问题标签 [security-testing]
For questions regarding programming in ECMAScript (JavaScript/JS) and its various dialects/implementations (excluding ActionScript). Note JavaScript is NOT the same as Java! Please include all relevant tags on your question; e.g., [node.js], [jquery], [json], [reactjs], [angular], [ember.js], [vue.js], [typescript], [svelte], etc.
security - ZAP security testing in Mobile - unable to launch app or browser via connected wifi after changing Proxy to manual in mobile ( both android and IOS )
First I did the below mentioned steps:
" First you need to install the certificate in your mobile device for ZAP to record it. You can do that by following steps:
Open ZAP Go to Tools Click in Options then click in Dynamic SSL Certificate and generate the new and save it. Then you need to send that certificate to your device, make sure you name the file as "zap" In the local proxy, set the address "empty" Then, you need to configure your android/ios application network configuration You can do that by following steps:
Go to advance setting of the network Click in proxy and set it as "manual" Then, you need to enter the proxy server to your computer IP address and port to proxy set in the ZAP."
After these I tried to open browser and app. I am unable to open it. I am getting weak security warning and "Privacy Warning" in my mobile.
Please help me to solve this issue.
security - 是否可以链接 Owasp Zap 和 Browserstack、Crossbrowsertesting.com 或 SeleniumGrid?
细节:
目前,我使用 Owaspzap 连接到 Postman,并通过本地的 api。但我们也想连接到 Browserstack 或 Crossbrowsertesting.com 来测试我们的移动页面是否存在安全问题。即使经过深入研究,我还没有找到通过代理将 Browserstack 和 Owasp Zap 相互链接的方法。当然,可以使用适当的解决方案在直接物理硬件(即移动设备)上测试 Owasp Zap。
但是是否也可以建立与各种浏览器解决方案(例如 Browserstack 或 Crossbrowsertesting)的连接?
在这种情况下,Selenium Grid 方法也将非常有趣。
问题:
是否有可能通过 Owasp Zap Api 将 Browserstack 或 Crossbrowsertesting.com 与 Selenium Grid 链接起来?