├── .gitattributes ├── .github ├── dependabot.yml └── workflows │ ├── ci.yml │ ├── codeql.yml │ ├── crowdin-upload-files.yml │ ├── prepare-release-add-on.yml │ └── release-add-on.yml ├── .gitignore ├── CHANGELOG.md ├── CONTRIBUTING.md ├── LICENSE ├── README.md ├── RELEASING.md ├── active ├── Cross Site WebSocket Hijacking.js ├── JWT None Exploit.js ├── RCE.py ├── README.md ├── SSTI.js ├── SSTI.py ├── TestInsecureHTTPVerbs.py ├── User defined attacks.js ├── bxss.py ├── corsair.py ├── cve-2019-5418.js └── gof_lite.js ├── authentication ├── CasAuthentication.js ├── DjangoAuthentication.js ├── GetsWithRedirectThenPost.js ├── KratosApiAuthentication.js ├── KratosBrowserAuthentication.js ├── MagentoAuthentication.js ├── MediaWikiApiAuthentication.js ├── MediaWikiAuthentication.js ├── OfflineTokenRefresh.js ├── README.md └── TwoStepAuthentication.js ├── build.gradle.kts ├── encode-decode ├── JwtDecode.js ├── README.md └── double-spacer.js ├── extender ├── HTTP Message Logger.js ├── README.md ├── ScanMonitor.js ├── Simple Reverse Proxy.js ├── ZAP onEvent Handler.js └── arpSyndicateSubdomainDiscovery.js ├── gradle.properties ├── gradle ├── crowdin.yml └── wrapper │ ├── gradle-wrapper.jar │ └── gradle-wrapper.properties ├── gradlew ├── gradlew.bat ├── httpfuzzerprocessor ├── FuzzerStopOnStatusCode.js ├── README.md ├── addCacheBusting.js ├── add_msgs_sites_tree.js ├── http_status_code_filter.py ├── randomUserAgent.js ├── random_x_forwarded_for_ip.js ├── showDifferences.js └── unexpected_responses.js ├── httpsender ├── AddBearerTokenHeader.js ├── Alert on HTTP Response Code Errors.js ├── Alert on Unexpected Content Types.js ├── Capture and Replace Anti CSRF Token.js ├── LogMessages.js ├── README.md ├── RsaEncryptPayloadForZap.py ├── RsaSigningForZap.py ├── UpgradeHttp1To2.js ├── add-extra-headers.js ├── add-more-headers.js ├── add_header_request.py ├── add_header_response.py ├── aws-signing-for-zap.py ├── change_request.py ├── change_response.py ├── fingerprinter.js ├── full-session-n-csrf-nashorn.js ├── greenbone-maintain-auth.js ├── inject-xss.js ├── inject_js_in_html_page.js ├── juice-shop-maintain-auth.js ├── keep-cookies-going.js └── maintain-jwt.js ├── other ├── CHANGELOG.md ├── README.md ├── af-plans │ ├── ApiScanExample.yaml │ ├── AuthCheckBodgeit.yaml │ ├── BaselineExample.yaml │ ├── BrowserAuthTest.yaml │ ├── FullScanBrokenCrystals.yaml │ ├── FullScanDvwaAuth.yaml │ ├── FullScanExample.yaml │ ├── README.md │ ├── ScriptEnvVarAccess.yaml │ └── juiceshop-selenium-auth │ │ ├── JuiceShopAuthentication.js │ │ ├── JuiceShopHttpSender.js │ │ ├── JuiceShopReset.js │ │ ├── JuiceShopSelenium.js │ │ ├── JuiceShopSession.js │ │ ├── README.md │ │ ├── js-auth.bat │ │ ├── js-auth.sh │ │ ├── js-test.bat │ │ ├── js-test.sh │ │ ├── juiceshop-auth.yaml │ │ └── juiceshop-test.yaml ├── api │ ├── mass-baseline │ │ ├── README.md │ │ ├── docker-wrapper │ │ ├── mass-baseline-default.conf │ │ ├── mass-baseline.sh │ │ ├── mass-basescore.py │ │ └── mass-basewrapper.sh │ └── sdlc-integration │ │ ├── README.md │ │ ├── core │ │ ├── __init__.py │ │ ├── config.py │ │ ├── scan_module │ │ │ ├── __init__.py │ │ │ └── scan.py │ │ ├── setup_module │ │ │ ├── __init__.py │ │ │ ├── proxy_scripts │ │ │ │ └── zapAddCsp.js │ │ │ └── zap_session.py │ │ └── shared.py │ │ ├── demos │ │ ├── rules_config_demo.txt │ │ ├── shutdown-zap.sh │ │ ├── start-zap.sh │ │ └── targets_file_demo.txt │ │ ├── requirements.txt │ │ ├── run_scan.py │ │ └── run_session_setup.py ├── scan-hooks │ ├── LogMessagesHook.py │ ├── README.md │ ├── dynatrace │ │ └── DynatraceHooks.py │ ├── export_session.py │ └── template.py └── tips │ ├── README.md │ ├── replacer │ ├── README.md │ └── match-and-replace │ │ ├── README.md │ │ └── images │ │ ├── bypass-waf.png │ │ ├── emulate-ios.png │ │ ├── false-true-admin.png │ │ ├── false-true-email.png │ │ ├── finding-idor.png │ │ ├── finding-xss-referer.png │ │ ├── finding-xss-user.png │ │ ├── hackerone-header.png │ │ ├── log4shell.png │ │ ├── shellshock.png │ │ ├── show-hidden-1.png │ │ ├── show-hidden-2.png │ │ ├── show-hidden-3.png │ │ └── xbb-header.png │ └── selenium │ ├── README.md │ └── edge │ ├── README.md │ └── images │ ├── edge_file_location.png │ ├── edge_properties.png │ ├── edge_shortcut_properties.png │ ├── launch.png │ └── selenium_options.png ├── passive ├── CookieHTTPOnly.js ├── Find Credit Cards.js ├── Find Emails.js ├── Find HTML Comments.js ├── Find Hashes.js ├── Find IBANs.js ├── Find Internal IPs.js ├── HUNT.py ├── JavaDisclosure.js ├── Mutliple Security Header Check.js ├── README.md ├── RPO.js ├── Report non static sites.js ├── SQL injection detection.js ├── Server Header Disclosure.js ├── Telerik Using Poor Crypto.js ├── Upload form discovery.js ├── X-Powered-By_header_checker.js ├── clacks.js ├── detect_csp_notif_and_reportonly.js ├── detect_samesite_protection.js ├── f5_bigip_cookie_internal_ip.js ├── find base64 strings.js ├── find_reflected_params.py ├── google_api_keys_finder.js └── s3.js ├── payloadgenerator ├── README.md ├── associated_fields.py ├── bruteforce.py └── securerandom.js ├── payloadprocessor ├── README.md ├── deflate_gzip_encoding.py ├── sqlmap - apostrophemask.py ├── sqlmap - apostrophenullencode.py ├── sqlmap - chardoubleencode.py ├── sqlmap - charencode.py ├── sqlmap - charunicodeencode.py ├── sqlmap - equaltolike.py ├── sqlmap - lowercase.py ├── sqlmap - percentage.py ├── sqlmap - randomcase.py ├── sqlmap - space2comments.py └── to-hex.js ├── proxy ├── Add spoofed CORS origin.zst ├── Change all POSTs to GETs.zst ├── Convert HTTPS links to HTTP.zst ├── Disable browser XSS protection.zst ├── Drop requests by response code.js ├── Drop requests not in scope.js ├── Drop requests via URL regexes.zst ├── Emulate Android.js ├── Emulate Chrome.js ├── Emulate Firefox.js ├── Emulate IE.js ├── Emulate Safari.js ├── Emulate iOS.js ├── Hide Referer header.zst ├── Ignore cookies.zst ├── README.md ├── Remove CSP.zst ├── Remove HSTS headers.zst ├── Remove all JavaScript form validation.zst ├── Remove data validation tags in response body.zst ├── Remove object tags in response body.zst ├── Remove script tags in response body.zst ├── Remove secure flag from cookies.zst ├── Replace in request body.zst ├── Replace in request header.zst ├── Replace in request or response body.js ├── Replace in response body.zst ├── Replace in response header.zst ├── Require non-cached response.zst ├── Require non-compressed responses.zst ├── Return fake response.js ├── Show commented out in response body.zst ├── Useragent Replace.js ├── WAF_Bypass.js └── dropCookiesSelectively.js ├── selenium ├── FillOTPInMFA.js ├── README.md └── Selenium Juice Shop.js ├── sequence └── README.md ├── session ├── Juice Shop Session Management.js └── README.md ├── settings.gradle.kts ├── src ├── main │ ├── java │ │ └── org │ │ │ └── zaproxy │ │ │ └── zap │ │ │ └── extension │ │ │ └── communityScripts │ │ │ └── ExtensionCommunityScripts.java │ ├── javahelp │ │ └── org │ │ │ └── zaproxy │ │ │ └── zap │ │ │ └── extension │ │ │ └── communityScripts │ │ │ └── resources │ │ │ ├── help │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_ar_SA │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_ar_SA.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_az_AZ │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_az_AZ.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_bs_BA │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_bs_BA.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_da_DK │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_da_DK.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_de_DE │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_de_DE.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_el_GR │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_el_GR.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_es_ES │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_es_ES.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_fa_IR │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_fa_IR.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_fil_PH │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_fil_PH.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_fr_FR │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_fr_FR.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_hi_IN │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_hi_IN.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_hr_HR │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_hr_HR.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_hu_HU │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_hu_HU.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_id_ID │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_id_ID.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_it_IT │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_it_IT.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_ja_JP │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_ja_JP.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_ko_KR │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_ko_KR.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_ms_MY │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_ms_MY.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_pl_PL │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_pl_PL.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_pt_BR │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_pt_BR.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_ro_RO │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_ro_RO.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_ru_RU │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_ru_RU.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_si_LK │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_si_LK.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_sk_SK │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_sk_SK.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_sl_SI │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_sl_SI.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_sq_AL │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_sq_AL.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_sr_CS │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_sr_CS.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_sr_SP │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_sr_SP.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_tr_TR │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_tr_TR.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ ├── help_ur_PK │ │ │ ├── contents │ │ │ │ ├── communityScripts.html │ │ │ │ └── images │ │ │ │ │ └── script-share.png │ │ │ ├── helpset_ur_PK.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ │ │ └── help_zh_CN │ │ │ ├── contents │ │ │ ├── communityScripts.html │ │ │ └── images │ │ │ │ └── script-share.png │ │ │ ├── helpset_zh_CN.hs │ │ │ ├── index.xml │ │ │ ├── map.jhm │ │ │ └── toc.xml │ └── resources │ │ └── org │ │ └── zaproxy │ │ └── zap │ │ └── extension │ │ └── communityScripts │ │ └── resources │ │ ├── Messages.properties │ │ ├── Messages_ar_SA.properties │ │ ├── Messages_az_AZ.properties │ │ ├── Messages_bn_BD.properties │ │ ├── Messages_bs_BA.properties │ │ ├── Messages_ceb_PH.properties │ │ ├── Messages_da_DK.properties │ │ ├── Messages_de_DE.properties │ │ ├── Messages_el_GR.properties │ │ ├── Messages_es_ES.properties │ │ ├── Messages_fa_IR.properties │ │ ├── Messages_fil_PH.properties │ │ ├── Messages_fr_FR.properties │ │ ├── Messages_ha_HG.properties │ │ ├── Messages_he_IL.properties │ │ ├── Messages_hi_IN.properties │ │ ├── Messages_hr_HR.properties │ │ ├── Messages_hu_HU.properties │ │ ├── Messages_id_ID.properties │ │ ├── Messages_it_IT.properties │ │ ├── Messages_ja_JP.properties │ │ ├── Messages_ko_KR.properties │ │ ├── Messages_mk_MK.properties │ │ ├── Messages_ms_MY.properties │ │ ├── Messages_nb_NO.properties │ │ ├── Messages_nl_NL.properties │ │ ├── Messages_pcm_NG.properties │ │ ├── Messages_pl_PL.properties │ │ ├── Messages_pt_BR.properties │ │ ├── Messages_pt_PT.properties │ │ ├── Messages_ro_RO.properties │ │ ├── Messages_ru_RU.properties │ │ ├── Messages_si_LK.properties │ │ ├── Messages_sk_SK.properties │ │ ├── Messages_sl_SI.properties │ │ ├── Messages_sq_AL.properties │ │ ├── Messages_sr_CS.properties │ │ ├── Messages_sr_SP.properties │ │ ├── Messages_tr_TR.properties │ │ ├── Messages_uk_UA.properties │ │ ├── Messages_ur_PK.properties │ │ ├── Messages_vi_VN.properties │ │ ├── Messages_yo_NG.properties │ │ ├── Messages_zh_CN.properties │ │ ├── Messages_zh_TW.properties │ │ └── cve-2021-22214.yml └── test │ └── java │ └── org │ └── zaproxy │ └── VerifyScripts.java ├── standalone ├── Active scan rule list.js ├── Juice shop authentication by form.js ├── Juice shop authentication by google.js ├── Loop through alerts.js ├── Loop through history table.js ├── Open Fortune 500 websites in a browser.zst ├── Persona Create Account.zst ├── PrivateMethodAccess.js ├── README.md ├── SecurityCrawlMazeScore.js ├── Split download extract.rb ├── Traverse sites tree.js ├── WebSocketExportToOrg.py ├── alertAndPluginDetails.js ├── devTools.js ├── domainFinder.js ├── enableDebugLogging.js ├── example_library.js ├── extHistoryEnumerator.py ├── historySourceTagger.js ├── load_context_from_burp.py ├── load_function_example.js ├── past_cookies_jar.py ├── scan_rule_list.js ├── window_creation_template.js └── window_creation_template.py ├── targeted ├── ElasticSearchExploit.js ├── Find HTML comments.js ├── Find largest subtree.js ├── README.md ├── Remove 302s.js ├── Resend as a GET request.zst ├── SQLMapCommandGenerator.js ├── Search www.xssposed.org for known XSS.js ├── WordPress User Enumeration.js ├── curl_command_generator.js ├── cve-2021-22214.js ├── cve-2021-41773-apache-path-trav.js ├── dns-email-spoofing.js ├── json_csrf_poc_generator.js ├── request_to_xml.js └── search cvedetails using target server header.js ├── variant ├── AddUrlParams.js ├── CompoundCookies.js ├── JsonStrings.js ├── README.md └── param_name_variant.js ├── websocketfuzzerprocessor └── README.md └── websocketpassive └── README.md /.gitattributes: -------------------------------------------------------------------------------- 1 | * text=auto eol=lf 2 | 3 | *.conf text 4 | *.gradle text 5 | *.gradle.kts text 6 | *.java text 7 | *.js text 8 | *.md text 9 | *.properties text 10 | *.py text 11 | *.txt text 12 | *.zest text 13 | *.zst text 14 | 15 | *.bat text eol=crlf 16 | *.sh text 17 | gradlew text 18 | 19 | *.jar binary 20 | -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- 1 | version: 2 2 | updates: 3 | - package-ecosystem: "github-actions" 4 | directory: "/" 5 | schedule: 6 | interval: "monthly" 7 | groups: 8 | gha: 9 | applies-to: version-updates 10 | patterns: 11 | - "*" 12 | -------------------------------------------------------------------------------- /.github/workflows/ci.yml: -------------------------------------------------------------------------------- 1 | name: Java CI 2 | 3 | on: 4 | push: 5 | branches: 6 | - main 7 | pull_request: 8 | 9 | jobs: 10 | build: 11 | runs-on: ubuntu-latest 12 | strategy: 13 | matrix: 14 | java: [17, 22] 15 | 16 | steps: 17 | - uses: actions/checkout@v4 18 | - uses: actions/setup-java@v4 19 | with: 20 | distribution: 'temurin' 21 | java-version: ${{ matrix.java }} 22 | - uses: gradle/actions/setup-gradle@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0 23 | - run: ./gradlew assemble 24 | - run: ./gradlew check 25 | -------------------------------------------------------------------------------- /.github/workflows/codeql.yml: -------------------------------------------------------------------------------- 1 | name: "CodeQL" 2 | 3 | on: 4 | push: 5 | branches: 6 | - main 7 | pull_request: 8 | branches: 9 | - main 10 | 11 | jobs: 12 | analyze: 13 | name: Analyze 14 | runs-on: ubuntu-latest 15 | permissions: 16 | actions: read 17 | contents: read 18 | security-events: write 19 | 20 | strategy: 21 | fail-fast: false 22 | matrix: 23 | language: [ 'java', 'javascript', 'python', 'ruby' ] 24 | 25 | steps: 26 | - uses: actions/checkout@v4 27 | - uses: actions/setup-java@v4 28 | with: 29 | distribution: 'temurin' 30 | java-version: 17 31 | - uses: github/codeql-action/init@v3 32 | with: 33 | languages: ${{ matrix.language }} 34 | - uses: github/codeql-action/autobuild@v3 35 | - uses: github/codeql-action/analyze@v3 36 | with: 37 | category: "/language:${{matrix.language}}" -------------------------------------------------------------------------------- /.github/workflows/crowdin-upload-files.yml: -------------------------------------------------------------------------------- 1 | name: Crowdin Upload Files 2 | 3 | on: 4 | workflow_dispatch: 5 | 6 | jobs: 7 | upload: 8 | name: Upload Files 9 | runs-on: ubuntu-latest 10 | steps: 11 | - uses: actions/checkout@v4 12 | - name: Setup Java 13 | uses: actions/setup-java@v4 14 | with: 15 | distribution: 'temurin' 16 | java-version: 17 17 | - name: Upload Files 18 | env: 19 | CROWDIN_AUTH_TOKEN: ${{ secrets.ZAPBOT_CROWDIN_TOKEN }} 20 | run: ./gradlew crowdinUploadSourceFiles 21 | -------------------------------------------------------------------------------- /.github/workflows/prepare-release-add-on.yml: -------------------------------------------------------------------------------- 1 | name: Prepare Release Add-on 2 | 3 | on: 4 | workflow_dispatch: 5 | 6 | jobs: 7 | prepare-release: 8 | name: Prepare Release 9 | runs-on: ubuntu-latest 10 | steps: 11 | - uses: actions/checkout@v4 12 | with: 13 | fetch-depth: 0 14 | persist-credentials: false 15 | - name: Setup Java 16 | uses: actions/setup-java@v4 17 | with: 18 | distribution: 'temurin' 19 | java-version: 17 20 | - name: Prepare Release and Create Pull Request 21 | env: 22 | ZAPBOT_TOKEN: ${{ secrets.ZAPBOT_TOKEN }} 23 | run: ./gradlew createPullRequestRelease 24 | -------------------------------------------------------------------------------- /.github/workflows/release-add-on.yml: -------------------------------------------------------------------------------- 1 | name: Release Add-On 2 | 3 | on: 4 | push: 5 | branches: 6 | - main 7 | paths: 8 | - 'gradle.properties' 9 | 10 | jobs: 11 | release: 12 | name: Build and Release Add-On 13 | runs-on: ubuntu-latest 14 | steps: 15 | - uses: actions/checkout@v4 16 | with: 17 | fetch-depth: 0 18 | persist-credentials: false 19 | - name: Setup Java 20 | uses: actions/setup-java@v4 21 | with: 22 | distribution: 'temurin' 23 | java-version: 17 24 | - name: Generate Release State 25 | run: ./gradlew generateReleaseStateLastCommit 26 | - name: Build and Release Add-On 27 | env: 28 | ZAPBOT_TOKEN: ${{ secrets.ZAPBOT_TOKEN }} 29 | CROWDIN_AUTH_TOKEN: ${{ secrets.ZAPBOT_CROWDIN_TOKEN }} 30 | run: ./gradlew releaseAddOn 31 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # Gradle 2 | #------- 3 | .gradle 4 | /build 5 | /buildSrc/build 6 | 7 | # IDEA 8 | # ---- 9 | .idea 10 | .shelf 11 | /*.iml 12 | /*.ipr 13 | /*.iws 14 | /buildSrc/*.iml 15 | /buildSrc/*.ipr 16 | /buildSrc/*.iws 17 | /buildSrc/out 18 | /out 19 | 20 | # Eclipse 21 | # ------- 22 | *.pydevproject 23 | .metadata 24 | tmp/ 25 | *.tmp 26 | *.bak 27 | *.swp 28 | *~.nib 29 | local.properties 30 | .loadpath 31 | *.classpath 32 | *.project 33 | *.settings 34 | /bin 35 | RemoteSystemsTempFiles/ 36 | .externalToolBuilders/ 37 | *.launch 38 | .cproject 39 | .buildpath 40 | 41 | # NetBeans 42 | # -------- 43 | .nb-gradle 44 | .nb-gradle-properties 45 | -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- 1 | # Contributing to Community Scripts 2 | 3 | ## Naming Scripts 4 | 5 | The script names should be camel case (e.g.` CamelCase.ext`). 6 | 7 | ## Changelog 8 | 9 | The relevant changes done to the Community Scripts add-on are tracked in the [CHANGELOG.md] file, 10 | when doing a pull request consider updating it with the change done. The changes should be added to 11 | the Unreleased section. 12 | 13 | ## Further Contribution Guidance 14 | 15 | For full information about contributing to ZAP repositories please read [CONTRIBUTING.md]. 16 | 17 | [CHANGELOG.md]: CHANGELOG.md 18 | [CONTRIBUTING.md]: https://github.com/zaproxy/zaproxy/blob/main/CONTRIBUTING.md 19 | -------------------------------------------------------------------------------- /RELEASING.md: -------------------------------------------------------------------------------- 1 | # Release 2 | 3 | The following steps should be followed to release the add-on: 4 | 1. Run the workflow [Prepare Release Add-on](https://github.com/zaproxy/community-scripts/actions/workflows/prepare-release-add-on.yml), 5 | to prepare the release. It creates a pull request updating the version and changelog; 6 | 2. Merge the pull request. 7 | 8 | After merging the pull request the [Release Add-on](https://github.com/zaproxy/community-scripts/actions/workflows/release-add-on.yml) workflow 9 | will create the tag, create the release, trigger the update of the marketplace, and create a pull request preparing the next development iteration. 10 | 11 | ## Localized Resources 12 | 13 | The resources that require localization (e.g. `Messages.properties`, help pages) are uploaded to the ZAP projects in 14 | [Crowdin](https://crowdin.com/) when the add-on is released, if required (for pre-translation) the resources can be uploaded manually at anytime 15 | by running the workflow [Crowdin Upload Files](https://github.com/zaproxy/community-scripts/actions/workflows/crowdin-upload-files.yml). 16 | 17 | The resulting localized resources are added/updated in the repository periodically (through a workflow in the 18 | [zap-admin repository](https://github.com/zaproxy/zap-admin/)). 19 | -------------------------------------------------------------------------------- /active/RCE.py: -------------------------------------------------------------------------------- 1 | """ 2 | github : https://github.com/knassar702/scant3r 3 | -- 4 | * Coded by : Khaled Nassar @knassar702 5 | * Email : knassar702@gmail.com 6 | 7 | """ 8 | follow_redirects = False 9 | def scanNode(sas, msg): 10 | pass 11 | 12 | rce_payloads = { 13 | ''' 14 | cat${IFS}/etc/passwd''':'root:x:0:0', 15 | ''' 16 | cat /etc/passwd''':'root:x:0:0', 17 | ''' 18 | uname''':'gid=' 19 | } 20 | 21 | def scan(sas, msg, param, value): 22 | for payload,message in rce_payloads.items(): 23 | msg = msg.cloneRequest(); 24 | sas.setParam(msg, param, payload); 25 | sas.sendAndReceive(msg, follow_redirects, False); 26 | if message in msg.getResponseBody().toString(): 27 | sas.newAlert() \ 28 | .setRisk(3) \ 29 | .setConfidence(3) \ 30 | .setName('Remote Code Execution (Script)') \ 31 | .setDescription('Attack technique used for unauthorized execution of operating system commands. This attack is possible when an application accepts untrusted input to build operating system commands in an insecure manner involving improper data sanitization, or improper calling of external programs.') \ 32 | .setUri(msg.getRequestHeader().getURI().toString()) \ 33 | .setParam(param) \ 34 | .setAttack(payload) \ 35 | .setEvidence(message) \ 36 | .setMessage(msg) \ 37 | .raise(); 38 | break 39 | -------------------------------------------------------------------------------- /active/SSTI.py: -------------------------------------------------------------------------------- 1 | """ 2 | github : https://github.com/knassar702/scant3r 3 | -- 4 | * Coded by : Khaled Nassar @knassar702 5 | * Email : knassar702@gmail.com 6 | """ 7 | 8 | ssti_payloads = { 9 | 'abcd{{6*6}}123':'abcd36123', 10 | 'abcd${6*6}123':'abcd36123', 11 | 'abcd<% 6*6 %>123':'abcd36123' 12 | } 13 | 14 | def scanNode(sas, msg): 15 | pass 16 | 17 | def scan(sas, msg, param, value): 18 | for payload,evidence in ssti_payloads.items(): 19 | msg = msg.cloneRequest(); 20 | sas.setParam(msg, param, payload); 21 | sas.sendAndReceive(msg, False, False); 22 | if evidence in msg.getResponseBody().toString(): 23 | sas.newAlert() \ 24 | .setRisk(3) \ 25 | .setConfidence(3) \ 26 | .setName('Server-side Template Injection (SSTI) (Script)') \ 27 | .setDescription('Template injection allows an attacker to include template code into an existent (or not) template. A template engine makes designing HTML pages easier by using static template files which at runtime replaces variables/placeholders with actual values in the HTML pages.') \ 28 | .setUri(msg.getRequestHeader().getURI().toString()) \ 29 | .setParam(param) \ 30 | .setAttack(payload) \ 31 | .setEvidence(evidence) \ 32 | .setMessage(msg) \ 33 | .raise(); 34 | break -------------------------------------------------------------------------------- /active/bxss.py: -------------------------------------------------------------------------------- 1 | # by: Khaled Nassar @knassar702 2 | 3 | # YOUR XSSHUNTER PAYLOAD 4 | bxss = '">' 5 | def scanNode(sas, msg): 6 | pass 7 | 8 | 9 | def scan(sas, msg, param, value): 10 | 11 | # Copy requests before reusing them 12 | msg = msg.cloneRequest(); 13 | 14 | # setParam (message, parameterName, newValue) 15 | sas.setParam(msg, param, bxss); 16 | 17 | # sendAndReceive(msg, followRedirect, handleAntiCSRFtoken) 18 | sas.sendAndReceive(msg, False, False); -------------------------------------------------------------------------------- /encode-decode/double-spacer.js: -------------------------------------------------------------------------------- 1 | function process(helper, value) { 2 | // Replace any character (except last) with the character and a space 3 | return helper.newResult(value.replaceAll(".(?=.)", "$0 ").trim()); 4 | } 5 | -------------------------------------------------------------------------------- /extender/Simple Reverse Proxy.js: -------------------------------------------------------------------------------- 1 | // An extender script that adds a simple reverse proxy. 2 | 3 | // To where the requests are sent. 4 | var remoteAddress = "example.com"; 5 | var remotePort = 80; 6 | 7 | // The address/port of the proxy. 8 | var proxyAddress = "127.0.0.1"; 9 | var proxyPort = 8081; 10 | 11 | var HttpSender = Java.type("org.parosproxy.paros.network.HttpSender"); 12 | var URI = Java.type("org.apache.commons.httpclient.URI"); 13 | 14 | var extensionNetwork = control 15 | .getExtensionLoader() 16 | .getExtension("ExtensionNetwork"); 17 | var proxy; 18 | 19 | function messageHandler(ctx, msg) { 20 | if (!ctx.isFromClient()) { 21 | return; 22 | } 23 | 24 | var requestUri = msg.getRequestHeader().getURI(); 25 | requestUri = new URI( 26 | requestUri.getScheme(), 27 | requestUri.getUserinfo(), 28 | remoteAddress, 29 | remotePort, 30 | requestUri.getPath() 31 | ); 32 | msg.getRequestHeader().setURI(requestUri); 33 | } 34 | 35 | function install(helper) { 36 | proxy = extensionNetwork.createHttpProxy( 37 | HttpSender.PROXY_INITIATOR, 38 | messageHandler 39 | ); 40 | proxy.start(proxyAddress, proxyPort); 41 | } 42 | 43 | function uninstall(helper) { 44 | proxy.stop(); 45 | } 46 | -------------------------------------------------------------------------------- /extender/ZAP onEvent Handler.js: -------------------------------------------------------------------------------- 1 | // A script which listens for events generated by the ProxyListenerLogEventPublisher. 2 | // You can change this to listen for events generated by any other event publisher 3 | 4 | var consumer; 5 | 6 | function install(helper) { 7 | var ConsumerClass = Java.extend( 8 | Java.type("org.zaproxy.zap.eventBus.EventConsumer") 9 | ); 10 | consumer = new ConsumerClass({ 11 | eventReceived: function (event) { 12 | // Print in one statement to prevent threads interleaving 13 | var target = "---"; 14 | if (event.getTarget()) { 15 | target = event.getTarget().getDisplayName(); 16 | } 17 | print( 18 | "Event received: \n" + 19 | " Publisher: " + 20 | event.getPublisher().getPublisherName() + 21 | "\n" + 22 | " Type: " + 23 | event.getEventType() + 24 | "\n" + 25 | " Target: " + 26 | target + 27 | "\n" + 28 | " Params: " + 29 | event.getParameters() 30 | ); 31 | }, 32 | }); 33 | 34 | org.zaproxy.zap.ZAP.getEventBus().registerConsumer( 35 | consumer, 36 | "org.parosproxy.paros.extension.history.ProxyListenerLogEventPublisher" 37 | ); 38 | } 39 | 40 | function uninstall(helper) { 41 | org.zaproxy.zap.ZAP.getEventBus().unregisterConsumer(consumer); 42 | } 43 | -------------------------------------------------------------------------------- /gradle.properties: -------------------------------------------------------------------------------- 1 | version=20 2 | release=false 3 | -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/gradle/wrapper/gradle-wrapper.jar -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.properties: -------------------------------------------------------------------------------- 1 | distributionBase=GRADLE_USER_HOME 2 | distributionPath=wrapper/dists 3 | distributionSha256Sum=fba8464465835e74f7270bbf43d6d8a8d7709ab0a43ce1aa3323f73e9aa0c612 4 | distributionUrl=https\://services.gradle.org/distributions/gradle-8.13-all.zip 5 | networkTimeout=10000 6 | validateDistributionUrl=true 7 | zipStoreBase=GRADLE_USER_HOME 8 | zipStorePath=wrapper/dists 9 | -------------------------------------------------------------------------------- /httpfuzzerprocessor/FuzzerStopOnStatusCode.js: -------------------------------------------------------------------------------- 1 | var STATUS_CODE_PARAM = "Status Code"; 2 | 3 | function processMessage(utils, message) {} 4 | 5 | function processResult(utils, fuzzResult) { 6 | if ( 7 | fuzzResult.getHttpMessage().getResponseHeader().getStatusCode() == 8 | utils.getParameters().get(STATUS_CODE_PARAM) 9 | ) 10 | utils.stopFuzzer(); 11 | return true; 12 | } 13 | 14 | function getRequiredParamsNames() { 15 | return [STATUS_CODE_PARAM]; 16 | } 17 | -------------------------------------------------------------------------------- /httpfuzzerprocessor/addCacheBusting.js: -------------------------------------------------------------------------------- 1 | function processMessage(utils, message) { 2 | var cbValue = "" + Math.floor(Math.random() * 10000); 3 | setCacheBusting(message, cbValue); 4 | message.getRequestHeader().setHeader("X-Cache-Busting", cbValue); 5 | } 6 | 7 | function setCacheBusting(message, cbValue) { 8 | var HtmlParameter = Java.type("org.parosproxy.paros.network.HtmlParameter"); 9 | var URL_TYPE = org.parosproxy.paros.network.HtmlParameter.Type.url; 10 | var params = message.getUrlParams(); 11 | var newParam = new HtmlParameter( 12 | URL_TYPE, 13 | "x_cache_busting_" + cbValue, 14 | cbValue 15 | ); 16 | params.add(newParam); 17 | message.getRequestHeader().setGetParams(params); 18 | } 19 | 20 | function processResult(utils, fuzzResult) { 21 | return true; 22 | } 23 | 24 | function getRequiredParamsNames() { 25 | return []; 26 | } 27 | 28 | function getOptionalParamsNames() { 29 | return []; 30 | } 31 | -------------------------------------------------------------------------------- /httpfuzzerprocessor/add_msgs_sites_tree.js: -------------------------------------------------------------------------------- 1 | // A Fuzzer HTTP Processor script that allows to populate the Sites tree 2 | // with messages sent by the fuzzer (by default the fuzz result/messages 3 | // are not shown in the Fuzzer tab). 4 | 5 | var session = model.getSession(); 6 | 7 | function processMessage(utils, message) {} 8 | 9 | function processResult(utils, fuzzResult) { 10 | var msg = fuzzResult.getHttpMessage(); 11 | // The type 15 indicates that the message was sent by the user. 12 | // Refer to the HistoryReference for more details on the available types. 13 | // Persist the message to the session. 14 | var ref = new org.parosproxy.paros.model.HistoryReference(session, 15, msg); 15 | // Add the message to Sites tree. 16 | java.awt.EventQueue.invokeLater(function () { 17 | session.getSiteTree().addPath(ref, msg); 18 | }); 19 | 20 | // Do not show the result/messages in the Fuzzer tab. 21 | return false; 22 | } 23 | -------------------------------------------------------------------------------- /httpfuzzerprocessor/http_status_code_filter.py: -------------------------------------------------------------------------------- 1 | # Auxiliary variables/constants needed for processing. 2 | http_status_code = 401; 3 | 4 | # Called after injecting the payloads and before forward the message to the server. 5 | def processMessage(utils, message) : 6 | pass; 7 | 8 | # Called after receiving the fuzzed message from the server 9 | def processResult(utils, fuzzResult) : 10 | global http_status_code; 11 | 12 | if(fuzzResult.getHttpMessage().getResponseHeader().getStatusCode() == http_status_code): 13 | return bool(0); 14 | 15 | # Returns true to accept the result, false to discard and not show it 16 | return bool(1); 17 | 18 | 19 | -------------------------------------------------------------------------------- /httpfuzzerprocessor/random_x_forwarded_for_ip.js: -------------------------------------------------------------------------------- 1 | function processMessage(utils, message) { 2 | var random_ip = 3 | Math.floor(Math.random() * 254) + 4 | "." + 5 | Math.floor(Math.random() * 254) + 6 | "." + 7 | Math.floor(Math.random() * 254) + 8 | "." + 9 | Math.floor(Math.random() * 254); 10 | message.getRequestHeader().setHeader("X-Forwarded-For", random_ip); 11 | } 12 | 13 | function processResult(utils, fuzzResult) { 14 | return true; 15 | } 16 | 17 | function getRequiredParamsNames() { 18 | return []; 19 | } 20 | 21 | function getOptionalParamsNames() { 22 | return []; 23 | } 24 | -------------------------------------------------------------------------------- /httpsender/AddBearerTokenHeader.js: -------------------------------------------------------------------------------- 1 | /* 2 | * This script is intended to be used along with authentication/OfflineTokenRefresher.js to 3 | * handle an OAUTH2 offline token refresh workflow. 4 | * 5 | * authentication/OfflineTokenRefresher.js will automatically fetch the new access token for every unauthorized 6 | * request determined by the "Logged Out" or "Logged In" indicator previously set in Context -> Authentication. 7 | * 8 | * httpsender/AddBearerTokenHeader.js will add the new access token to all requests in scope 9 | * made by ZAP (except the authentication ones) as an "Authorization: Bearer [access_token]" HTTP Header. 10 | * 11 | * @author Laura Pardo 12 | */ 13 | 14 | var HttpSender = Java.type("org.parosproxy.paros.network.HttpSender"); 15 | var ScriptVars = Java.type("org.zaproxy.zap.extension.script.ScriptVars"); 16 | 17 | function sendingRequest(msg, initiator, helper) { 18 | // add Authorization header to all request in scope except the authorization request itself 19 | if (initiator !== HttpSender.AUTHENTICATION_INITIATOR && msg.isInScope()) { 20 | msg 21 | .getRequestHeader() 22 | .setHeader( 23 | "Authorization", 24 | "Bearer " + ScriptVars.getGlobalVar("access_token") 25 | ); 26 | } 27 | } 28 | 29 | function responseReceived(msg, initiator, helper) {} 30 | -------------------------------------------------------------------------------- /httpsender/UpgradeHttp1To2.js: -------------------------------------------------------------------------------- 1 | // Upgrade HTTP/1.1 requests to use HTTP/2 2 | // This script can be used to force ZAP tools like the spider and importing add-ons to use HTTP/2 3 | // If the target server does not support HTTP/2 then requests will fail - there is no fallback. 4 | 5 | var Locale = Java.type("java.util.Locale"); 6 | 7 | function sendingRequest(msg, initiator, helper) { 8 | var reqHeader = msg.getRequestHeader(); 9 | if (reqHeader.getVersion() === "HTTP/1.1") { 10 | // print('Upgrading to HTTP/2 url=' + msg.getRequestHeader().getURI().toString()) 11 | reqHeader.setVersion("HTTP/2"); 12 | // HTTP/2 headers have to be lowercase, so re-add them all to ensure the order is not changed 13 | var headers = reqHeader.getHeaders(); 14 | for (i in headers) { 15 | reqHeader.setHeader(headers[i].getName(), null); 16 | } 17 | // Re-add in a second loop in case a header appears twice 18 | for (i in headers) { 19 | reqHeader.addHeader( 20 | headers[i].getName().toLowerCase(Locale.ROOT), 21 | headers[i].getValue() 22 | ); 23 | } 24 | } 25 | } 26 | 27 | function responseReceived(msg, initiator, helper) { 28 | // Nothing to do 29 | } 30 | -------------------------------------------------------------------------------- /httpsender/add_header_request.py: -------------------------------------------------------------------------------- 1 | 2 | headers = dict({"X-MIP-ACCESS-TOKEN": "XXXXXxXX-xxXX-XXXx-xxxX-XXxxXxXXxXxX", 3 | "X-MIP-CHANNEL": "ANDROID", 4 | "X-MIP-Device-Id": "1", 5 | "X-MIP-APP-VERSION": "1.0.1", 6 | "X-MIP-APP-VERSION-ID": "1"}); 7 | 8 | def sendingRequest(msg, initiator, helper): 9 | for x in list(headers): 10 | msg.getRequestHeader().setHeader(x, headers[x]); 11 | 12 | 13 | def responseReceived(msg, initiator, helper): 14 | pass; 15 | 16 | -------------------------------------------------------------------------------- /httpsender/add_header_response.py: -------------------------------------------------------------------------------- 1 | 2 | headers = dict({"Content-Type": "text/plain"}); 3 | 4 | def sendingRequest(msg, initiator, helper): 5 | pass; 6 | 7 | 8 | def responseReceived(msg, initiator, helper): 9 | for x in list(headers): 10 | msg.getResponseHeader().setHeader(x, headers[x]); 11 | 12 | 13 | -------------------------------------------------------------------------------- /httpsender/change_request.py: -------------------------------------------------------------------------------- 1 | 2 | OLD_STRING = "00.000.000/0000-00"; 3 | NEW_STRING = "88.888.888/8888-88"; 4 | 5 | def sendingRequest(msg, initiator, helper): 6 | global OLD_STRING; 7 | global NEW_STRING; 8 | 9 | body = msg.getRequestBody().toString(); 10 | newbody = body.replace(OLD_STRING, NEW_STRING); 11 | msg.setRequestBody(newbody); 12 | msg.getRequestHeader().setContentLength(msg.getRequestBody().length()); 13 | 14 | 15 | 16 | def responseReceived(msg, initiator, helper): 17 | pass; 18 | 19 | 20 | -------------------------------------------------------------------------------- /httpsender/change_response.py: -------------------------------------------------------------------------------- 1 | 2 | OLD_STRING = "display:none;"; 3 | NEW_STRING = ""; 4 | 5 | def sendingRequest(msg, initiator, helper): 6 | pass; 7 | 8 | 9 | 10 | def responseReceived(msg, initiator, helper): 11 | global OLD_STRING; 12 | global NEW_STRING; 13 | 14 | body = msg.getResponseBody().toString(); 15 | newbody = body.replace(OLD_STRING, NEW_STRING); 16 | msg.setResponseBody(newbody); 17 | msg.getResponseHeader().setContentLength(msg.getResponseBody().length()) 18 | 19 | 20 | -------------------------------------------------------------------------------- /httpsender/fingerprinter.js: -------------------------------------------------------------------------------- 1 | /*exported sendingRequest, responseReceived*/ 2 | // Logs md5 hashes of responses 3 | 4 | // Logging with the script name is super helpful! 5 | function logger() { 6 | print("[" + this["zap.script.name"] + "] " + arguments[0]); 7 | } 8 | 9 | var String = Java.type("java.lang.String"); 10 | var BigInteger = Java.type("java.math.BigInteger"); 11 | var MessageDigest = Java.type("java.security.MessageDigest"); 12 | 13 | function sendingRequest(msg, initiator, helper) {} 14 | 15 | function responseReceived(msg, initiator, helper) { 16 | var resbody = msg.getResponseBody().toString(); 17 | var md5 = MessageDigest.getInstance("MD5"); 18 | md5.reset(); 19 | md5.update(resbody.getBytes()); 20 | var fingerprint = String.format("%032x", new BigInteger(1, md5.digest())); 21 | logger(fingerprint); 22 | } 23 | -------------------------------------------------------------------------------- /other/CHANGELOG.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | All notable changes to the 'other' section of this repository will be documented in this file. 3 | 4 | The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). 5 | 6 | ### 2025-02-21 7 | - Added af-plans/BrowserAuthTest.yaml 8 | 9 | ### 2024-08-30 10 | - Added af-plans/ApiScanExample.yaml 11 | 12 | ### 2024-02-06 13 | - Added af-plans/FullScanBrokenCrystals.yaml 14 | - Added af-plans/ScriptEnvVarAccess.yaml 15 | 16 | ### 2024-01-16 17 | - Introduced this changelog 18 | - Added af-plans/FullScanExample.yaml 19 | - Updated af-plans/BaselineExample.yaml to use envvar and only run AJAX Spider if modern. 20 | -------------------------------------------------------------------------------- /other/README.md: -------------------------------------------------------------------------------- 1 | # Other 2 | 3 | This section exists to hold content that doesn't fall into one of the actual/normal script types. 4 | -------------------------------------------------------------------------------- /other/af-plans/README.md: -------------------------------------------------------------------------------- 1 | Automation Framework Plans 2 | ========================== 3 | 4 | The [Automation Framework](https://www.zaproxy.org/docs/automate/automation-framework/) (AF) allows you to control ZAP via a single yaml file. 5 | So while AF plans are not strictly speaking scripts they really act like them. 6 | 7 | 8 | ## Official Videos 9 | 10 | [First Look: ZAP Automation Framework](https://www.youtube.com/watch?v=TTiW5NPJlwY) (49:50) 11 | -------------------------------------------------------------------------------- /other/af-plans/ScriptEnvVarAccess.yaml: -------------------------------------------------------------------------------- 1 | --- 2 | # This plan show how you can access an env var in a script. 3 | env: 4 | contexts: 5 | - name: "Script EnvVar Example" 6 | urls: 7 | - "https://example.com/" 8 | jobs: 9 | - parameters: 10 | action: "add" 11 | type: "standalone" 12 | engine: "ECMAScript : Graal.js" 13 | name: "print-env-vars.js" 14 | inline: | 15 | print(Java.type("java.lang.System").getenv("PATH")); 16 | name: "script" 17 | type: "script" 18 | - parameters: 19 | action: "run" 20 | type: "standalone" 21 | name: "print-env-vars.js" 22 | name: "script" 23 | type: "script" -------------------------------------------------------------------------------- /other/af-plans/juiceshop-selenium-auth/js-auth.bat: -------------------------------------------------------------------------------- 1 | 2 | set JS_USER=test@test.com 3 | set JS_PWD=test123 4 | 5 | # Customize the paths to the zap.bat file and the automation plan to match your environment 6 | 7 | C:\Program Files\ZAP\Zed Attack Proxy\zap.bat -cmd -autorun \full\path\juiceshop-auth.yaml 8 | -------------------------------------------------------------------------------- /other/af-plans/juiceshop-selenium-auth/js-auth.sh: -------------------------------------------------------------------------------- 1 | # Ensure that ZAP is set to the full path of the zap.sh script installed 2 | 3 | # Standard macOS location 4 | # ZAP=/Applications/OWASP\ ZAP.app/Contents/Java/zap.sh 5 | 6 | ZAP=zap.sh 7 | 8 | export JS_USER=test@test.com 9 | export JS_PWD=test123 10 | 11 | $ZAP -cmd -autorun /full/path/juiceshop-auth.yaml 12 | 13 | -------------------------------------------------------------------------------- /other/af-plans/juiceshop-selenium-auth/js-test.bat: -------------------------------------------------------------------------------- 1 | 2 | set JS_USER=test@test.com 3 | set JS_PWD=test123 4 | 5 | # Customize the paths to the zap.bat file and the automation plan to match your environment 6 | 7 | C:\Program Files\ZAP\Zed Attack Proxy\zap.bat -cmd -autorun \full\path\juiceshop-test.yaml 8 | -------------------------------------------------------------------------------- /other/af-plans/juiceshop-selenium-auth/js-test.sh: -------------------------------------------------------------------------------- 1 | # Ensure that ZAP is set to the full path of the zap.sh script installed 2 | 3 | # Standard macOS location 4 | # ZAP=/Applications/OWASP\ ZAP.app/Contents/Java/zap.sh 5 | 6 | ZAP=zap.sh 7 | 8 | export JS_USER=test@test.com 9 | export JS_PWD=test123 10 | 11 | $ZAP -cmd -autorun /full/path/juiceshop-test.yaml 12 | 13 | -------------------------------------------------------------------------------- /other/api/mass-baseline/README.md: -------------------------------------------------------------------------------- 1 | # Mass Baseline scan 2 | 3 | This directory contains scripts that allow you to run the [ZAP Baseline Scan](https://www.zaproxy.org/docs/docker/baseline-scan/) against a series of target URLs. It also (by default) publishes the results to the wiki that the scripts belong to. 4 | 5 | In order to use these scripts you will need to: 6 | 7 | * Change the sites listed in [mass-baseline.sh](mass-baseline.sh) 8 | * Change the relevant user and repo details in [mass-baseline.sh](mass-baseline.sh) 9 | * Build a docker image (see below) 10 | * Run the docker image, setting the credentials for your user (see below) if you want to upload the results to your repo wiki 11 | 12 | To create the docker container 13 | ----- 14 | Run a command like: 15 | 16 | `docker build -t your-user/mass-baseline -f docker-wrapper .` 17 | 18 | To run the mass baseline scan 19 | ---- 20 | Run a command like: 21 | 22 | `docker run -u zap -i -t your-user/mass-baseline mass-baseline.sh` 23 | 24 | If you want to write to your wiki then you will need to set the $baselinecreds env var to a suitable value, for example a Personal Access Token. 25 | If you are running this via Jenkins then you can use Jenkins credentials. 26 | -------------------------------------------------------------------------------- /other/api/mass-baseline/docker-wrapper: -------------------------------------------------------------------------------- 1 | # This dockerfile builds the Mass Baseline wrapper around the ZAP weekly release 2 | FROM ghcr.io/zaproxy/zaproxy:weekly 3 | MAINTAINER Simon Bennetts "psiinon@gmail.com" 4 | 5 | USER zap 6 | COPY mass-base* /zap/ 7 | RUN mkdir /zap/wrk 8 | COPY mass-baseline-default.conf /zap/wrk/mass-baseline-default.conf 9 | 10 | USER root 11 | RUN chown zap /zap/mass-base* -------------------------------------------------------------------------------- /other/api/mass-baseline/mass-baseline.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # Change these for your environment 3 | git config --global user.email "youremail@example.com" 4 | git config --global user.name "Your name" 5 | user="YourUser" 6 | repo="YourRepo" 7 | 8 | # You will also need to set the $baselinecreds envvar if you want to write to your repo's wiki 9 | 10 | if [[ $baselinecreds ]]; then 11 | git clone https://$baselinecreds@github.com/$user/$repo.wiki 12 | fi 13 | 14 | # Format: 15 | # ./mass-basewrapper.sh [] 16 | # The target is assumed to be https and the path can be just / 17 | # The link can be any relevant link (eg to a bug tracker) or / if not needed 18 | 19 | # Replace these with your target URLs - these example ones will fail! 20 | ./mass-basewrapper.sh $repo.wiki www.fail.example.com / https://www.example.com 21 | ./mass-basewrapper.sh $repo.wiki www.pass.example.com / https://www.example.com 22 | ./mass-basewrapper.sh $repo.wiki www.warn.example.com / https://www.example.com 23 | 24 | ./mass-basescore.py $repo.wiki 25 | 26 | if [[ $baselinecreds ]]; then 27 | cd $repo.wiki 28 | git add Baseline-* baseline-results/ 29 | date=`date +%F` 30 | git commit -m "Baseline scan for $date" 31 | git push 32 | else 33 | echo "Environment variable 'baselinecreds' not set so not attempting to update $repo wiki" 34 | fi 35 | -------------------------------------------------------------------------------- /other/api/mass-baseline/mass-basewrapper.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # Parameters: 3 | # $1 Results directory 4 | # $2 Target url, eg www.example.com 5 | # $3 URL path, / or a longer path if required 6 | # $4 Link, or / if not needed 7 | # $5+ Params to pass on to zap-baseline.py 8 | 9 | date=`date +%F` 10 | mkdir -p "$1/baseline-results/$2" 11 | 12 | cmd="./zap-baseline.py -t https://$2$3 -d -c mass-baseline-default.conf \"${@:5} \"" 13 | 14 | echo $cmd 15 | $cmd > $1/baseline-results/$2/$date 16 | 17 | if [ -s $1/baseline-results/$2/$date ] 18 | then 19 | if [ "$4" != "/" ] 20 | then 21 | echo "LINK: $4" >> $1/baseline-results/$2/$date 22 | fi 23 | else 24 | echo "Results file is empty :( $1/baseline-results/$2/$date" 25 | # Delete it otherwise it will look like everything passed:/ 26 | rm $1/baseline-results/$2/$date 27 | fi 28 | 29 | # Ensure ZAP has completely shut down, otherwise it can corrupt the db of the next run 30 | sleep 5 -------------------------------------------------------------------------------- /other/api/sdlc-integration/core/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/api/sdlc-integration/core/__init__.py -------------------------------------------------------------------------------- /other/api/sdlc-integration/core/config.py: -------------------------------------------------------------------------------- 1 | zap_url = "http://localhost:8080" 2 | 3 | max_duration = 1 # Number of minutes to spider and active-scan for (default 1) 4 | 5 | # target_auth can be ignored if we're not using 'scanAsUser()' (for spider or ascan) 6 | target_auth = { 7 | "login_url": "https://www.example.com/profile/signin.html", 8 | "user": "foo@example.com", 9 | "pw": "bar" 10 | } 11 | 12 | # Create prefilled credentials for Jira bugtacker 13 | jira_auth = { 14 | "user": "foo", 15 | "pw": "bar" # or getpass.getpass() 16 | } 17 | # Set URL and project ID for Jira bugtacker 18 | jira_base_url = "https://jira.example.com/rest/api/2/issue" 19 | jira_project_key = "foobar" 20 | 21 | -------------------------------------------------------------------------------- /other/api/sdlc-integration/core/scan_module/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/api/sdlc-integration/core/scan_module/__init__.py -------------------------------------------------------------------------------- /other/api/sdlc-integration/core/setup_module/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/api/sdlc-integration/core/setup_module/__init__.py -------------------------------------------------------------------------------- /other/api/sdlc-integration/demos/shutdown-zap.sh: -------------------------------------------------------------------------------- 1 | echo "Shutting down ZAP..." 2 | curl "http://localhost:8080/JSON/core/action/shutdown/" 3 | echo -------------------------------------------------------------------------------- /other/api/sdlc-integration/demos/start-zap.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | WD="$( cd "$( dirname "$0" )" && pwd )" 4 | 5 | # Restart ? 6 | if $(curl -sSf localhost:8080 &> /dev/null) 7 | then 8 | echo "Restarting ZAP..." 9 | curl "http://localhost:8080/JSON/core/action/shutdown/" 10 | sleep 4 11 | fi 12 | 13 | # Start 14 | /Applications/OWASP\ ZAP.app/Contents/Java/zap.sh -daemon -port 8080 -config api.disablekey=true & 15 | 16 | # Wait for it to init 17 | while ! $(curl -sSf localhost:8080 &> /dev/null) 18 | do 19 | echo "Waiting for proxy to start..." 20 | sleep 3 21 | done 22 | sleep 3 23 | 24 | echo "Proxy is running..." 25 | echo 26 | -------------------------------------------------------------------------------- /other/api/sdlc-integration/demos/targets_file_demo.txt: -------------------------------------------------------------------------------- 1 | https?://(\w+\.)*example.com/account/.* 2 | https?://(\w+\.)*example.com/profile.* 3 | -------------------------------------------------------------------------------- /other/api/sdlc-integration/requirements.txt: -------------------------------------------------------------------------------- 1 | zaproxy 2 | requests 3 | -------------------------------------------------------------------------------- /other/api/sdlc-integration/run_scan.py: -------------------------------------------------------------------------------- 1 | # This script should be used to run the actual ZAP scan 2 | 3 | import sys 4 | import core.scan_module.scan as scan 5 | 6 | scan.main(sys.argv[1:]) 7 | -------------------------------------------------------------------------------- /other/api/sdlc-integration/run_session_setup.py: -------------------------------------------------------------------------------- 1 | # This script should be run to clean and set up ZAP session 2 | 3 | import sys 4 | import core.setup_module.zap_session as setup 5 | 6 | setup.main(sys.argv[1:]) 7 | -------------------------------------------------------------------------------- /other/scan-hooks/LogMessagesHook.py: -------------------------------------------------------------------------------- 1 | # A scan hook (https://www.zaproxy.org/docs/docker/scan-hooks/) which adds a script for logging all requests. 2 | # To use this script copy it and the httpsender/LogRequests.js script to your CWD. 3 | # Then run ZAP like this: 4 | # docker run -v $(pwd):/zap/wrk/:rw -t ghcr.io/zaproxy/zaproxy:stable zap-baseline.py -t https://www.example.com --hook=LogMessagesHook.py 5 | # The requests and responses should be written to a req-resp-log.txt file in the CWD. 6 | 7 | def zap_started(zap, target): 8 | zap.script.load('LogMessages.js', 'httpsender', 'Oracle Nashorn', '/zap/wrk/LogMessages.js') 9 | zap.script.enable('LogMessages.js') 10 | -------------------------------------------------------------------------------- /other/scan-hooks/README.md: -------------------------------------------------------------------------------- 1 | Scan Hooks run by the packaged Docker scans and provide methods that are called at all stages of the scans. 2 | 3 | For more details see https://www.zaproxy.org/docs/docker/scan-hooks/ 4 | -------------------------------------------------------------------------------- /other/scan-hooks/export_session.py: -------------------------------------------------------------------------------- 1 | # This scan hook (https://www.zaproxy.org/docs/docker/scan-hooks/) 2 | # copies the ZAP session and log file into a directory mounted to /zap/wrk after ZAP has shut down. 3 | # There must not be a local 'session' directory otherwise the script will fail. 4 | 5 | from shutil import copy2, copytree 6 | import os.path 7 | import glob 8 | 9 | # This assumes that you are running as zap - if you run as root change to use /root/.ZAP(_D) 10 | dev_path = '/home/zap/.ZAP_D' 11 | rel_path = '/home/zap/.ZAP' 12 | 13 | def pre_exit(fail_count, warn_count, pass_count): 14 | dir = rel_path 15 | if os.path.exists(dev_path + '/session'): 16 | dir = dev_path 17 | copytree(dir + '/session', '/zap/wrk/session') 18 | for zap_file in glob.iglob(dir + '/zap.log*'): 19 | copy2(zap_file, '/zap/wrk') 20 | -------------------------------------------------------------------------------- /other/tips/README.md: -------------------------------------------------------------------------------- 1 | # Tips 2 | 3 | This community Tips (and Tricks) section exists for people to share their ideas and usage tips for ZAP. 4 | 5 | Please ensure your file is placed in an appropriate folder structure (ex: based on add-on name and topic). 6 | 7 | More specifically the first content in this area, is structured as: 8 | 9 | ```dos 10 | tips 11 | │ README.md 12 | └───replacer 13 | └───match-and-replace 14 | │ README.md 15 | └───images 16 | └───bypass-waf.png 17 | emulate-ios.png 18 | false-true-admin.png 19 | ... 20 | ``` -------------------------------------------------------------------------------- /other/tips/replacer/README.md: -------------------------------------------------------------------------------- 1 | # Replacer 2 | 3 | This section exists to hold content related to the [Replacer](https://www.zaproxy.org/docs/desktop/addons/replacer/) add-on. 4 | -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/bypass-waf.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/bypass-waf.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/emulate-ios.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/emulate-ios.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/false-true-admin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/false-true-admin.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/false-true-email.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/false-true-email.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/finding-idor.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/finding-idor.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/finding-xss-referer.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/finding-xss-referer.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/finding-xss-user.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/finding-xss-user.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/hackerone-header.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/hackerone-header.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/log4shell.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/log4shell.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/shellshock.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/shellshock.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/show-hidden-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/show-hidden-1.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/show-hidden-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/show-hidden-2.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/show-hidden-3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/show-hidden-3.png -------------------------------------------------------------------------------- /other/tips/replacer/match-and-replace/images/xbb-header.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/replacer/match-and-replace/images/xbb-header.png -------------------------------------------------------------------------------- /other/tips/selenium/README.md: -------------------------------------------------------------------------------- 1 | # Selenium 2 | 3 | This section exists to hold content related to the [Selenium](https://www.zaproxy.org/docs/desktop/addons/selenium/) add-on. 4 | -------------------------------------------------------------------------------- /other/tips/selenium/edge/README.md: -------------------------------------------------------------------------------- 1 | # Use Edge (chromium) instead of Chrome 2 | 3 | Since Edge on Windows is now chromium based, you can choose to set your "Chrome" binary as "Edge" if you have a requirement for testing/exploring things with Edge (ex: in a corporate environment). 4 | 5 | > [!CAUTION] 6 | > While this tip might be handy for exploring an app manually it probably IS NOT a good move to set Edge as Chrome for the purposes of the Ajax Spider or DOM XSS rule. 7 | 8 | ## Setup Process 9 | 10 | 1. Get Edge's location. Hit the start menu and type "Edge". 11 | 2. Right click the start menu entry and hit "Open file location": 12 | 13 | ![](images/edge_file_location.png) 14 | 15 | 3. Get the properties for the Edge shortcut: 16 | 17 | ![](images/edge_shortcut_properties.png) 18 | 19 | 4. From the shortcut properties copy the "Target" value: 20 | 21 | ![](images/edge_properties.png) 22 | 23 | 5. Go back to ZAP and into the Selenium options: 24 | 6. Set the Chrome binary location to point to the Edge executable path you copied earlier. 25 | 26 | ![](images/selenium_options.png) 27 | 28 | 7. Then when you launch a 'Chrome' browser (either via the toolbar button or manual explore screen), it will launch Edge. 29 | 8. Note: You may get a message saying the "Provided browser was not found" when you close Edge :shrug: (just click "Ok" and ignore it.) 30 | -------------------------------------------------------------------------------- /other/tips/selenium/edge/images/edge_file_location.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/selenium/edge/images/edge_file_location.png -------------------------------------------------------------------------------- /other/tips/selenium/edge/images/edge_properties.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/selenium/edge/images/edge_properties.png -------------------------------------------------------------------------------- /other/tips/selenium/edge/images/edge_shortcut_properties.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/selenium/edge/images/edge_shortcut_properties.png -------------------------------------------------------------------------------- /other/tips/selenium/edge/images/launch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/selenium/edge/images/launch.png -------------------------------------------------------------------------------- /other/tips/selenium/edge/images/selenium_options.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/other/tips/selenium/edge/images/selenium_options.png -------------------------------------------------------------------------------- /payloadgenerator/associated_fields.py: -------------------------------------------------------------------------------- 1 | """ 2 | This script is just a proof of concept for payload generation, 3 | supplementing ZAP's native generation mechanism(s). 4 | It generates payload1 for field1 and calculates the payload 5 | (payload2 = sha1(base64(payload1))) for field2, something like Battering Ram 6 | without the hassle of generating the payload2 wordlist first 7 | """ 8 | 9 | from base64 import b64encode; 10 | from hashlib import sha1; 11 | from java.lang import Long; # bug resolution import 12 | 13 | INITIAL_VALUE = 0; 14 | count = INITIAL_VALUE; 15 | passfile_path = 'K:\\payloads.txt'; 16 | pl_buff = list(); 17 | lines = 0; 18 | for line in open(passfile_path): 19 | pl_buff.append(line.rstrip()); 20 | lines += 1; 21 | middle = str('&check='); 22 | NUMBER_OF_PAYLOADS = lines; 23 | 24 | def getNumberOfPayloads(): 25 | return Long(NUMBER_OF_PAYLOADS); # Typecast to solve bug 26 | 27 | def hasNext(): 28 | return (count < NUMBER_OF_PAYLOADS); 29 | 30 | def next(): 31 | global count; 32 | num = count; 33 | count+=1; 34 | return pl_buff[num]+middle+sha1(b64encode(pl_buff[num])).hexdigest(); 35 | 36 | def reset(): 37 | count = INITIAL_VALUE; 38 | 39 | def close(): 40 | pass; 41 | 42 | -------------------------------------------------------------------------------- /payloadgenerator/securerandom.js: -------------------------------------------------------------------------------- 1 | // Auxiliary variables/constants for payload generation. 2 | var SecureRandom = Java.type("java.security.SecureRandom"); 3 | var random = new SecureRandom(); 4 | var NUMBER_OF_PAYLOADS = 10; 5 | var INITIAL_VALUE = 1; 6 | var count = INITIAL_VALUE; 7 | 8 | function getNumberOfPayloads() { 9 | return NUMBER_OF_PAYLOADS; 10 | } 11 | 12 | function hasNext() { 13 | return count <= NUMBER_OF_PAYLOADS; 14 | } 15 | 16 | function next() { 17 | count++; 18 | // There are other data type options offered by SecureRandom 19 | // https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/security/SecureRandom.html 20 | // If you don't want leading negative signs on ints you could use Math.abs 21 | // If you want to pad to a certain length you could do something like: 22 | // String.format("%010d", random.nextint());' 23 | return random.nextInt(); 24 | } 25 | 26 | function reset() { 27 | count = INITIAL_VALUE; 28 | } 29 | 30 | function close() {} 31 | -------------------------------------------------------------------------------- /payloadprocessor/README.md: -------------------------------------------------------------------------------- 1 | Payload Processor scripts 2 | ========================= 3 | 4 | Scripts that can change the payloads before being used in the fuzzer. 5 | 6 | ## JavaScript template 7 | 8 | ```JavaScript 9 | // Auxiliary variables/constants for processing. 10 | var id = 0; 11 | 12 | /** 13 | * Processes the payload. 14 | * 15 | * Called for each payload that needs to be processed. 16 | * 17 | * @param {string} payload - The payload before being injected into the message. 18 | * @return {string} The payload processed. 19 | */ 20 | function process(payload) { 21 | // Do some processing to payload 22 | payload = payload + '-' + id; 23 | id++; 24 | 25 | return payload; 26 | } 27 | ``` 28 | 29 | ## Parameters 30 | | Name | JavaDoc | 31 | | --- | --- | 32 | | payload | [String](https://docs.oracle.com/javase/8/docs/api/java/lang/String.html) | 33 | 34 | ## Templates in other languages 35 | 36 | * Groovy : [PayloadProcessorDefaultTemplate.groovy](https://github.com/zaproxy/zap-extensions/blob/main/addOns/groovy/src/main/zapHomeFiles/scripts/templates/payloadprocessor/PayloadProcessorDefaultTemplate.groovy) 37 | -------------------------------------------------------------------------------- /payloadprocessor/deflate_gzip_encoding.py: -------------------------------------------------------------------------------- 1 | # Auxiliary variables/constants for processing. 2 | 3 | import zlib; 4 | 5 | # Called for each payload that needs to be processed. 6 | # The type of variable 'payload' is string. 7 | 8 | def process(payload): 9 | # Do some processing to payload 10 | compressed_payload = zlib.compress(payload); 11 | return compressed_payload; 12 | 13 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - apostrophemask.py: -------------------------------------------------------------------------------- 1 | def process(payload): 2 | 3 | return payload.replace('\'', "%EF%BC%87") if payload else payload 4 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - apostrophenullencode.py: -------------------------------------------------------------------------------- 1 | def process(payload): 2 | processed_payload = payload.replace("'", "%00%27"); 3 | return processed_payload; 4 | 5 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - chardoubleencode.py: -------------------------------------------------------------------------------- 1 | import string 2 | 3 | def process(payload): 4 | 5 | retVal = payload 6 | 7 | if payload: 8 | retVal = "" 9 | i = 0 10 | 11 | while i < len(payload): 12 | if payload[i] == '%' and (i < len(payload) - 2) and payload[i + 1:i + 2] in string.hexdigits and payload[i + 2:i + 3] in string.hexdigits: 13 | retVal += '%%25%s' % payload[i + 1:i + 3] 14 | i += 3 15 | else: 16 | retVal += '%%25%.2X' % ord(payload[i]) 17 | i += 1 18 | 19 | return retVal 20 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - charencode.py: -------------------------------------------------------------------------------- 1 | import string 2 | import time 3 | 4 | def process(payload): 5 | 6 | retVal = payload 7 | 8 | if payload: 9 | retVal = "" 10 | i = 0 11 | 12 | while i < len(payload): 13 | if payload[i] == '%' and (i < len(payload) - 2) and payload[i + 1:i + 2] in string.hexdigits and payload[i + 2:i + 3] in string.hexdigits: 14 | retVal += payload[i:i + 3] 15 | i += 3 16 | else: 17 | retVal += '%%%.2X' % ord(payload[i]) 18 | i += 1 19 | time.sleep(10) 20 | return retVal 21 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - charunicodeencode.py: -------------------------------------------------------------------------------- 1 | import string 2 | 3 | def process(payload): 4 | 5 | retVal = payload 6 | 7 | if payload: 8 | retVal = "" 9 | i = 0 10 | 11 | while i < len(payload): 12 | if payload[i] == '%' and (i < len(payload) - 2) and payload[i + 1:i + 2] in string.hexdigits and payload[i + 2:i + 3] in string.hexdigits: 13 | retVal += "%%u00%s" % payload[i + 1:i + 3] 14 | i += 3 15 | else: 16 | retVal += '%%u%.4X' % ord(payload[i]) 17 | i += 1 18 | 19 | return retVal 20 | 21 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - equaltolike.py: -------------------------------------------------------------------------------- 1 | import re 2 | 3 | def process(payload): 4 | 5 | retVal = payload 6 | 7 | if payload: 8 | retVal = re.sub(r"\s*=\s*", " LIKE ", retVal) 9 | 10 | return retVal 11 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - lowercase.py: -------------------------------------------------------------------------------- 1 | def process(payload): 2 | 3 | return payload.lower() if payload else payload 4 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - percentage.py: -------------------------------------------------------------------------------- 1 | import string 2 | 3 | def process(payload): 4 | 5 | retVal = payload 6 | 7 | if payload: 8 | retVal = "" 9 | i = 0 10 | 11 | while i < len(payload): 12 | if payload[i] == '%' and (i < len(payload) - 2) and payload[i + 1:i + 2] in string.hexdigits and payload[i + 2:i + 3] in string.hexdigits: 13 | retVal += payload[i:i + 3] 14 | i += 3 15 | elif payload[i] != ' ': 16 | retVal += '%%%s' % payload[i] 17 | i += 1 18 | else: 19 | retVal += payload[i] 20 | i += 1 21 | 22 | return retVal 23 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - randomcase.py: -------------------------------------------------------------------------------- 1 | import re 2 | from random import randint 3 | 4 | def process(payload): 5 | 6 | retVal = payload 7 | 8 | if payload: 9 | for match in re.finditer(r"\b[A-Za-z_]+\b", retVal): 10 | word = match.group() 11 | 12 | if ("%s(" % word) in payload: 13 | while True: 14 | _ = "" 15 | 16 | for i in xrange(len(word)): 17 | _ += word[i].upper() if randint(0, 1) else word[i].lower() 18 | 19 | if len(_) > 1 and _ not in (_.lower(), _.upper()): 20 | break 21 | 22 | retVal = retVal.replace(word, _) 23 | 24 | return retVal 25 | -------------------------------------------------------------------------------- /payloadprocessor/sqlmap - space2comments.py: -------------------------------------------------------------------------------- 1 | def process(payload): 2 | processed_payload = payload.replace(" ", "/*1914*/"); 3 | return processed_payload; 4 | 5 | -------------------------------------------------------------------------------- /payloadprocessor/to-hex.js: -------------------------------------------------------------------------------- 1 | /** 2 | * Converts a string payload to hex. 3 | * 4 | * Created to add functionality found in Burp to solve Natas19 5 | * https://www.youtube.com/watch?v=z3RtpWZ_R3Q 6 | * 7 | * EN10 8 | */ 9 | 10 | function process(payload) { 11 | var hex = ""; 12 | var i; 13 | for (i = 0; i < payload.length; i++) { 14 | hex += payload.charCodeAt(i).toString(16); 15 | } 16 | return hex; 17 | } 18 | -------------------------------------------------------------------------------- /proxy/Drop requests by response code.js: -------------------------------------------------------------------------------- 1 | // This script was lazily crafted by Anthony Cozamanis, kurobeats@yahoo.co.jp 2 | function proxyRequest(msg) { 3 | return true; 4 | } 5 | 6 | function proxyResponse(msg) { 7 | var code = msg.getResponseHeader().getStatusCode(); 8 | // You can add more codes here 9 | if (code == 404 || code == 403 || code == 500 || code == 502) { 10 | // Drop the response 11 | return false; 12 | } 13 | return true; 14 | } 15 | -------------------------------------------------------------------------------- /proxy/Drop requests not in scope.js: -------------------------------------------------------------------------------- 1 | // This script drops ALL requests that are out of scope 2 | 3 | function proxyRequest(msg) { 4 | // Change this test to match whatever requests you want to fake 5 | if (!msg.isInScope()) { 6 | msg.setResponseBody( 7 | '\n' + 8 | "

403 Forbidden

\n" + 9 | "Out of scope request blocked by ZAP script 'Drop requests not in scope.js'\n" + 10 | "" 11 | ); 12 | msg.setResponseHeader( 13 | "HTTP/1.1 403 Forbidden\r\n" + "Content-Type: text/html; charset=UTF-8" 14 | ); 15 | msg.getResponseHeader().setContentLength(msg.getResponseBody().length()); 16 | } 17 | return true; 18 | } 19 | 20 | function proxyResponse(msg) { 21 | // Dont need to do anything here 22 | return true; 23 | } 24 | -------------------------------------------------------------------------------- /proxy/Emulate Android.js: -------------------------------------------------------------------------------- 1 | // This script was lazily crafted by Anthony Cozamanis, kurobeats@yahoo.co.jp 2 | 3 | function proxyRequest(msg) { 4 | var ua; 5 | ua = 6 | "Mozilla/5.0 (Linux; U; Android 2.2; en-us; Droid Build/FRG22D) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1"; 7 | msg.getRequestHeader().setHeader("User-Agent", ua); 8 | return true; 9 | } 10 | 11 | function proxyResponse(msg) { 12 | // Leave the response alone 13 | return true; 14 | } 15 | -------------------------------------------------------------------------------- /proxy/Emulate Chrome.js: -------------------------------------------------------------------------------- 1 | // This script was lazily crafted by Anthony Cozamanis, kurobeats@yahoo.co.jp 2 | 3 | function proxyRequest(msg) { 4 | var ua; 5 | ua = 6 | "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.154 Safari/537.36"; 7 | msg.getRequestHeader().setHeader("User-Agent", ua); 8 | return true; 9 | } 10 | 11 | function proxyResponse(msg) { 12 | // Leave the response alone 13 | return true; 14 | } 15 | -------------------------------------------------------------------------------- /proxy/Emulate Firefox.js: -------------------------------------------------------------------------------- 1 | // This script was lazily crafted by Anthony Cozamanis, kurobeats@yahoo.co.jp 2 | 3 | function proxyRequest(msg) { 4 | var ua; 5 | ua = 6 | "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"; 7 | msg.getRequestHeader().setHeader("User-Agent", ua); 8 | return true; 9 | } 10 | 11 | function proxyResponse(msg) { 12 | // Leave the response alone 13 | return true; 14 | } 15 | -------------------------------------------------------------------------------- /proxy/Emulate IE.js: -------------------------------------------------------------------------------- 1 | // This script was lazily crafted by Anthony Cozamanis, kurobeats@yahoo.co.jp 2 | 3 | function proxyRequest(msg) { 4 | var ua; 5 | ua = "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"; 6 | msg.getRequestHeader().setHeader("User-Agent", ua); 7 | return true; 8 | } 9 | 10 | function proxyResponse(msg) { 11 | // Leave the response alone 12 | return true; 13 | } 14 | -------------------------------------------------------------------------------- /proxy/Emulate Safari.js: -------------------------------------------------------------------------------- 1 | // This script was lazily crafted by Anthony Cozamanis, kurobeats@yahoo.co.jp 2 | 3 | function proxyRequest(msg) { 4 | var ua; 5 | ua = 6 | "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.74.9 (KHTML, like Gecko) Version/7.0.2 Safari/537.74.9"; 7 | msg.getRequestHeader().setHeader("User-Agent", ua); 8 | return true; 9 | } 10 | 11 | function proxyResponse(msg) { 12 | // Leave the response alone 13 | return true; 14 | } 15 | -------------------------------------------------------------------------------- /proxy/Emulate iOS.js: -------------------------------------------------------------------------------- 1 | // This script was lazily crafted by Anthony Cozamanis, kurobeats@yahoo.co.jp 2 | 3 | function proxyRequest(msg) { 4 | var ua; 5 | ua = 6 | "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B176 Safari/7534.48.3"; 7 | msg.getRequestHeader().setHeader("User-Agent", ua); 8 | return true; 9 | } 10 | 11 | function proxyResponse(msg) { 12 | // Leave the response alone 13 | return true; 14 | } 15 | -------------------------------------------------------------------------------- /proxy/Return fake response.js: -------------------------------------------------------------------------------- 1 | // This script allow you to return 'fake' responses for any requests you like. 2 | // By setting the logic in proxyRequest(), the request will not be sent to the server. 3 | // By setting the logic in proxyResponse(), the request will be sent to the server. 4 | 5 | function proxyRequest(msg) { 6 | // Change this test to match whatever requests you want to fake 7 | if ( 8 | msg 9 | .getRequestHeader() 10 | .getURI() 11 | .toString() 12 | .equals("http://localhost:8080/bodgeit/about.jsp") 13 | ) { 14 | print( 15 | "Faking response for url " + msg.getRequestHeader().getURI().toString() 16 | ); 17 | 18 | msg.setResponseBody( 19 | '\n' + 20 | "

Hack

\n" + 21 | "This is content generated by the script\n" + 22 | "" 23 | ); 24 | msg.setResponseHeader( 25 | "HTTP/1.1 200 OK\r\n" + "Content-Type: text/html; charset=UTF-8" 26 | ); 27 | msg.getResponseHeader().setContentLength(msg.getResponseBody().length()); 28 | } 29 | return true; 30 | } 31 | 32 | function proxyResponse(msg) { 33 | // Dont typically need to do anything here 34 | return true; 35 | } 36 | -------------------------------------------------------------------------------- /proxy/WAF_Bypass.js: -------------------------------------------------------------------------------- 1 | // This script allows you to inject headers your requests that can under some 2 | // conditions allow you to bypass WAF devices. 3 | // You may need to change the IP addresses for known internal ones, if not defaults may work. 4 | // This script is best used in conjunction with SQLi or other such attacks. 5 | // To leverage such bypasses in the fuzzer or active scanner consider leveraging an HttpSender script. 6 | 7 | function proxyRequest(msg) { 8 | msg.getRequestHeader().setHeader("X-Forward-For", "127.0.0.1"); 9 | msg.getRequestHeader().setHeader("X-Remote-IP", "127.0.0.1"); 10 | msg.getRequestHeader().setHeader("X-Originating-IP", "127.0.0.1"); 11 | msg.getRequestHeader().setHeader("X-Remote-Addr", "127.0.0.1"); 12 | msg.getRequestHeader().setHeader("X-Client-IP", "127.0.0.1"); 13 | return true; 14 | } 15 | 16 | function proxyResponse(msg) { 17 | // Leave the response alone 18 | return true; 19 | } 20 | -------------------------------------------------------------------------------- /proxy/dropCookiesSelectively.js: -------------------------------------------------------------------------------- 1 | //@zaproxy-proxy 2 | 3 | var globalCookies = ["CONSENT", "GZ", "SID"]; 4 | 5 | function proxyRequest(msg) { 6 | var cookies = msg.getRequestHeader().getHttpCookies(); // This is a List 7 | var iterator = cookies.iterator(); 8 | while (iterator.hasNext()) { 9 | var cookie = iterator.next(); // This is a HttpCookie 10 | if (globalCookies.indexOf(cookie.name) > -1) { 11 | iterator.remove(); 12 | print("Stripped away: " + cookie.name); 13 | } 14 | } 15 | msg.getRequestHeader().setCookies(cookies); 16 | return true; 17 | } 18 | 19 | function proxyResponse(msg) { 20 | return true; 21 | } 22 | -------------------------------------------------------------------------------- /selenium/FillOTPInMFA.js: -------------------------------------------------------------------------------- 1 | /* 2 | This script will fill the OTP if MFA is configured on web-app. Browser-based auth is the pre-requisite for this script. 3 | You need to analyze DOM of the web app this script needs to run on and modify the parameters accordingly. 4 | This script assumes that the web app has fixed OTP for testing which can be stored in the variable below. 5 | */ 6 | 7 | function browserLaunched(utils) { 8 | var By = Java.type("org.openqa.selenium.By"); 9 | var Thread = Java.type("java.lang.Thread"); 10 | var url = utils.waitForURL(5000); 11 | var wd = utils.getWebDriver(); 12 | var OTP = "123456"; 13 | 14 | wd.get(url + "#/login"); 15 | Thread.sleep(30000); //Wait for ZAP to handle the auth. 16 | wd.findElement(By.id("one-time-code")).sendKeys(OTP); //Replace the input field as per your web-app's DOM 17 | Thread.sleep(1000); 18 | wd.executeScript( 19 | "document.querySelector('[aria-label=\"Verify Code\"]').click()" 20 | ); //Replace the submit label as per your web-app's DOM 21 | } 22 | -------------------------------------------------------------------------------- /sequence/README.md: -------------------------------------------------------------------------------- 1 | Sequence scripts 2 | ================ 3 | 4 | Scripts which define sequences of requests that should perform a specific task in an application. 5 | Sequence scripts must be implemented in Zest, and are used by the optional [Sequence Scanner](https://www.zaproxy.org/docs/desktop/addons/sequence-scanner/) add-on that is available from the ZAP Marketplace. 6 | 7 | 8 | -------------------------------------------------------------------------------- /settings.gradle.kts: -------------------------------------------------------------------------------- 1 | plugins { 2 | id("org.zaproxy.common.settings") version "0.5.0" 3 | id("com.diffplug.spotless") version "6.25.0" apply false 4 | } 5 | 6 | rootProject.name = "community-scripts" 7 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help/helpset.hs: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | Community Scripts Add-on 7 | 8 | 9 | communityScripts 10 | 11 | 12 | 13 | 14 | TOC 15 | 16 | org.zaproxy.zap.extension.help.ZapTocView 17 | toc.xml 18 | 19 | 20 | 21 | Index 22 | 23 | javax.help.IndexView 24 | index.xml 25 | 26 | 27 | 28 | Search 29 | 30 | javax.help.SearchView 31 | 32 | JavaHelpSearch 33 | 34 | 35 | 36 | 37 | Favorites 38 | 39 | javax.help.FavoritesView 40 | 41 | 42 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ar_SA/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ar_SA/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ar_SA/helpset_ar_SA.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ar_SA/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ar_SA/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ar_SA/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_az_AZ/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_az_AZ/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_az_AZ/helpset_az_AZ.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_az_AZ/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_az_AZ/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_az_AZ/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_bs_BA/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_bs_BA/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_bs_BA/helpset_bs_BA.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_bs_BA/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_bs_BA/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_bs_BA/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_da_DK/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_da_DK/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_da_DK/helpset_da_DK.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_da_DK/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_da_DK/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_da_DK/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_de_DE/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_de_DE/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_de_DE/helpset_de_DE.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_de_DE/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_de_DE/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_de_DE/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_el_GR/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_el_GR/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_el_GR/helpset_el_GR.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_el_GR/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_el_GR/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_el_GR/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_es_ES/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_es_ES/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_es_ES/helpset_es_ES.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_es_ES/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_es_ES/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_es_ES/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fa_IR/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fa_IR/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fa_IR/helpset_fa_IR.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fa_IR/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fa_IR/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fa_IR/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fil_PH/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fil_PH/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fil_PH/helpset_fil_PH.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fil_PH/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fil_PH/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fil_PH/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fr_FR/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fr_FR/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fr_FR/helpset_fr_FR.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fr_FR/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fr_FR/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_fr_FR/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hi_IN/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hi_IN/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hi_IN/helpset_hi_IN.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hi_IN/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hi_IN/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hi_IN/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hr_HR/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hr_HR/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hr_HR/helpset_hr_HR.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hr_HR/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hr_HR/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hr_HR/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hu_HU/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hu_HU/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hu_HU/helpset_hu_HU.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hu_HU/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hu_HU/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_hu_HU/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_id_ID/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_id_ID/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_id_ID/helpset_id_ID.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_id_ID/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_id_ID/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_id_ID/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_it_IT/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_it_IT/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_it_IT/helpset_it_IT.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_it_IT/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_it_IT/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_it_IT/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ja_JP/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ja_JP/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ja_JP/helpset_ja_JP.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ja_JP/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ja_JP/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ja_JP/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ko_KR/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ko_KR/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ko_KR/helpset_ko_KR.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ko_KR/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ko_KR/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ko_KR/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ms_MY/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ms_MY/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ms_MY/helpset_ms_MY.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ms_MY/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ms_MY/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ms_MY/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pl_PL/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pl_PL/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pl_PL/helpset_pl_PL.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pl_PL/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pl_PL/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pl_PL/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pt_BR/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pt_BR/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pt_BR/helpset_pt_BR.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pt_BR/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pt_BR/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_pt_BR/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ro_RO/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ro_RO/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ro_RO/helpset_ro_RO.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ro_RO/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ro_RO/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ro_RO/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ru_RU/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ru_RU/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ru_RU/helpset_ru_RU.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Надстройка «Скрипты сообщества» 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ru_RU/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ru_RU/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ru_RU/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_si_LK/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_si_LK/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_si_LK/helpset_si_LK.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_si_LK/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_si_LK/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_si_LK/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sk_SK/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sk_SK/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sk_SK/helpset_sk_SK.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sk_SK/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sk_SK/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sk_SK/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sl_SI/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sl_SI/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sl_SI/helpset_sl_SI.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sl_SI/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sl_SI/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sl_SI/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sq_AL/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sq_AL/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sq_AL/helpset_sq_AL.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sq_AL/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sq_AL/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sq_AL/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_CS/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_CS/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_CS/helpset_sr_CS.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_CS/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_CS/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_CS/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_SP/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_SP/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_SP/helpset_sr_SP.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_SP/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_SP/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_sr_SP/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_tr_TR/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_tr_TR/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_tr_TR/helpset_tr_TR.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_tr_TR/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_tr_TR/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_tr_TR/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ur_PK/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ur_PK/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ur_PK/helpset_ur_PK.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ur_PK/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ur_PK/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_ur_PK/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_zh_CN/contents/images/script-share.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zaproxy/community-scripts/287b0ef5489da2dcf2187f3e5e34e23c03d1a48a/src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_zh_CN/contents/images/script-share.png -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_zh_CN/helpset_zh_CN.hs: -------------------------------------------------------------------------------- 1 | 2 | 3 | Community Scripts Add-on 4 | 5 | 6 | communityScripts 7 | 8 | 9 | 10 | 11 | TOC 12 | 13 | org.zaproxy.zap.extension.help.ZapTocView 14 | toc.xml 15 | 16 | 17 | 18 | Index 19 | 20 | javax.help.IndexView 21 | index.xml 22 | 23 | 24 | 25 | Search 26 | 27 | javax.help.SearchView 28 | 29 | JavaHelpSearch 30 | 31 | 32 | 33 | 34 | Favorites 35 | 36 | javax.help.FavoritesView 37 | 38 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_zh_CN/index.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_zh_CN/map.jhm: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /src/main/javahelp/org/zaproxy/zap/extension/communityScripts/resources/help_zh_CN/toc.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ar_SA.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_az_AZ.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = https\://github.com/zaproxy/community-scripts \u00fcnvan\u0131ndan \u00fcmumi scriptl\u0259r 2 | communityScripts.name = \u00dcmumi scriptl\u0259r 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_bn_BD.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_bs_BA.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ceb_PH.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_da_DK.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_de_DE.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Skripts von https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Skripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_el_GR.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_es_ES.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Guiones de la Comunidad de https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Guiones de la Comunidad \n\nEste archivo define todas las variantes predeterminadas (en ingl\u00e9s) de todos los mensajes internacionalizados\n\ncommunityScripts.name 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_fa_IR.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = \u0627\u062c\u062a\u0645\u0627\u0639 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627 \u0627\u0632 https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = \u0627\u062c\u062a\u0645\u0627\u0639 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_fil_PH.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Iskrip Pang-komunidad mula sa https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Ang mga script ng komunidad 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_fr_FR.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Contributions de scripts de\: https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Contributions de scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ha_HG.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_he_IL.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_hi_IN.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_hr_HR.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_hu_HU.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = K\u00f6z\u00f6ss\u00e9gi szkriptek innen\: https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = K\u00f6z\u00f6ss\u00e9gi szkriptek 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_id_ID.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Skrip Komunitas dari https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Skrip Komunitas 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_it_IT.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Script della comunit\u00e0 dal sito https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Script della comunit\u00e0 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ja_JP.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = \u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u30b9\u30af\u30ea\u30d7\u30c8 https\://github.com/zaproxy/community-scripts \u304b\u3089 2 | communityScripts.name = \u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u30b9\u30af\u30ea\u30d7\u30c8 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ko_KR.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_mk_MK.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ms_MY.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_nb_NO.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_nl_NL.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts van https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_pcm_NG.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_pl_PL.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Skrypty spo\u0142eczno\u015bci ze strony https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Skrypty spo\u0142eczno\u015bci 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_pt_BR.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Scripts da Comunidade em https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Scripts da Comunidade 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_pt_PT.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ro_RO.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ru_RU.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = \u0421\u043a\u0440\u0438\u043f\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 \u043e\u0442 https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = \u0421\u043a\u0440\u0438\u043f\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_si_LK.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_sk_SK.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_sl_SI.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_sq_AL.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_sr_CS.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_sr_SP.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_tr_TR.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Topluluk Betikleri buradan\: https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Topluluk Betikleri 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_uk_UA.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = \u0421\u043a\u0440\u0438\u043f\u0442\u0438 \u0421\u043f\u0456\u043b\u044c\u043d\u043e\u0442\u0438 \u0437 https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = \u0421\u043a\u0440\u0438\u043f\u0442\u0438 \u0421\u043f\u0456\u043b\u044c\u043d\u043e\u0442\u0438 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_ur_PK.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_vi_VN.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = C\u00e1c t\u1eadp l\u1ec7nh c\u1ed9ng \u0111\u1ed3ng t\u1eeb https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = C\u00e1c t\u1eadp l\u1ec7nh c\u1ed9ng \u0111\u1ed3ng 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_yo_NG.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_zh_CN.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = \u793e\u533a\u811a\u672c\u6765\u81ea https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = \u793e\u533a\u811a\u672c 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/Messages_zh_TW.properties: -------------------------------------------------------------------------------- 1 | communityScripts.desc = Community Scripts from https\://github.com/zaproxy/community-scripts 2 | communityScripts.name = Community Scripts 3 | -------------------------------------------------------------------------------- /src/main/resources/org/zaproxy/zap/extension/communityScripts/resources/cve-2021-22214.yml: -------------------------------------------------------------------------------- 1 | # This is a sample file for the purpose of demonstrating Cve-2021-22214, Unauthenticated GitLab SSRF - CI Lint API 2 | :.api_test: 3 | :rules: 4 | - :if: $CI_PIPELINE_SOURCE=="merge_request_event" 5 | :changes: 6 | - src/api/* 7 | :deploy: 8 | :rules: 9 | - :when: manual 10 | :allow_failure: true 11 | :extends: 12 | - ".api_test" 13 | :script: 14 | - echo "hello world" -------------------------------------------------------------------------------- /standalone/Active scan rule list.js: -------------------------------------------------------------------------------- 1 | // This script gives details about all of the active scan rules installed 2 | 3 | extAscan = control 4 | .getExtensionLoader() 5 | .getExtension(org.zaproxy.zap.extension.ascan.ExtensionActiveScan.NAME); 6 | 7 | plugins = extAscan 8 | .getPolicyManager() 9 | .getDefaultScanPolicy() 10 | .getPluginFactory() 11 | .getAllPlugin() 12 | .toArray(); 13 | 14 | print("\n"); 15 | 16 | for (var i = 0; i < plugins.length; i++) { 17 | try { 18 | print("Plugin ID: " + plugins[i].getId()); 19 | print("Name: " + plugins[i].getName()); 20 | print("Desc: " + plugins[i].getDescription()); 21 | print("Risk: " + plugins[i].getRisk()); 22 | print("Soln: " + plugins[i].getSolution()); 23 | print("Ref: " + plugins[i].getReference()); 24 | print("CWE: " + plugins[i].getCweId()); 25 | print("WASC: " + plugins[i].getWascId()); 26 | print(""); 27 | } catch (e) { 28 | print(e); 29 | } 30 | } 31 | -------------------------------------------------------------------------------- /standalone/Juice shop authentication by form.js: -------------------------------------------------------------------------------- 1 | // Standalone script to demonstrate logging into OWASP Juice Shop (https://owasp.org/www-project-juice-shop/) 2 | // via the standard login form using Firefox. 3 | // Juice Shop will need to be accessible via http://localhost:3000/ and you will need to register 4 | // a user with a name of test@test.com and a password of test123 5 | // You can change any of the variables to match your environment if needed. 6 | 7 | var By = Java.type("org.openqa.selenium.By"); 8 | var Thread = Java.type("java.lang.Thread"); 9 | var juiceshop = "http://localhost:3000/"; 10 | var username = "test@test.com"; 11 | var password = "test123"; 12 | 13 | var extSel = control 14 | .getExtensionLoader() 15 | .getExtension(org.zaproxy.zap.extension.selenium.ExtensionSelenium.class); 16 | 17 | var wd = extSel.getWebDriverProxyingViaZAP(1, "firefox"); 18 | wd.get(juiceshop); 19 | Thread.sleep(1000); 20 | wd.get(juiceshop + "#/login"); 21 | wd.findElement(By.id("email")).sendKeys(username); 22 | wd.findElement(By.id("password")).sendKeys(password); 23 | wd.findElement(By.id("loginButton")).click(); 24 | -------------------------------------------------------------------------------- /standalone/Juice shop authentication by google.js: -------------------------------------------------------------------------------- 1 | // Standalone script to demonstrate logging into OWASP Juice Shop (https://owasp.org/www-project-juice-shop/) 2 | // via Google SSO using Firefox. 3 | // Juice Shop will need to be accessible via http://localhost:3000/ and you will need to change the 4 | // username and password to match a valid Google account. 5 | 6 | var By = Java.type("org.openqa.selenium.By"); 7 | var Thread = Java.type("java.lang.Thread"); 8 | var juiceshop = "http://localhost:3000/"; 9 | var username = "zap.addo.sb@gmail.com"; // Change this to an account you own 10 | var password = "nottherealpassword"; // Change this to the right password for your account 11 | 12 | var extSel = control 13 | .getExtensionLoader() 14 | .getExtension(org.zaproxy.zap.extension.selenium.ExtensionSelenium.class); 15 | 16 | var wd = extSel.getWebDriverProxyingViaZAP(1, "firefox"); 17 | wd.get(juiceshop); 18 | Thread.sleep(1000); 19 | wd.get(juiceshop + "#/login"); 20 | Thread.sleep(1000); 21 | wd.findElement(By.id("loginButtonGoogle")).click(); 22 | Thread.sleep(1000); 23 | wd.findElement(By.id("identifierId")).sendKeys(username); 24 | wd.findElement(By.className("RveJvd")).click(); 25 | Thread.sleep(1000); 26 | wd.findElement(By.name("password")).sendKeys(password); 27 | wd.findElement(By.className("RveJvd")).click(); 28 | -------------------------------------------------------------------------------- /standalone/Loop through alerts.js: -------------------------------------------------------------------------------- 1 | // This script loops through all of the alerts - change it to do whatever you want to do :) 2 | // 3 | // This is a standalone script which you can run from the Script Console 4 | 5 | extAlert = control 6 | .getExtensionLoader() 7 | .getExtension(org.zaproxy.zap.extension.alert.ExtensionAlert.NAME); 8 | if (extAlert != null) { 9 | var Alert = org.parosproxy.paros.core.scanner.Alert; 10 | var alerts = extAlert.getAllAlerts(); 11 | for (var i = 0; i < alerts.length; i++) { 12 | var alert = alerts[i]; 13 | print(alert.uri); 14 | print("\tName:\t" + alert.name); 15 | print("\tRisk:\t" + Alert.MSG_RISK[alert.risk]); 16 | print("\tConfidence:\t" + Alert.MSG_CONFIDENCE[alert.confidence]); 17 | // For more alert properties see https://static.javadoc.io/org.zaproxy/zap/latest/org/parosproxy/paros/core/scanner/Alert.html 18 | } 19 | } 20 | -------------------------------------------------------------------------------- /standalone/Loop through history table.js: -------------------------------------------------------------------------------- 1 | // This script loops through the history table - change it to do whatever you want to do :) 2 | // 3 | // Standalone scripts have no template. 4 | // They are only evaluated when you run them. 5 | 6 | extHist = control 7 | .getExtensionLoader() 8 | .getExtension(org.parosproxy.paros.extension.history.ExtensionHistory.NAME); 9 | if (extHist != null) { 10 | i = 1; 11 | lastRef = extHist.getLastHistoryId(); // Get current max history reference 12 | // Loop through the history table, printing out the history id and the URL 13 | while (i <= lastRef) { 14 | hr = extHist.getHistoryReference(i); 15 | if (hr) { 16 | url = hr.getHttpMessage().getRequestHeader().getURI().toString(); 17 | print("Got History record id " + hr.getHistoryId() + " URL=" + url); 18 | } 19 | i++; 20 | } 21 | } 22 | -------------------------------------------------------------------------------- /standalone/PrivateMethodAccess.js: -------------------------------------------------------------------------------- 1 | /* 2 | When writing scripts you may find that you need to access private java methods. 3 | This script shows how you can do this easily. 4 | 5 | WARNING: we do not consider private methods to be part of the public API, so they may 6 | be changed or removed at any time. 7 | If you think you have a strong case for making a method public then either: 8 | 9 | 1. Ask on the ZAP Dev Group: https://groups.google.com/group/zaproxy-develop 10 | 2. Submit a pull request making the change (but be prepared for it to be rejected) 11 | 12 | */ 13 | 14 | var ExtensionAlert = Java.type( 15 | "org.zaproxy.zap.extension.alert.ExtensionAlert" 16 | ); 17 | var MethodUtils = Java.type("org.apache.commons.lang3.reflect.MethodUtils"); 18 | 19 | extAlert = control.getExtensionLoader().getExtension(ExtensionAlert); 20 | 21 | print(extAlert); 22 | 23 | // Note that there are a lot of other methods in MethodUtils if these are not what you are looking for. 24 | 25 | // Call a private method with no parameters 26 | print(MethodUtils.invokeMethod(extAlert, true, "getAlertPanel")); 27 | 28 | // Call a private method with parameters 29 | print(MethodUtils.invokeMethod(extAlert, true, "applyOverride", "abc", "+def")); 30 | -------------------------------------------------------------------------------- /standalone/README.md: -------------------------------------------------------------------------------- 1 | Standalone scripts 2 | ================== 3 | 4 | Scripts that are self contained and are only run when you start them manually. 5 | 6 | **Note**: "_Persona Create Account.zst_" will no longer work as of November 30th 2016, for more information see: [Identity/Persona Shutdown Guidelines for Reliers](https://wiki.mozilla.org/Identity/Persona_Shutdown_Guidelines_for_Reliers). The script is being kept in the repository as an example. 7 | 8 | ## JavaScript template 9 | 10 | ```JavaScript 11 | // Standalone scripts have no template. 12 | // They are only evaluated when you run them. 13 | ``` 14 | -------------------------------------------------------------------------------- /standalone/Split download extract.rb: -------------------------------------------------------------------------------- 1 | require 'java' 2 | 3 | # Adjust the script to get join a file download which is split over several requests. 4 | # This is useful if you have a JavaScript file download that downloads chunks of the file 5 | # to reduce the risk of a broken connection. 6 | 7 | extHist = org.parosproxy.paros.control.Control.getSingleton().getExtensionLoader().getExtension("ExtensionHistory") 8 | if (extHist != nil) 9 | 10 | File.open 'YOUR FILE PATH', 'wb' do |f| 11 | extHist.getSelectedHistoryReferences.each do |hr| 12 | content_type = hr.getHttpMessage.getResponseHeader.getHeader("Content-Type") 13 | url = hr.getHttpMessage.getRequestHeader.getURI.toString 14 | # additional filter to jump over files that are not desired - for example if you have a application 15 | # that is polling data open in background so and you just do not want to manually select them in the history. 16 | # if you do not want the filter, commment out the next line and the corresponding end 17 | if (content_type.include? 'octet-stream') && (url.include? 'www.example.com') 18 | payload = hr.getHttpMessage.getResponseBody.getBytes 19 | f.write payload if payload 20 | end 21 | end 22 | end 23 | end 24 | -------------------------------------------------------------------------------- /standalone/Traverse sites tree.js: -------------------------------------------------------------------------------- 1 | // This script traverses the sites tree - change it to do whatever you want to do :) 2 | // 3 | // Standalone scripts have no template. 4 | // They are only evaluated when you run them. 5 | 6 | function listChildren(node, level) { 7 | var j; 8 | for (j = 0; j < node.getChildCount(); j++) { 9 | print(Array(level + 1).join(" ") + node.getChildAt(j).getNodeName()); 10 | listChildren(node.getChildAt(j), level + 1); 11 | } 12 | } 13 | 14 | root = model.getSession().getSiteTree().getRoot(); 15 | 16 | listChildren(root, 0); 17 | -------------------------------------------------------------------------------- /standalone/devTools.js: -------------------------------------------------------------------------------- 1 | function describeObject(object) { 2 | try { 3 | print("========= Methods " + object.class + " ========="); 4 | for (var m in object.class.getDeclaredMethods()) { 5 | print(m); 6 | } 7 | print("--- Fields ---"); 8 | for (var f in object.class.getDeclaredFields()) { 9 | print(f); 10 | } 11 | print("========= Methods ========="); 12 | } catch (e) { 13 | //describeObject(e.getStackTrace()) 14 | print("Caught " + e); 15 | for (var st in e.getStackTrace()) print(st); 16 | } 17 | } 18 | 19 | function getFieldByReflection(object, field_name) { 20 | var field = object.class.getDeclaredField(field_name); 21 | field.setAccessible(true); 22 | return field.get(object); 23 | } 24 | 25 | function getMethodByReflection(object, method_name) { 26 | var method = object.class.getDeclaredMethod(method_name); 27 | method.setAccessible(true); 28 | return method; 29 | } 30 | 31 | function getConstructors(object) { 32 | var constructors = object.getClass().getDeclaredConstructors(); 33 | for (var c in constructors) print(c); 34 | } 35 | -------------------------------------------------------------------------------- /standalone/enableDebugLogging.js: -------------------------------------------------------------------------------- 1 | var Configurator = Java.type( 2 | "org.apache.logging.log4j.core.config.Configurator" 3 | ); 4 | var Level = Java.type("org.apache.logging.log4j.Level"); 5 | 6 | // https://logging.apache.org/log4j/2.x/javadoc.html 7 | Configurator.setLevel({ 8 | // The following will enable DEBUG logging for the API 9 | "org.zaproxy.zap.extension.api.API": Level.DEBUG, 10 | // The following will enable DEBUG logging for the Session Fixation scan rule 11 | "org.zaproxy.zap.extension.ascanrulesBeta.SessionFixationScanRule": 12 | Level.DEBUG, 13 | // The following will enable DEBUG logging for the spider add-on 14 | "org.zaproxy.addon.spider": Level.DEBUG, 15 | }); 16 | -------------------------------------------------------------------------------- /standalone/example_library.js: -------------------------------------------------------------------------------- 1 | //@zaproxy-standalone 2 | 3 | // Every function in this file will be imported and added in the global context in ./load_function_example.js 4 | 5 | var number = 1; 6 | 7 | function customFunction(customParam) { 8 | print(customParam); 9 | return "the return"; 10 | } 11 | -------------------------------------------------------------------------------- /standalone/load_function_example.js: -------------------------------------------------------------------------------- 1 | //@zaproxy-standalone 2 | 3 | // This script will load example_library.js and a popular JS library from the Internet 4 | // Docs: https://wiki.openjdk.java.net/display/Nashorn/Nashorn+extensions 5 | 6 | print("loading scripts from: " + java.lang.System.getProperty("user.dir")); 7 | 8 | var number = 0; // This variable will be overwritten by the loading of example_library.js 9 | 10 | // Load example_library.js 11 | load("./example_library.js"); 12 | 13 | print(number); 14 | 15 | print(customFunction("hello")); 16 | 17 | // Load Loadash 18 | load("https://cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.10/lodash.min.js"); 19 | 20 | print(_.last([1, 2, 3])); 21 | -------------------------------------------------------------------------------- /standalone/scan_rule_list.js: -------------------------------------------------------------------------------- 1 | // This script gives details about all of the scan rules installed 2 | 3 | extAscan = control 4 | .getExtensionLoader() 5 | .getExtension(org.zaproxy.zap.extension.ascan.ExtensionActiveScan.NAME); 6 | 7 | plugins = extAscan 8 | .getPolicyManager() 9 | .getDefaultScanPolicy() 10 | .getPluginFactory() 11 | .getAllPlugin() 12 | .toArray(); 13 | 14 | print("Plugin ID\tName\tType\tStatus"); 15 | for (var i = 0; i < plugins.length; i++) { 16 | try { 17 | print( 18 | plugins[i].getId() + 19 | "\t" + 20 | plugins[i].getName() + 21 | "\tActive" + 22 | "\t" + 23 | plugins[i].getStatus() 24 | ); 25 | } catch (e) { 26 | print(e); 27 | } 28 | } 29 | 30 | extPscan = control 31 | .getExtensionLoader() 32 | .getExtension(org.zaproxy.addon.pscan.ExtensionPassiveScan2.NAME); 33 | 34 | plugins = extPscan.getPassiveScannersManager().getScanRules(); 35 | 36 | for (var i = 0; i < plugins.length; i++) { 37 | try { 38 | print( 39 | plugins[i].getPluginId() + 40 | "\t" + 41 | plugins[i].getName() + 42 | "\tPassive" + 43 | "\t" + 44 | plugins[i].getStatus() 45 | ); 46 | } catch (e) { 47 | print(e); 48 | } 49 | } 50 | -------------------------------------------------------------------------------- /standalone/window_creation_template.js: -------------------------------------------------------------------------------- 1 | //Template for GUI creation 2 | 3 | var absframe = Java.type("org.parosproxy.paros.view.AbstractFrame"); 4 | var jlabel = Java.type("javax.swing.JLabel"); 5 | var jmenubar = Java.type("javax.swing.JMenuBar"); 6 | var jmenu = Java.type("javax.swing.JMenu"); 7 | var jmenuitem = Java.type("javax.swing.JMenuItem"); 8 | var window = new absframe(); 9 | 10 | init(); 11 | 12 | function init() { 13 | window.setAlwaysOnTop(false); 14 | window.setSize(500, 500); 15 | var menubar = new jmenubar(); 16 | var menu = new jmenu("A Menu"); 17 | var menu_ac = menu.getAccessibleContext(); 18 | menu_ac.setAccessibleDescription("The only menu in this program"); 19 | var menuitem = new jmenuitem("A Menu Item"); 20 | menu.add(menuitem); 21 | menubar.add(menu); 22 | window.setJMenuBar(menubar); 23 | var lbl = new jlabel("A Label"); 24 | lbl.setHorizontalAlignment(jlabel.CENTER); 25 | lbl.setVerticalAlignment(jlabel.CENTER); 26 | window.setContentPane(lbl); 27 | window.setVisible(true); 28 | } 29 | -------------------------------------------------------------------------------- /standalone/window_creation_template.py: -------------------------------------------------------------------------------- 1 | """ 2 | Template for GUI creation - ported for Python/Jython 3 | 4 | """ 5 | 6 | from org.parosproxy.paros.view import AbstractFrame; 7 | from javax.swing import JLabel; 8 | from javax.swing import JMenuBar; 9 | from javax.swing import JMenu; 10 | from javax.swing import JMenuItem; 11 | 12 | class absframe (AbstractFrame): 13 | def __init__(self): 14 | self.setAlwaysOnTop(False); 15 | self.setSize(500, 500); 16 | menubar = JMenuBar(); 17 | menu = JMenu("A Menu"); 18 | menu_ac = menu.getAccessibleContext(); 19 | menu_ac.setAccessibleDescription("The only menu in this program"); 20 | menuitem = JMenuItem("A Menu Item"); 21 | menu.add(menuitem); 22 | menubar.add(menu); 23 | self.setJMenuBar(menubar); 24 | lbl = JLabel("A Label"); 25 | lbl.setHorizontalAlignment(JLabel.CENTER); 26 | lbl.setVerticalAlignment(JLabel.CENTER); 27 | self.setContentPane(lbl); 28 | self.setVisible(True); 29 | 30 | window = absframe(); -------------------------------------------------------------------------------- /targeted/Find HTML comments.js: -------------------------------------------------------------------------------- 1 | // Targeted scripts can only be invoked by you, the user, eg via a right-click option on the Sites or History tabs 2 | 3 | function invokeWith(msg) { 4 | // Debugging can be done using println like this 5 | print("Finding comments in " + msg.getRequestHeader().getURI().toString()); 6 | 7 | var body = msg.getResponseBody().toString(); 8 | // Look for html comments 9 | if (body.indexOf("", o); 13 | print("\t" + body.substr(o, e - o + 3)); 14 | o = body.indexOf("