[][src]Module zap_api::ascan

Functions

add_excluded_param

Adds a new parameter excluded from the scan, using the specified name. Optionally sets if the new entry applies to a specific URL (default, all URLs) and sets the ID of the type of the parameter (default, ID of any type). The type IDs can be obtained with the view excludedParamTypes.

add_scan_policy
alerts_ids

Gets the IDs of the alerts raised during the scan with the given ID. An alert can be obtained with 'alert' core view.

attack_mode_queue
clear_excluded_from_scan

Clears the regexes of URLs excluded from the active scans.

disable_all_scanners

Disables all scanners of the scan policy with the given name, or the default if none given.

disable_scanners

Disables the scanners with the given IDs (comma separated list of IDs) of the scan policy with the given name, or the default if none given.

enable_all_scanners

Enables all scanners of the scan policy with the given name, or the default if none given.

enable_scanners

Enables the scanners with the given IDs (comma separated list of IDs) of the scan policy with the given name, or the default if none given.

exclude_from_scan

Adds a regex of URLs that should be excluded from the active scans.

excluded_from_scan

Gets the regexes of URLs excluded from the active scans.

excluded_param_types

Gets all the types of excluded parameters. For each type the following are shown: the ID and the name.

excluded_params

Gets all the parameters that are excluded. For each parameter the following are shown: the name, the URL, and the parameter type.

import_scan_policy

Imports a Scan Policy using the given file system path.

messages_ids

Gets the IDs of the messages sent during the scan with the given ID. A message can be obtained with 'message' core view.

modify_excluded_param

Modifies a parameter excluded from the scan. Allows to modify the name, the URL and the type of parameter. The parameter is selected with its index, which can be obtained with the view excludedParams.

option_add_query_param

Tells whether or not the active scanner should add a query parameter to GET request that don't have parameters to start with.

option_allow_attack_on_start
option_attack_policy
option_default_policy
option_delay_in_ms
option_excluded_param_list

Use view excludedParams instead. Deprecated

option_handle_anti_csrf_tokens
option_host_per_scan
option_inject_plugin_id_in_header

Tells whether or not the active scanner should inject the HTTP request header X-ZAP-Scan-ID, with the ID of the scanner that's sending the requests.

option_max_chart_time_in_mins
option_max_results_to_list
option_max_rule_duration_in_mins
option_max_scan_duration_in_mins
option_max_scans_in_ui
option_prompt_in_attack_mode
option_prompt_to_clear_finished_scans
option_rescan_in_attack_mode
option_scan_headers_all_requests

Tells whether or not the HTTP Headers of all requests should be scanned. Not just requests that send parameters, through the query or request body.

option_show_advanced_dialog
option_target_params_enabled_rpc
option_target_params_injectable
option_thread_per_host
pause
pause_all_scans
policies
remove_all_scans
remove_excluded_param

Removes a parameter excluded from the scan, with the given index. The index can be obtained with the view excludedParams.

remove_scan
remove_scan_policy
resume
resume_all_scans
scan

Runs the active scanner against the given URL and/or Context. Optionally, the 'recurse' parameter can be used to scan URLs under the given URL, the parameter 'inScopeOnly' can be used to constrain the scan to URLs that are in scope (ignored if a Context is specified), the parameter 'scanPolicyName' allows to specify the scan policy (if none is given it uses the default scan policy), the parameters 'method' and 'postData' allow to select a given request in conjunction with the given URL.

scan_as_user

Active Scans from the perspective of a User, obtained using the given Context ID and User ID. See 'scan' action for more details.

scan_policy_names
scan_progress
scanners

Gets the scanners, optionally, of the given scan policy and/or scanner policy/category ID.

scans
set_enabled_policies
set_option_add_query_param

Sets whether or not the active scanner should add a query param to GET requests which do not have parameters to start with.

set_option_allow_attack_on_start
set_option_attack_policy
set_option_default_policy
set_option_delay_in_ms
set_option_handle_anti_csrf_tokens
set_option_host_per_scan
set_option_inject_plugin_id_in_header

Sets whether or not the active scanner should inject the HTTP request header X-ZAP-Scan-ID, with the ID of the scanner that's sending the requests.

set_option_max_chart_time_in_mins
set_option_max_results_to_list
set_option_max_rule_duration_in_mins
set_option_max_scan_duration_in_mins
set_option_max_scans_in_ui
set_option_prompt_in_attack_mode
set_option_prompt_to_clear_finished_scans
set_option_rescan_in_attack_mode
set_option_scan_headers_all_requests

Sets whether or not the HTTP Headers of all requests should be scanned. Not just requests that send parameters, through the query or request body.

set_option_show_advanced_dialog
set_option_target_params_enabled_rpc
set_option_target_params_injectable
set_option_thread_per_host
set_policy_alert_threshold
set_policy_attack_strength
set_scanner_alert_threshold
set_scanner_attack_strength
skip_scanner

Skips the scanner using the given IDs of the scan and the scanner.

status

This file was automatically generated.

stop
stop_all_scans
update_scan_policy