The max time in minutes any individual rule will be allowed to run for, default: 0 unlimited&#xA;      maxScanDurationInMins:               # Int: The max time in minutes the active scanner will be allowed to run for, default: 0 unlimited&#xA;      maxAlertsPerRule:                    # Int: Maximum number of alerts to raise per rule, default: 0 unlimited&#xA;      defaultPolicy:                       # String: The name of the default scan policy to use, default: Default Policy&#xA;      handleAntiCSRFTokens:                # Bool: If set then automatically handle anti CSRF tokens, default: false&#xA;      injectPluginIdInHeader:              # Bool: If set then the relevant rule ID will be injected into the X-ZAP-Scan-ID header of each request, default: false&#xA;      threadPerHost:                       # Int: The max number of threads per host, default: 2 * Number of available processor cores&#xA;    inputVectors:                          # The input vectors used during the active scan.&#xA;      urlQueryStringAndDataDrivenNodes:    # Configures the scanning of query parameters and DDNs.&#xA;         enabled:                          # Bool: If query parameters and DDNs scanning should be enabled. Default: true&#xA;         addParam:                         # Bool: If a query parameter should be added if none present. Default: false&#xA;         odata:                            # Bool: If OData query filters should be scanned. Default: true&#xA;      postData:                            # Configures the scanning of request bodies.&#xA;        enabled:                           # Bool: If enabled. Default: true&#xA;        multiPartFormData:                 # Bool: If multipart form data bodies should be scanned. Default: true&#xA;        xml:                               # Bool: If XML bodies should be scanned. Default: true&#xA;        json:                              # Configures the scanning of JSON bodies.&#xA;          enabled:                         # Bool: If JSON scanning should be enabled. Default: true&#xA;          scanNullValues:                  # Bool: If null values should be scanned. Default: false&#xA;        googleWebToolkit:                  # Bool: If GWT scanning should be enabled. Default: false&#xA;        directWebRemoting:                 # Bool: If DWR scanning should be enabled. Default: false&#xA;      urlPath:                             # Bool: If URL path segments should be scanned. Default: false&#xA;      httpHeaders:                         # Configures the scanning of HTTP headers.&#xA;        enabled:                           # Bool: If HTTP header scanning should be enabled. Default: false&#xA;        allRequests:                       # Bool: If set then the headers of requests that do not include any parameters will be scanned. Default: false&#xA;      cookieData:                          # Configures the scanning of cookies.&#xA;        enabled:                           # Bool: If enabled. Default: false&#xA;        encodeCookieValues:                # Bool: If cookie values should be encoded. Default: false&#xA;      scripts:                             # Bool: If Input Vector scripts should be used. Default: true&#xA;&lt;/code&gt;&lt;/pre&gt;</description>
+      <description>&lt;h1 id=&#34;automation-framework---activescan-config-job&#34;&gt;Automation Framework - activeScan-config Job&lt;/h1&gt;&#xA;&lt;p&gt;This job configures the active scanner, for custom active scans (e.g. Sequence).&lt;/p&gt;&#xA;&#xA;&lt;h2 id=&#34;yaml&#34;&gt;YAML &lt;a class=&#34;header-link&#34; href=&#34;#yaml&#34;&gt;&lt;svg class=&#34;fill-current o-60 hover-accent-color-light&#34; height=&#34;22px&#34; viewBox=&#34;0 0 24 24&#34; width=&#34;22px&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;&lt;path d=&#34;M0 0h24v24H0z&#34; fill=&#34;none&#34;/&gt;&lt;path d=&#34;M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z&#34; fill=&#34;currentColor&#34;/&gt;&lt;/svg&gt;&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;pre tabindex=&#34;0&#34;&gt;&lt;code&gt;  - type: activeScan-config                # Configures the settings of the active scanner.&#xA;    parameters:&#xA;      maxRuleDurationInMins:               # Int: The max time in minutes any individual rule will be allowed to run for, default: 0 unlimited&#xA;      maxScanDurationInMins:               # Int: The max time in minutes the active scanner will be allowed to run for, default: 0 unlimited&#xA;      maxAlertsPerRule:                    # Int: Maximum number of alerts to raise per rule, default: 0 unlimited&#xA;      defaultPolicy:                       # String: The name of the default scan policy to use, default: Default Policy&#xA;      handleAntiCSRFTokens:                # Bool: If set then automatically handle anti CSRF tokens, default: false&#xA;      injectPluginIdInHeader:              # Bool: If set then the relevant rule ID will be injected into the X-ZAP-Scan-ID header of each request, default: false&#xA;      threadPerHost:                       # Int: The max number of threads per host, default: 2 * Number of available processor cores&#xA;    inputVectors:                          # The input vectors used during the active scan.&#xA;      urlQueryStringAndDataDrivenNodes:    # Configures the scanning of query parameters and DDNs.&#xA;         enabled:                          # Bool: If query parameters and DDNs scanning should be enabled. Default: true&#xA;         addParam:                         # Bool: If a query parameter should be added if none present. Default: false&#xA;         odata:                            # Bool: If OData query filters should be scanned. Default: true&#xA;      postData:                            # Configures the scanning of request bodies.&#xA;        enabled:                           # Bool: If enabled. Default: true&#xA;        multiPartFormData:                 # Bool: If multipart form data bodies should be scanned. Default: true&#xA;        xml:                               # Bool: If XML bodies should be scanned. Default: true&#xA;        json:                              # Configures the scanning of JSON bodies.&#xA;          enabled:                         # Bool: If JSON scanning should be enabled. Default: true&#xA;          scanNullValues:                  # Bool: If null values should be scanned. Default: false&#xA;        googleWebToolkit:                  # Bool: If GWT scanning should be enabled. Default: false&#xA;        directWebRemoting:                 # Bool: If DWR scanning should be enabled. Default: false&#xA;      urlPath:                             # Bool: If URL path segments should be scanned. Default: false&#xA;      httpHeaders:                         # Configures the scanning of HTTP headers.&#xA;        enabled:                           # Bool: If HTTP header scanning should be enabled. Default: false&#xA;        allRequests:                       # Bool: If set then the headers of requests that do not include any parameters will be scanned. Default: false&#xA;      cookieData:                          # Configures the scanning of cookies.&#xA;        enabled:                           # Bool: If enabled. Default: false&#xA;        encodeCookieValues:                # Bool: If cookie values should be encoded. Default: false&#xA;      scripts:                             # Bool: If Input Vector scripts should be used. Default: true&#xA;    excludePaths:                          # An optional list of regexes to exclude&#xA;    enabled:                           # Bool: If set to false the job will not be run, default: true&#xA;    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Note that the &amp;rsquo;excludePaths&amp;rsquo; will overwrite any existing session &amp;ldquo;Exclude from Scanner&amp;rdquo; paths.&lt;/p&gt;</description>
     </item>
     <item>
       <title>Automation Framework - passiveScan-config Job</title>
@@ -61,7 +61,7 @@
       <link>/docs/desktop/addons/automation-framework/job-ascanpolicy/</link>
       <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
       <guid>/docs/desktop/addons/automation-framework/job-ascanpolicy/</guid>
-      <description>&lt;h1 id=&#34;automation-framework---activescan-policy-job&#34;&gt;Automation Framework - activeScan-policy Job&lt;/h1&gt;&#xA;&lt;p&gt;This job defines an active scan policy. This policy can be used later in the plan by active scan related jobs, like &lt;a href=&#34;/docs/desktop/addons/automation-framework/job-ascan/&#34;&gt;activeScan&lt;/a&gt; job.&lt;/p&gt;&#xA;&#xA;&lt;h2 id=&#34;yaml&#34;&gt;YAML &lt;a class=&#34;header-link&#34; href=&#34;#yaml&#34;&gt;&lt;svg class=&#34;fill-current o-60 hover-accent-color-light&#34; height=&#34;22px&#34; viewBox=&#34;0 0 24 24&#34; width=&#34;22px&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;&lt;path d=&#34;M0 0h24v24H0z&#34; fill=&#34;none&#34;/&gt;&lt;path d=&#34;M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z&#34; fill=&#34;currentColor&#34;/&gt;&lt;/svg&gt;&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;pre tabindex=&#34;0&#34;&gt;&lt;code&gt;  - type: activeScan-policy            # Defines a new active scan policy which can be used by later activeScan related jobs&#xA;    parameters:&#xA;      name:                            # String: Name of the policy, mandatory&#xA;    policyDefinition:                  # The policy definition&#xA;      defaultStrength:                 # String: The default Attack Strength for all rules, one of Low, Medium, High, Insane (not recommended), default: Medium&#xA;      defaultThreshold:                # String: The default Alert Threshold for all rules, one of Off, Low, Medium, High, default: Medium&#xA;      rules:                           # A list of one or more active scan rules and associated settings which override the defaults&#xA;      - id:                            # Int: The rule id as per https://www.zaproxy.org/docs/alerts/&#xA;        name:                          # Comment: The name of the rule for documentation purposes - this is not required or actually used&#xA;        strength:                      # String: The Attack Strength for this rule, one of Low, Medium, High, Insane, default: Medium&#xA;        threshold:                     # String: The Alert Threshold for this rule, one of Off, Low, Medium, High, default: Medium&#xA;&lt;/code&gt;&lt;/pre&gt;</description>
+      <description>&lt;h1 id=&#34;automation-framework---activescan-policy-job&#34;&gt;Automation Framework - activeScan-policy Job&lt;/h1&gt;&#xA;&lt;p&gt;This job defines an active scan policy. This policy can be used later in the plan by active scan related jobs, like &lt;a href=&#34;/docs/desktop/addons/automation-framework/job-ascan/&#34;&gt;activeScan&lt;/a&gt; job.&lt;/p&gt;&#xA;&#xA;&lt;h2 id=&#34;yaml&#34;&gt;YAML &lt;a class=&#34;header-link&#34; href=&#34;#yaml&#34;&gt;&lt;svg class=&#34;fill-current o-60 hover-accent-color-light&#34; height=&#34;22px&#34; viewBox=&#34;0 0 24 24&#34; width=&#34;22px&#34; xmlns=&#34;http://www.w3.org/2000/svg&#34;&gt;&lt;path d=&#34;M0 0h24v24H0z&#34; fill=&#34;none&#34;/&gt;&lt;path d=&#34;M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z&#34; fill=&#34;currentColor&#34;/&gt;&lt;/svg&gt;&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;pre tabindex=&#34;0&#34;&gt;&lt;code&gt;  - type: activeScan-policy            # Defines a new active scan policy which can be used by later activeScan related jobs&#xA;    parameters:&#xA;      name:                            # String: Name of the policy, mandatory&#xA;    policyDefinition:                  # The policy definition&#xA;      defaultStrength:                 # String: The default Attack Strength for all rules, one of Low, Medium, High, Insane (not recommended), default: Medium&#xA;      defaultThreshold:                # String: The default Alert Threshold for all rules, one of Off, Low, Medium, High, default: Medium&#xA;      rules:                           # A list of one or more active scan rules and associated settings which override the defaults&#xA;      - id:                            # Int: The rule id as per https://www.zaproxy.org/docs/alerts/&#xA;        name:                          # Comment: The name of the rule for documentation purposes - this is not required or actually used&#xA;        strength:                      # String: The Attack Strength for this rule, one of Low, Medium, High, Insane, default: Medium&#xA;        threshold:                     # String: The Alert Threshold for this rule, one of Off, Low, Medium, High, default: Medium&#xA;    enabled:                           # Bool: If set to false the job will not be run, default: true&#xA;    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false&#xA;&lt;/code&gt;&lt;/pre&gt;</description>
     </item>
     <item>
       <title>Automation Framework - passiveScan-wait Job</title>
diff --git a/docs/desktop/addons/automation-framework/job-ascan/index.html b/docs/desktop/addons/automation-framework/job-ascan/index.html
index beb604b1e7..eb488c2ed1 100644
--- a/docs/desktop/addons/automation-framework/job-ascan/index.html
+++ b/docs/desktop/addons/automation-framework/job-ascan/index.html
@@ -1867,6 +1867,8 @@ <h2 id="yaml">YAML <a class="header-link" href="#yaml"><svg class="fill-current
         name:                          # String: The name of the rule for documentation purposes - this is not required or actually used
         strength:                      # String: The Attack Strength for this rule, one of Low, Medium, High, Insane, default: Medium
         threshold:                     # String: The Alert Threshold for this rule, one of Off, Low, Medium, High, default: Medium
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
 </code></pre><p><strong>Note</strong> : Unless the <code>defaultThreshold</code> of the <code>policyDefinition</code> is <code>OFF</code> all rules will be enabled to start with.</p>
 <p>The policy can be one defined by a previous <a href="/docs/desktop/addons/automation-framework/job-ascanpolicy/">activeScan-policy</a> job, or by a scan policy file
 that has been put in <code>policies</code> directory under ZAP&rsquo;s <a href="/faq/what-is-the-default-directory-that-zap-uses/">HOME directory</a> .</p>
diff --git a/docs/desktop/addons/automation-framework/job-ascanconfig/index.html b/docs/desktop/addons/automation-framework/job-ascanconfig/index.html
index 4a7b6b4aa2..f7de5a1977 100644
--- a/docs/desktop/addons/automation-framework/job-ascanconfig/index.html
+++ b/docs/desktop/addons/automation-framework/job-ascanconfig/index.html
@@ -1872,7 +1872,11 @@ <h2 id="yaml">YAML <a class="header-link" href="#yaml"><svg class="fill-current
         enabled:                           # Bool: If enabled. Default: false
         encodeCookieValues:                # Bool: If cookie values should be encoded. Default: false
       scripts:                             # Bool: If Input Vector scripts should be used. Default: true
-</code></pre>
+    excludePaths:                          # An optional list of regexes to exclude
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
+</code></pre><p>Note that the &rsquo;excludePaths&rsquo; will overwrite any existing session &ldquo;Exclude from Scanner&rdquo; paths.</p>
+
         </div>
       </div>
   </div>
diff --git a/docs/desktop/addons/automation-framework/job-ascanpolicy/index.html b/docs/desktop/addons/automation-framework/job-ascanpolicy/index.html
index cb0bab2e13..b9ae4c227a 100644
--- a/docs/desktop/addons/automation-framework/job-ascanpolicy/index.html
+++ b/docs/desktop/addons/automation-framework/job-ascanpolicy/index.html
@@ -1852,6 +1852,8 @@ <h2 id="yaml">YAML <a class="header-link" href="#yaml"><svg class="fill-current
         name:                          # Comment: The name of the rule for documentation purposes - this is not required or actually used
         strength:                      # String: The Attack Strength for this rule, one of Low, Medium, High, Insane, default: Medium
         threshold:                     # String: The Alert Threshold for this rule, one of Off, Low, Medium, High, default: Medium
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
 </code></pre>
         </div>
       </div>
diff --git a/docs/desktop/addons/automation-framework/job-delay/index.html b/docs/desktop/addons/automation-framework/job-delay/index.html
index c80921ce77..cdcaf3ff0d 100644
--- a/docs/desktop/addons/automation-framework/job-delay/index.html
+++ b/docs/desktop/addons/automation-framework/job-delay/index.html
@@ -1855,6 +1855,8 @@ <h2 id="yaml">YAML <a class="header-link" href="#yaml"><svg class="fill-current
     parameters:
       time:                            # String: The time to wait, format any of [&#39;hh:mm:ss&#39;, &#39;mm:ss&#39;, &#39;ss&#39;], default: 0
       fileName:                        # String: Name of a file which will cause the job to end early if created, default: empty
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
 </code></pre>
         </div>
       </div>
diff --git a/docs/desktop/addons/automation-framework/job-exitstatus/index.html b/docs/desktop/addons/automation-framework/job-exitstatus/index.html
index 38ac966bbf..bca8c77925 100644
--- a/docs/desktop/addons/automation-framework/job-exitstatus/index.html
+++ b/docs/desktop/addons/automation-framework/job-exitstatus/index.html
@@ -1855,6 +1855,8 @@ <h2 id="yaml">YAML <a class="header-link" href="#yaml"><svg class="fill-current
       okExitValue:                     # Integer: Exit value if all ok, default 0
       errorExitValue:                  # Integer: Exit value if there are errors, default 1
       warnExitValue:                   # Integer: Exit value if there are warnings, default 2
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
  
 </code></pre>
         </div>
diff --git a/docs/desktop/addons/automation-framework/job-requestor/index.html b/docs/desktop/addons/automation-framework/job-requestor/index.html
index 5ca11c6b77..7c84c9f00f 100644
--- a/docs/desktop/addons/automation-framework/job-requestor/index.html
+++ b/docs/desktop/addons/automation-framework/job-requestor/index.html
@@ -1854,6 +1854,8 @@ <h2 id="yaml">YAML <a class="header-link" href="#yaml"><svg class="fill-current
             - &#34;header1:value1&#34;
         data:                          # String: Optional data to send in the request body, supports vars
         responseCode:                  # Int: An optional, expected response code against which the actual response code will be matched
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
 </code></pre>
         </div>
       </div>
diff --git a/docs/sbom/automation/index.html b/docs/sbom/automation/index.html
index cb92a18edb..278a5f035b 100644
--- a/docs/sbom/automation/index.html
+++ b/docs/sbom/automation/index.html
@@ -122,9 +122,9 @@ <h1 class="text--white">Automation Framework Add-on SBOM</h1>
     <a href="/docs/sbom/automation">Automation Framework</a>
   </header>
   <br>
-  <p>This page contains a list of all the libraries involved in building version <code>0.50.0</code> of the
+  <p>This page contains a list of all the libraries involved in building version <code>0.51.0</code> of the
     "Automation Framework" add-on.
-  <p>You may download the full <a href="https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.50.0/bom.json">Software Bill Of Materials (SBOM) JSON file</a>
+  <p>You may download the full <a href="https://github.com/zaproxy/zap-extensions/releases/download/automation-v0.51.0/bom.json">Software Bill Of Materials (SBOM) JSON file</a>
     for this add-on.
   <div class="flex">
     <table>
@@ -245,7 +245,7 @@ <h1 class="text--white">Automation Framework Add-on SBOM</h1>
         
         <tr>
           <td>commonlib</td>
-          <td align="center">1.33.0</td>
+          <td align="center">1.35.0</td>
           <td></td>
         </tr>
         
@@ -467,19 +467,19 @@ <h1 class="text--white">Automation Framework Add-on SBOM</h1>
         
         <tr>
           <td>jackson-annotations</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
         <tr>
           <td>jackson-bom</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
         <tr>
           <td>jackson-core</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
@@ -491,31 +491,31 @@ <h1 class="text--white">Automation Framework Add-on SBOM</h1>
         
         <tr>
           <td>jackson-databind</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
         <tr>
           <td>jackson-dataformat-xml</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
         <tr>
           <td>jackson-dataformat-yaml</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
         <tr>
           <td>jackson-datatype-jdk8</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
         <tr>
           <td>jackson-datatype-jsr310</td>
-          <td align="center">2.17.0</td>
+          <td align="center">2.19.1</td>
           <td>Apache-2.0</td>
         </tr>
         
@@ -785,7 +785,7 @@ <h1 class="text--white">Automation Framework Add-on SBOM</h1>
         
         <tr>
           <td>network</td>
-          <td align="center">0.22.0</td>
+          <td align="center">0.23.0</td>
           <td></td>
         </tr>
         
@@ -869,7 +869,7 @@ <h1 class="text--white">Automation Framework Add-on SBOM</h1>
         
         <tr>
           <td>snakeyaml</td>
-          <td align="center">2.2</td>
+          <td align="center">2.4</td>
           <td>Apache-2.0</td>
         </tr>
         
@@ -899,7 +899,7 @@ <h1 class="text--white">Automation Framework Add-on SBOM</h1>
         
         <tr>
           <td>woodstox-core</td>
-          <td align="center">6.6.1</td>
+          <td align="center">7.1.1</td>
           <td>Apache-2.0</td>
         </tr>
         
diff --git a/index.xml b/index.xml
index 4d9d80c2e2..793758a5c6 100644
--- a/index.xml
+++ b/index.xml
@@ -4852,7 +4852,10 @@ If you are new to ZAP automation then the best place to start is the ZAP &lt;a h
         enabled:                           # Bool: If enabled. Default: false
         encodeCookieValues:                # Bool: If cookie values should be encoded. Default: false
       scripts:                             # Bool: If Input Vector scripts should be used. Default: true
-&lt;/code&gt;&lt;/pre&gt;</description>
+    excludePaths:                          # An optional list of regexes to exclude
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
+&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Note that the &amp;rsquo;excludePaths&amp;rsquo; will overwrite any existing session &amp;ldquo;Exclude from Scanner&amp;rdquo; paths.&lt;/p&gt;</description>
     </item>
     
     <item>
@@ -5073,6 +5076,8 @@ ZAP. Some of the examples include:&lt;/p&gt;</description>
         name:                          # Comment: The name of the rule for documentation purposes - this is not required or actually used
         strength:                      # String: The Attack Strength for this rule, one of Low, Medium, High, Insane, default: Medium
         threshold:                     # String: The Alert Threshold for this rule, one of Off, Low, Medium, High, default: Medium
+    enabled:                           # Bool: If set to false the job will not be run, default: true
+    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false
 &lt;/code&gt;&lt;/pre&gt;</description>
     </item>
     
diff --git a/search/index.json b/search/index.json
index ddc8daeceb..d63ba46071 100644
--- a/search/index.json
+++ b/search/index.json
@@ -141,7 +141,7 @@
     "keywords": ["","-","automation","framework","gui"],
     "tags": null,
     "summary": "\u003ch1 id=\"automation-framework---gui\"\u003eAutomation Framework - GUI\u003c/h1\u003e\n\u003cp\u003eThe Automation Framework has a GUI that is in the process of being developed.\u003c/p\u003e\n\n\u003ch2 id=\"automation-tab\"\u003eAutomation Tab \u003ca class=\"header-link\" href=\"#automation-tab\"\u003e\u003csvg class=\"fill-current o-60 hover-accent-color-light\" height=\"22px\" viewBox=\"0 0 24 24\" width=\"22px\" xmlns=\"http://www.w3.org/2000/svg\"\u003e\u003cpath d=\"M0 0h24v24H0z\" fill=\"none\"/\u003e\u003cpath d=\"M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z\" fill=\"currentColor\"/\u003e\u003c/svg\u003e\u003c/a\u003e\u003c/h2\u003e\n\u003cp\u003eThis tab allows you to create, load, edit and run automation jobs. It has 2 sub tabs.\u003c/p\u003e",
-    "content": "automation framework gui has that process being developed tab allows you create load edit run jobs sub tabs toolbar provides following buttons: new plan launches dialog from yaml file save saves current runs add job remove removes selected move up moves one place down test subtab graphical representation which also shows state when can any elements by double clicking them output generated future plans versions addon will add: support multiple creating config "
+    "content": "automation framework gui has that process being developed tab allows you create load edit run jobs sub tabs toolbar provides following buttons: new plan launches dialog from yaml file save saves current runs add job remove removes selected move up moves one place down test subtab graphical representation which also shows state when can any elements by double clicking them change general options via table: enabled only will always option even exits early output generated future plans versions addon add: support multiple creating config "
     },
 {
     "url": "/docs/sbom/automation/",
@@ -1485,7 +1485,7 @@
     "keywords": ["","-","automation","environment","framework"],
     "tags": null,
     "summary": "\u003ch1 id=\"automation-framework---environment\"\u003eAutomation Framework - Environment\u003c/h1\u003e\n\u003cp\u003eThis section of the YAML configuration file defines the applications which the rest of the jobs can act on.\u003c/p\u003e\n\u003cp\u003eThe environment is covered in the video: \u003ca href=\"https://youtu.be/1fcpU54N-mA\"\u003eZAP Chat 08 Automation Framework Part 2 - Environment\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eThe Automation Framework supports all of the \u003ca href=\"/docs/desktop/addons/automation-framework/authentication/\"\u003eauthentication\u003c/a\u003e mechanisms supported by ZAP.\u003c/p\u003e",
-    "content": "automation framework environment section yaml configuration file defines applications which rest jobs can act covered video: zap chat 08 part supports all authentication mechanisms supported by note when testing targets that operate default ports 80 http 443 https colon port portion url should not included including example: http:examplecom:80 may result inability crawl test target specified both browsers treat without being then doesnt match expectation within context theres nothing interact env: mandatory contexts list more name: name used refer other urls: top level urls everything under each will includepaths: optional regexes include excludepaths: exclude authentication: method: string one 39manual39 39http39 39form39 39json39 39script39 34autodetect34 34browser34 34client34 parameters: any required scripts parameters support vars except hostname: only port: int realm: loginpageurl: login page read prior making request loginrequesturl: loginrequestbody: body supplied get script: path script scriptinline: full multiline supply scriptengine: engine use verification: 39response39 39request39 39both39 39poll39 loggedinregex: regex pattern determining logged loggedoutregex: out pollfrequency: poll frequency verification pollunits: units 39requests39 39seconds39 pollurl: pollpostdata: post dat polladditionalheaders: additional headers header: header value: value sessionmanagement: 39cookie39 session management technology: exclude: tech per https:wwwzaproxyorgtechtags just last names include: targeting specific techs takes precedence configuring structure: structuralparameters: structural users: users available credentials: user credentials username: username authenticating password: password totp: totp data browser based secret: secret period: period default: 30 digits: number digits algorithm: algorithm sha1 vars: custom variables throughout config myvarone: customconfigvarone myvarone anywhere myvartwo: myvaronevartwo failonerror: true set exit error failonwarning: false warning continueonfailure: continue running even fails progresstostdout: write job progress stdout proxy: upstream proxy settings host realm defined they hardcoded system same way above eg envvar case there two variable would preferred format changes originally scriptengine fields were directly sessionmanagement element still reading plans now always output specifying technology given specify "
+    "content": "automation framework environment section yaml configuration file defines applications which rest jobs can act covered video: zap chat 08 part supports all authentication mechanisms supported by note when testing targets that operate default ports 80 http 443 https colon port portion url should not included including example: http:examplecom:80 may result inability crawl test target specified both browsers treat without being then doesnt match expectation within context theres nothing interact env: mandatory contexts list more name: name used refer other urls: top level urls everything under each will includepaths: optional regexes include excludepaths: exclude authentication: method: string one 39manual39 39http39 39form39 39json39 39script39 34autodetect34 34browser34 34client34 parameters: any required scripts parameters support vars except hostname: only port: int realm: loginpageurl: login page read prior making request loginrequesturl: loginrequestbody: body supplied get script: path script scriptinline: full multiline supply scriptengine: engine use verification: 39response39 39request39 39both39 39poll39 loggedinregex: regex pattern determining logged loggedoutregex: out pollfrequency: poll frequency verification pollunits: units 39requests39 39seconds39 pollurl: pollpostdata: post dat polladditionalheaders: additional headers header: header value: value sessionmanagement: 39cookie39 session management technology: exclude: tech per https:wwwzaproxyorgtechtags just last names include: targeting specific techs takes precedence configuring structure: structuralparameters: structural datadrivennodes: data driven nodes node regex: must contain groups users: users available credentials: user credentials username: username authenticating password: password totp: totp browser based secret: secret period: period default: 30 digits: number digits algorithm: algorithm sha1 vars: custom variables throughout config myvarone: customconfigvarone myvarone anywhere myvartwo: myvaronevartwo failonerror: true set exit error failonwarning: false warning continueonfailure: continue running even fails progresstostdout: write job progress stdout proxy: upstream proxy settings host realm defined they hardcoded system same way above eg envvar case there two variable would preferred format changes originally scriptengine fields were directly sessionmanagement element still reading plans now always output specifying technology given specify "
     },
 {
     "url": "/docs/desktop/addons/authentication-helper/browser-auth/",
@@ -2164,8 +2164,8 @@
     "title": "Automation Framework - activeScan-config Job",
     "keywords": ["","-","activescan-config","automation","framework","job"],
     "tags": null,
-    "summary": "\u003ch1 id=\"automation-framework---activescan-config-job\"\u003eAutomation Framework - activeScan-config Job\u003c/h1\u003e\n\u003cp\u003eThis job configures the active scanner, for custom active scans (e.g. Sequence).\u003c/p\u003e\n\n\u003ch2 id=\"yaml\"\u003eYAML \u003ca class=\"header-link\" href=\"#yaml\"\u003e\u003csvg class=\"fill-current o-60 hover-accent-color-light\" height=\"22px\" viewBox=\"0 0 24 24\" width=\"22px\" xmlns=\"http://www.w3.org/2000/svg\"\u003e\u003cpath d=\"M0 0h24v24H0z\" fill=\"none\"/\u003e\u003cpath d=\"M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z\" fill=\"currentColor\"/\u003e\u003c/svg\u003e\u003c/a\u003e\u003c/h2\u003e\n\u003cpre tabindex=\"0\"\u003e\u003ccode\u003e  - type: activeScan-config                # Configures the settings of the active scanner.\n    parameters:\n      maxRuleDurationInMins:               # Int: The max time in minutes any individual rule will be allowed to run for, default: 0 unlimited\n      maxScanDurationInMins:               # Int: The max time in minutes the active scanner will be allowed to run for, default: 0 unlimited\n      maxAlertsPerRule:                    # Int: Maximum number of alerts to raise per rule, default: 0 unlimited\n      defaultPolicy:                       # String: The name of the default scan policy to use, default: Default Policy\n      handleAntiCSRFTokens:                # Bool: If set then automatically handle anti CSRF tokens, default: false\n      injectPluginIdInHeader:              # Bool: If set then the relevant rule ID will be injected into the X-ZAP-Scan-ID header of each request, default: false\n      threadPerHost:                       # Int: The max number of threads per host, default: 2 * Number of available processor cores\n    inputVectors:                          # The input vectors used during the active scan.\n      urlQueryStringAndDataDrivenNodes:    # Configures the scanning of query parameters and DDNs.\n         enabled:                          # Bool: If query parameters and DDNs scanning should be enabled. Default: true\n         addParam:                         # Bool: If a query parameter should be added if none present. Default: false\n         odata:                            # Bool: If OData query filters should be scanned. Default: true\n      postData:                            # Configures the scanning of request bodies.\n        enabled:                           # Bool: If enabled. Default: true\n        multiPartFormData:                 # Bool: If multipart form data bodies should be scanned. Default: true\n        xml:                               # Bool: If XML bodies should be scanned. Default: true\n        json:                              # Configures the scanning of JSON bodies.\n          enabled:                         # Bool: If JSON scanning should be enabled. Default: true\n          scanNullValues:                  # Bool: If null values should be scanned. Default: false\n        googleWebToolkit:                  # Bool: If GWT scanning should be enabled. Default: false\n        directWebRemoting:                 # Bool: If DWR scanning should be enabled. Default: false\n      urlPath:                             # Bool: If URL path segments should be scanned. Default: false\n      httpHeaders:                         # Configures the scanning of HTTP headers.\n        enabled:                           # Bool: If HTTP header scanning should be enabled. Default: false\n        allRequests:                       # Bool: If set then the headers of requests that do not include any parameters will be scanned. Default: false\n      cookieData:                          # Configures the scanning of cookies.\n        enabled:                           # Bool: If enabled. Default: false\n        encodeCookieValues:                # Bool: If cookie values should be encoded. Default: false\n      scripts:                             # Bool: If Input Vector scripts should be used. Default: true\n\u003c/code\u003e\u003c/pre\u003e",
-    "content": "automation framework activescanconfig job configures active scanner custom scans eg sequence yaml type: settings parameters: maxruledurationinmins: int: max time minutes any individual rule will allowed run default: unlimited maxscandurationinmins: maxalertsperrule: maximum number alerts raise per defaultpolicy: string: name default scan policy use handleanticsrftokens: bool: set then automatically handle anti csrf tokens false injectpluginidinheader: relevant id injected into xzapscanid header each request threadperhost: threads host available processor cores inputvectors: input vectors used during urlquerystringanddatadrivennodes: scanning query parameters ddns enabled: should enabled true addparam: parameter added none present odata: odata filters scanned postdata: bodies multipartformdata: multipart form data xml: xml json: json scannullvalues: null values googlewebtoolkit: gwt directwebremoting: dwr urlpath: url path segments httpheaders: http headers allrequests: requests that do not include cookiedata: cookies encodecookievalues: cookie encoded scripts: vector scripts "
+    "summary": "\u003ch1 id=\"automation-framework---activescan-config-job\"\u003eAutomation Framework - activeScan-config Job\u003c/h1\u003e\n\u003cp\u003eThis job configures the active scanner, for custom active scans (e.g. Sequence).\u003c/p\u003e\n\n\u003ch2 id=\"yaml\"\u003eYAML \u003ca class=\"header-link\" href=\"#yaml\"\u003e\u003csvg class=\"fill-current o-60 hover-accent-color-light\" height=\"22px\" viewBox=\"0 0 24 24\" width=\"22px\" xmlns=\"http://www.w3.org/2000/svg\"\u003e\u003cpath d=\"M0 0h24v24H0z\" fill=\"none\"/\u003e\u003cpath d=\"M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z\" fill=\"currentColor\"/\u003e\u003c/svg\u003e\u003c/a\u003e\u003c/h2\u003e\n\u003cpre tabindex=\"0\"\u003e\u003ccode\u003e  - type: activeScan-config                # Configures the settings of the active scanner.\n    parameters:\n      maxRuleDurationInMins:               # Int: The max time in minutes any individual rule will be allowed to run for, default: 0 unlimited\n      maxScanDurationInMins:               # Int: The max time in minutes the active scanner will be allowed to run for, default: 0 unlimited\n      maxAlertsPerRule:                    # Int: Maximum number of alerts to raise per rule, default: 0 unlimited\n      defaultPolicy:                       # String: The name of the default scan policy to use, default: Default Policy\n      handleAntiCSRFTokens:                # Bool: If set then automatically handle anti CSRF tokens, default: false\n      injectPluginIdInHeader:              # Bool: If set then the relevant rule ID will be injected into the X-ZAP-Scan-ID header of each request, default: false\n      threadPerHost:                       # Int: The max number of threads per host, default: 2 * Number of available processor cores\n    inputVectors:                          # The input vectors used during the active scan.\n      urlQueryStringAndDataDrivenNodes:    # Configures the scanning of query parameters and DDNs.\n         enabled:                          # Bool: If query parameters and DDNs scanning should be enabled. Default: true\n         addParam:                         # Bool: If a query parameter should be added if none present. Default: false\n         odata:                            # Bool: If OData query filters should be scanned. Default: true\n      postData:                            # Configures the scanning of request bodies.\n        enabled:                           # Bool: If enabled. Default: true\n        multiPartFormData:                 # Bool: If multipart form data bodies should be scanned. Default: true\n        xml:                               # Bool: If XML bodies should be scanned. Default: true\n        json:                              # Configures the scanning of JSON bodies.\n          enabled:                         # Bool: If JSON scanning should be enabled. Default: true\n          scanNullValues:                  # Bool: If null values should be scanned. Default: false\n        googleWebToolkit:                  # Bool: If GWT scanning should be enabled. Default: false\n        directWebRemoting:                 # Bool: If DWR scanning should be enabled. Default: false\n      urlPath:                             # Bool: If URL path segments should be scanned. Default: false\n      httpHeaders:                         # Configures the scanning of HTTP headers.\n        enabled:                           # Bool: If HTTP header scanning should be enabled. Default: false\n        allRequests:                       # Bool: If set then the headers of requests that do not include any parameters will be scanned. Default: false\n      cookieData:                          # Configures the scanning of cookies.\n        enabled:                           # Bool: If enabled. Default: false\n        encodeCookieValues:                # Bool: If cookie values should be encoded. Default: false\n      scripts:                             # Bool: If Input Vector scripts should be used. Default: true\n    excludePaths:                          # An optional list of regexes to exclude\n    enabled:                           # Bool: If set to false the job will not be run, default: true\n    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false\n\u003c/code\u003e\u003c/pre\u003e\u003cp\u003eNote that the \u0026rsquo;excludePaths\u0026rsquo; will overwrite any existing session \u0026ldquo;Exclude from Scanner\u0026rdquo; paths.\u003c/p\u003e",
+    "content": "automation framework activescanconfig job configures active scanner custom scans eg sequence yaml type: settings parameters: maxruledurationinmins: int: max time minutes any individual rule will allowed run default: unlimited maxscandurationinmins: maxalertsperrule: maximum number alerts raise per defaultpolicy: string: name default scan policy use handleanticsrftokens: bool: set then automatically handle anti csrf tokens false injectpluginidinheader: relevant id injected into xzapscanid header each request threadperhost: threads host available processor cores inputvectors: input vectors used during urlquerystringanddatadrivennodes: scanning query parameters ddns enabled: should enabled true addparam: parameter added none present odata: odata filters scanned postdata: bodies multipartformdata: multipart form data xml: xml json: json scannullvalues: null values googlewebtoolkit: gwt directwebremoting: dwr urlpath: url path segments httpheaders: http headers allrequests: requests that do not include cookiedata: cookies encodecookievalues: cookie encoded scripts: vector scripts excludepaths: optional list regexes exclude alwaysrun: even plan exits early note excludepaths overwrite existing session from paths "
     },
 {
     "url": "/docs/desktop/addons/automation-framework/job-pscanconf/",
@@ -2268,8 +2268,8 @@
     "title": "Automation Framework - activeScan-policy Job",
     "keywords": ["","-","activescan-policy","automation","framework","job"],
     "tags": null,
-    "summary": "\u003ch1 id=\"automation-framework---activescan-policy-job\"\u003eAutomation Framework - activeScan-policy Job\u003c/h1\u003e\n\u003cp\u003eThis job defines an active scan policy. This policy can be used later in the plan by active scan related jobs, like \u003ca href=\"/docs/desktop/addons/automation-framework/job-ascan/\"\u003eactiveScan\u003c/a\u003e job.\u003c/p\u003e\n\n\u003ch2 id=\"yaml\"\u003eYAML \u003ca class=\"header-link\" href=\"#yaml\"\u003e\u003csvg class=\"fill-current o-60 hover-accent-color-light\" height=\"22px\" viewBox=\"0 0 24 24\" width=\"22px\" xmlns=\"http://www.w3.org/2000/svg\"\u003e\u003cpath d=\"M0 0h24v24H0z\" fill=\"none\"/\u003e\u003cpath d=\"M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z\" fill=\"currentColor\"/\u003e\u003c/svg\u003e\u003c/a\u003e\u003c/h2\u003e\n\u003cpre tabindex=\"0\"\u003e\u003ccode\u003e  - type: activeScan-policy            # Defines a new active scan policy which can be used by later activeScan related jobs\n    parameters:\n      name:                            # String: Name of the policy, mandatory\n    policyDefinition:                  # The policy definition\n      defaultStrength:                 # String: The default Attack Strength for all rules, one of Low, Medium, High, Insane (not recommended), default: Medium\n      defaultThreshold:                # String: The default Alert Threshold for all rules, one of Off, Low, Medium, High, default: Medium\n      rules:                           # A list of one or more active scan rules and associated settings which override the defaults\n      - id:                            # Int: The rule id as per https://www.zaproxy.org/docs/alerts/\n        name:                          # Comment: The name of the rule for documentation purposes - this is not required or actually used\n        strength:                      # String: The Attack Strength for this rule, one of Low, Medium, High, Insane, default: Medium\n        threshold:                     # String: The Alert Threshold for this rule, one of Off, Low, Medium, High, default: Medium\n\u003c/code\u003e\u003c/pre\u003e",
-    "content": "automation framework activescanpolicy job defines active scan policy can used later plan by related jobs like activescan yaml type: new which parameters: name: string: name mandatory policydefinition: definition defaultstrength: default attack strength all rules one low medium high insane not recommended default: defaultthreshold: alert threshold off rules: list more associated settings override defaults id: int: rule id per https:wwwzaproxyorgdocsalerts comment: documentation purposes required actually strength: threshold: "
+    "summary": "\u003ch1 id=\"automation-framework---activescan-policy-job\"\u003eAutomation Framework - activeScan-policy Job\u003c/h1\u003e\n\u003cp\u003eThis job defines an active scan policy. This policy can be used later in the plan by active scan related jobs, like \u003ca href=\"/docs/desktop/addons/automation-framework/job-ascan/\"\u003eactiveScan\u003c/a\u003e job.\u003c/p\u003e\n\n\u003ch2 id=\"yaml\"\u003eYAML \u003ca class=\"header-link\" href=\"#yaml\"\u003e\u003csvg class=\"fill-current o-60 hover-accent-color-light\" height=\"22px\" viewBox=\"0 0 24 24\" width=\"22px\" xmlns=\"http://www.w3.org/2000/svg\"\u003e\u003cpath d=\"M0 0h24v24H0z\" fill=\"none\"/\u003e\u003cpath d=\"M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76 0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71 0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71 0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76 0 5-2.24 5-5s-2.24-5-5-5z\" fill=\"currentColor\"/\u003e\u003c/svg\u003e\u003c/a\u003e\u003c/h2\u003e\n\u003cpre tabindex=\"0\"\u003e\u003ccode\u003e  - type: activeScan-policy            # Defines a new active scan policy which can be used by later activeScan related jobs\n    parameters:\n      name:                            # String: Name of the policy, mandatory\n    policyDefinition:                  # The policy definition\n      defaultStrength:                 # String: The default Attack Strength for all rules, one of Low, Medium, High, Insane (not recommended), default: Medium\n      defaultThreshold:                # String: The default Alert Threshold for all rules, one of Off, Low, Medium, High, default: Medium\n      rules:                           # A list of one or more active scan rules and associated settings which override the defaults\n      - id:                            # Int: The rule id as per https://www.zaproxy.org/docs/alerts/\n        name:                          # Comment: The name of the rule for documentation purposes - this is not required or actually used\n        strength:                      # String: The Attack Strength for this rule, one of Low, Medium, High, Insane, default: Medium\n        threshold:                     # String: The Alert Threshold for this rule, one of Off, Low, Medium, High, default: Medium\n    enabled:                           # Bool: If set to false the job will not be run, default: true\n    alwaysRun:                         # Bool: If set and the job is enabled then it will run even if the plan exits early, default: false\n\u003c/code\u003e\u003c/pre\u003e",
+    "content": "automation framework activescanpolicy job defines active scan policy can used later plan by related jobs like activescan yaml type: new which parameters: name: string: name mandatory policydefinition: definition defaultstrength: default attack strength all rules one low medium high insane not recommended default: defaultthreshold: alert threshold off rules: list more associated settings override defaults id: int: rule id per https:wwwzaproxyorgdocsalerts comment: documentation purposes required actually strength: threshold: enabled: bool: set false will run true alwaysrun: enabled then even exits early "
     },
 {
     "url": "/docs/desktop/addons/automation-framework/job-pscanwait/",
@@ -2589,7 +2589,7 @@
     "keywords": ["","-","activescan","automation","framework","job"],
     "tags": null,
     "summary": "\u003ch1 id=\"automation-framework---activescan-job\"\u003eAutomation Framework - activeScan Job\u003c/h1\u003e\n\u003cp\u003eThis job runs the active scanner. This actively attacks your applications and should therefore only be used against applications that you have permission to test.\u003c/p\u003e\n\u003cp\u003eIt is covered in the video: \u003ca href=\"https://youtu.be/hcftgjz_Vgc\"\u003eZAP Chat 12 Automation Framework Part 6 - Delays and Active Scan\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eBy default this job will actively scan the first context defined in the \u003ca href=\"/docs/desktop/addons/automation-framework/environment/\"\u003eenvironment\u003c/a\u003e and so none of the parameters are mandatory.\u003c/p\u003e",
-    "content": "automation framework activescan job runs active scanner actively attacks your applications should therefore only used against that you have permission test covered video: zap chat 12 part delays scan by default will first context defined environment none parameters mandatory supports monitor tests yaml type: target parameters: context: string: name attack default: user: optional user use authentication must env policy: policy maxruledurationinmins: int: max time minutes any individual rule allowed run unlimited maxscandurationinmins: addqueryparam: bool: set add extra query parameter requests do not one false defaultpolicy: delayinms: delay milliseconds between each request reduce strain handleanticsrftokens: then automatically handle anti csrf tokens injectpluginidinheader: relevant id injected into xzapscanid header scanheadersallrequests: headers include scanned threadperhost: number threads per host available processor cores maxalertsperrule: maximum alerts raise policydefinition: definition 39policy39 defaultstrength: strength all rules low medium high insane recommended defaultthreshold: alert threshold off rules: list more associated settings which override defaults id: https:wwwzaproxyorgdocsalerts name: documentation purposes required actually strength: threshold: note unless defaultthreshold policydefinition enabled start can previous activescanpolicy file has been put policies directory under zaps home data following class made addons provide access such reporting addon case from last regardless whether was started ui api key: activescandata class: activescanjobresultdata "
+    "content": "automation framework activescan job runs active scanner actively attacks your applications should therefore only used against that you have permission test covered video: zap chat 12 part delays scan by default will first context defined environment none parameters mandatory supports monitor tests yaml type: target parameters: context: string: name attack default: user: optional user use authentication must env policy: policy maxruledurationinmins: int: max time minutes any individual rule allowed run unlimited maxscandurationinmins: addqueryparam: bool: set add extra query parameter requests do not one false defaultpolicy: delayinms: delay milliseconds between each request reduce strain handleanticsrftokens: then automatically handle anti csrf tokens injectpluginidinheader: relevant id injected into xzapscanid header scanheadersallrequests: headers include scanned threadperhost: number threads per host available processor cores maxalertsperrule: maximum alerts raise policydefinition: definition 39policy39 defaultstrength: strength all rules low medium high insane recommended defaultthreshold: alert threshold off rules: list more associated settings which override defaults id: https:wwwzaproxyorgdocsalerts name: documentation purposes required actually strength: threshold: enabled: true alwaysrun: enabled even plan exits early note unless defaultthreshold policydefinition start can previous activescanpolicy file has been put policies directory under zaps home data following class made addons provide access such reporting addon case from last regardless whether was started ui api key: activescandata class: activescanjobresultdata "
     },
 {
     "url": "/docs/desktop/addons/client-side-integration/internals/",
@@ -2685,7 +2685,7 @@
     "keywords": ["","-","automation","delay","framework","job"],
     "tags": null,
     "summary": "\u003ch1 id=\"automation-framework---delay-job\"\u003eAutomation Framework - delay Job\u003c/h1\u003e\n\u003cp\u003eThis job waits for a specified time unless one of a specific set of conditions are met.\u003cbr\u003e\nIt can be used to wait for regression tests being proxied through ZAP in order to explore your application more thoroughly.\u003c/p\u003e\n\u003cp\u003eIt is covered in the video: \u003ca href=\"https://youtu.be/hcftgjz_Vgc\"\u003eZAP Chat 12 Automation Framework Part 6 - Delays and Active Scan\u003c/a\u003e.\u003c/p\u003e",
-    "content": "automation framework delay job waits specified time unless one specific set conditions met can used wait regression tests being proxied through zap order explore your application more thoroughly covered video: chat 12 part delays active scan parameter supports formats hh:mm:ss mm:ss ss seconds 1:30 minute 30 2:20:30 hours 20 minutes supported are: creation file given by optional filename calling static method: orgzaproxyaddonautomationjobsdelayjobsetendjobtrue api end point: action enddelayjob yaml type: pause plan period event created method called point parameters: time: string: format any 39hh:mm:ss39 39mm:ss39 39ss39 default: filename: name which will cause early empty "
+    "content": "automation framework delay job waits specified time unless one specific set conditions met can used wait regression tests being proxied through zap order explore your application more thoroughly covered video: chat 12 part delays active scan parameter supports formats hh:mm:ss mm:ss ss seconds 1:30 minute 30 2:20:30 hours 20 minutes supported are: creation file given by optional filename calling static method: orgzaproxyaddonautomationjobsdelayjobsetendjobtrue api end point: action enddelayjob yaml type: pause plan period event created method called point parameters: time: string: format any 39hh:mm:ss39 39mm:ss39 39ss39 default: filename: name which will cause early empty enabled: bool: false not run true alwaysrun: enabled then even exits "
     },
 {
     "url": "/docs/desktop/start/features/breakpoints/",
@@ -2725,7 +2725,7 @@
     "keywords": ["","-","automation","exitstatus","framework","job"],
     "tags": null,
     "summary": "\u003ch1 id=\"automation-framework---exitstatus-job\"\u003eAutomation Framework - exitStatus Job\u003c/h1\u003e\n\u003cp\u003eThis job sets \u003ca href=\"/docs/desktop/addons/automation-framework/#exit-codes\"\u003eZAP\u0026rsquo;s exit code\u003c/a\u003e based on scan results. It also allows you to choose which exit values are used. It should typically be the last job in a plan.\u003c/p\u003e\n\u003cp\u003eIf warnLevel or errorLevel are set then the job will report a warning or error if any alerts\nare raised which have the same risk level or greater.\u003c/p\u003e",
-    "content": "automation framework exitstatus job sets zaps exit code based scan results also allows you choose which values used should typically last plan warnlevel errorlevel set then will report warning error any alerts raised have same risk level greater by default when zap run cmd autorun options there errors warnings everything ok these can overriden exitvalue exitvalues together warnerrorlevel completely independently them yaml type: parameters: errorlevel: string: informational low medium high default: not warnlevel: okexitvalue: integer: value all errorexitvalue: warnexitvalue: "
+    "content": "automation framework exitstatus job sets zaps exit code based scan results also allows you choose which values used should typically last plan warnlevel errorlevel set then will report warning error any alerts raised have same risk level greater by default when zap run cmd autorun options there errors warnings everything ok these can overriden exitvalue exitvalues together warnerrorlevel completely independently them yaml type: parameters: errorlevel: string: informational low medium high default: not warnlevel: okexitvalue: integer: value all errorexitvalue: warnexitvalue: enabled: bool: false true alwaysrun: enabled even exits early "
     },
 {
     "url": "/docs/desktop/start/features/callbacks/",
@@ -2797,7 +2797,7 @@
     "keywords": ["","-","automation","framework","job","requestor"],
     "tags": null,
     "summary": "\u003ch1 id=\"automation-framework---requestor-job\"\u003eAutomation Framework - requestor Job\u003c/h1\u003e\n\u003cp\u003eThis job sends specifically crafted requests to a target url, with a custom request method and body. The user can also specify an expected response code, against which the actual response is compared, and the user is warned in case it does not match. The user can add additional headers to the request e.g. Authorization Tokens, etc.\u003c/p\u003e",
-    "content": "automation framework requestor job sends specifically crafted requests target url custom request method body user can also specify expected response code against which actual compared warned case does not match add additional headers eg authorization tokens etc covered video: zap chat 09 part yaml type: used send specific targets parameters: user: string: optional use authenticated must defined env requests: list make url: mandatory made name: name documentation only method: nonempty default: get httpversion: http version http11 headers: include 34header1:value134 data: data supports vars responsecode: int: will matched "
+    "content": "automation framework requestor job sends specifically crafted requests target url custom request method body user can also specify expected response code against which actual compared warned case does not match add additional headers eg authorization tokens etc covered video: zap chat 09 part yaml type: used send specific targets parameters: user: string: optional use authenticated must defined env requests: list make url: mandatory made name: name documentation only method: nonempty default: get httpversion: http version http11 headers: include 34header1:value134 data: data supports vars responsecode: int: will matched enabled: bool: set false run true alwaysrun: enabled then even plan exits early "
     },
 {
     "url": "/docs/desktop/start/features/custompages/",
@@ -8165,7 +8165,7 @@
     "keywords": ["","marketplace","zap"],
     "tags": null,
     "summary": "\u003cp\u003eZAP Marketplace contains ZAP add-ons which have been written by the ZAP team and the community. The add-ons help to extend the functionalities of ZAP.\nIf you are using the latest version of ZAP then you can browse and download add-ons from within ZAP by clicking on this button in the toolbar:\u003c/p\u003e",
-    "content": "zap marketplace contains addons which have been written by team community help extend functionalities you using latest version then can browse download from within clicking button toolbar: also import that downloaded manually via file load addon menu option desktop name id status author last updated access control testing adds set tools web applications accesscontrol 10 alpha dev 20240325 active scanner rules release ascanrules 72 20250620 ascanrulesalpha 49 beta ascanrulesbeta 59 advanced sqlinjection injection bundle sqli derived sqlmap sqliplugin 16 andrea pompili yhawke 20250430 ajax spider allows sites make heavy use javascript crawljax spiderajax 23250 20250710 alert filters automate changing risk levels alertfilters 24 all one notes simple extension view pane allinonenotes david vassallo 20211007 attack surface detector analyzes application source code generate endpoints used penetration attacksurfacedetector 114 secure decisions matthew deletto 20190307 authentication helper helps identify up handling authhelper 0270 20250703 statistics records logged inout contexts scope authstats automation framework 0500 beanshell console provides browser render html responses like browserview 20230313 bug tracker bugtracker 20220923 call graph user selected resources callgraph colm o39flaherty home handles calls services callhome 0140 20250109 client side integration exposes information firefox chrome extensions 0160 collection: pentester pack collection ideal pentesters packpentester 010 20220512 scan just containing packscanrules 001 20220513 common library other commonlib 1340 20250704 scripts useful communityscripts 19 20240701 core language files translations corelang 15 20220214 custom payloads ability add edit remove ie scanners custompayloads 20250115 database engines related infrastructure 080 20250304 development 0100 20250515 diff displays dialog showing differences between requests uses diffutils diffmatchpatch 17 directory list v10 names forced fuzzer directorylistv1 v23 lists directorylistv23 lc lower case directorylistv23lc dom xss rule domxss 22 aabha biyani encoder encodedecodehash support scripted processors 170 eval villain when launched evalvillain 040 dennis goodlett 20241125 fileupload detect upload them find vulnerabilities 121 ksasan preetkaran20gmailcom 20231023 browsing directories owasp dirbuster tool bruteforce fuzzai 20240924 fuzzdb offensive backdoors manual may flagged antivirus fuzzdboffensive 20240111 fuzz 13160 getting started guide short gettingstarted graalvm engine scripting graaljs 090 graphql inspect 0280 20250326 groovy 320 20240411 grpc decode protobuf messages 020 20240702 arabic helparsa crowdin 20220118 bosnian helpbsba 20180208 chinese simplified helpzhcn english 20 20250325 filipino helpfilph french helpfrfr indonesian helpidid japanese helpjajp malay helpmsmy portuguese brazilian helpptbr 11 russian helpruru 20220224 spanish helpeses turkish helptrtr highlighter highlight strings request response tabs hud heads display 0190 20240507 image location privacy passive imagelocationscanner jay ball veggiespam 20250619 importexport export functionality exim thatsn0tmysite invoke external passing context such urls parameters json shows nicely formatted jsonview juha kiveks 20230907 jwt 103 20230102 kotlin 110 stackhawk engineering levoai build openapi specs traffic 030 20240710 linux webdrivers webdriverlinux 148 20250716 macos webdrivermacos map local mapping content chosen maplocal keindel andrey maksimov 20231005 neonmarker colors history table items based tags 180 kingthorin 20250214 network networking capabilities 0220 oast exploit outofband online menus onlinemenu 14 imports spiders definitions 45 plus joanna bona nathalie bouchahine artur grzesica mohammad kamar markus kiss michal materniak marcin spiewak sda se open industry solutions 20250324 parameter digger hidden unlinked finding cache poisoning paramdigger arkaprabha chakraborty 20240715 scanning pscan pscanrules 65 pscanrulesalpha pscanrulesbeta 44 plugnhack configuration supports mozilla standard: https:developermozillaorgenusdocsplugnhack 13 20221027 postman collections 060 20250203 python templates included jython quick start tab quickly test target quickstart 52 reflect finds reflected 0011 caleb kinney 20210219 regular expression tester expressions regextester replacer easy way replace 20250110 report generation official reports 0390 requester send 780 surikato retest presenceabsence previously generated alerts 0110 retirejs vulnerable outdated packages retire 0470 nikita mundhada reveal show fields enable disabled revisit site any time past session ruby jruby saml 20221028 policies standard scanpolicies script jsr 223 languages 45120 selenium webdriver provider includes htmlunit 15390 sequence gives possibility defining scanned serversent events sse communication 20240521 soap scans wsdl 25 alberto albertov91 43 automatically uris 0150 svn svndigger technology detection various fingerprints identifiers wappalyzer 21470 20250715 tips tricks token analysis analyze pseudo random tokens those csrf protection tokengen treetools tree carl sampson value generator define field values submitting app added modified enableddisabled deleted formhandler 670 viewstate aspjsf decoder editor calum hutton websockets websocket 33 windows webdriverwindows zest graphical security zaps macro steroids 4880 "
+    "content": "zap marketplace contains addons which have been written by team community help extend functionalities you using latest version then can browse download from within clicking button toolbar: also import that downloaded manually via file load addon menu option desktop name id status author last updated access control testing adds set tools web applications accesscontrol 10 alpha dev 20240325 active scanner rules release ascanrules 72 20250620 ascanrulesalpha 49 beta ascanrulesbeta 59 advanced sqlinjection injection bundle sqli derived sqlmap sqliplugin 16 andrea pompili yhawke 20250430 ajax spider allows sites make heavy use javascript crawljax spiderajax 23250 20250710 alert filters automate changing risk levels alertfilters 24 all one notes simple extension view pane allinonenotes david vassallo 20211007 attack surface detector analyzes application source code generate endpoints used penetration attacksurfacedetector 114 secure decisions matthew deletto 20190307 authentication helper helps identify up handling authhelper 0270 20250703 statistics records logged inout contexts scope authstats automation framework 0510 20250717 beanshell console provides browser render html responses like browserview 20230313 bug tracker bugtracker 20220923 call graph user selected resources callgraph colm o39flaherty home handles calls services callhome 0140 20250109 client side integration exposes information firefox chrome extensions 0160 collection: pentester pack collection ideal pentesters packpentester 010 20220512 scan just containing packscanrules 001 20220513 common library other commonlib 1340 20250704 scripts useful communityscripts 19 20240701 core language files translations corelang 15 20220214 custom payloads ability add edit remove ie scanners custompayloads 20250115 database engines related infrastructure 080 20250304 development 0100 20250515 diff displays dialog showing differences between requests uses diffutils diffmatchpatch 17 directory list v10 names forced fuzzer directorylistv1 v23 lists directorylistv23 lc lower case directorylistv23lc dom xss rule domxss 22 aabha biyani encoder encodedecodehash support scripted processors 170 eval villain when launched evalvillain 040 dennis goodlett 20241125 fileupload detect upload them find vulnerabilities 121 ksasan preetkaran20gmailcom 20231023 browsing directories owasp dirbuster tool bruteforce fuzzai 20240924 fuzzdb offensive backdoors manual may flagged antivirus fuzzdboffensive 20240111 fuzz 13160 getting started guide short gettingstarted graalvm engine scripting graaljs 090 graphql inspect 0280 20250326 groovy 320 20240411 grpc decode protobuf messages 020 20240702 arabic helparsa crowdin 20220118 bosnian helpbsba 20180208 chinese simplified helpzhcn english 20 20250325 filipino helpfilph french helpfrfr indonesian helpidid japanese helpjajp malay helpmsmy portuguese brazilian helpptbr 11 russian helpruru 20220224 spanish helpeses turkish helptrtr highlighter highlight strings request response tabs hud heads display 0190 20240507 image location privacy passive imagelocationscanner jay ball veggiespam 20250619 importexport export functionality exim thatsn0tmysite invoke external passing context such urls parameters json shows nicely formatted jsonview juha kiveks 20230907 jwt 103 20230102 kotlin 110 stackhawk engineering levoai build openapi specs traffic 030 20240710 linux webdrivers webdriverlinux 148 20250716 macos webdrivermacos map local mapping content chosen maplocal keindel andrey maksimov 20231005 neonmarker colors history table items based tags 180 kingthorin 20250214 network networking capabilities 0220 oast exploit outofband online menus onlinemenu 14 imports spiders definitions 45 plus joanna bona nathalie bouchahine artur grzesica mohammad kamar markus kiss michal materniak marcin spiewak sda se open industry solutions 20250324 parameter digger hidden unlinked finding cache poisoning paramdigger arkaprabha chakraborty 20240715 scanning pscan pscanrules 65 pscanrulesalpha pscanrulesbeta 44 plugnhack configuration supports mozilla standard: https:developermozillaorgenusdocsplugnhack 13 20221027 postman collections 060 20250203 python templates included jython quick start tab quickly test target quickstart 52 reflect finds reflected 0011 caleb kinney 20210219 regular expression tester expressions regextester replacer easy way replace 20250110 report generation official reports 0390 requester send 780 surikato retest presenceabsence previously generated alerts 0110 retirejs vulnerable outdated packages retire 0470 nikita mundhada reveal show fields enable disabled revisit site any time past session ruby jruby saml 20221028 policies standard scanpolicies script jsr 223 languages 45120 selenium webdriver provider includes htmlunit 15390 sequence gives possibility defining scanned serversent events sse communication 20240521 soap scans wsdl 25 alberto albertov91 43 automatically uris 0150 svn svndigger technology detection various fingerprints identifiers wappalyzer 21470 20250715 tips tricks token analysis analyze pseudo random tokens those csrf protection tokengen treetools tree carl sampson value generator define field values submitting app added modified enableddisabled deleted formhandler 670 viewstate aspjsf decoder editor calum hutton websockets websocket 33 windows webdriverwindows zest graphical security zaps macro steroids 4880 "
     },
 {
     "url": "/docs/zap-ownership/",