Skip to content

Commit

Permalink
Merge pull request #5920 from psiinon/sequence/help2
Browse files Browse the repository at this point in the history
Sequence: Update help
  • Loading branch information
psiinon authored Nov 15, 2024
2 parents e26cfb0 + cc209e3 commit 4c9f69b
Show file tree
Hide file tree
Showing 2 changed files with 22 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,8 @@ <H2>Job: sequence-import</H2>
assertLength: # Integer, if supplied then add approx len assertion (value between 0 and 100).
</pre>

This job will automatically detect any HTTP Form parameters that are used in future requests and add Zest assignments to handle them.

<H2>Job: sequence-activeScan</H2>
The <code>sequence-activeScan</code> job allows you to active scan sequences.
<pre>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -12,24 +12,41 @@ <H1>Sequence Scanner</H1>
This add-on facilitates the recording and scanning sequences of requests.
In some web applications it is necessary for particular events or pages to be accessed or completed in a certain order.
By recording a sequence and then scanning it, it is possible to ensure such flows happen in an expected manner.
<p>
This add-on supports the <a href="automation.html">Automation Framework</a>.

<H2>Creating Sequences</H2>
<p>
One sequence script should be created for each multi-step operation in the application/site being tested.
</p>
There are two options for creating sequences:
There are three options for creating sequences:
<br><br>
<ol>
<li>Use the Automation Framework <a href="automation.html">sequence-import</a> job.
<li>In either the Sites tree or History tab select the requests you wish to have included, right click, and
use "Add To Zest Script" (either choosing to create a new script or adding to an existing Sequence script).</li>
<li>From the main tool bar, use the "Record a New Zest Script..." button, selecting "Sequence" as the type.</li>
</ol>

<H2>Scanning</H2>
When a new Active Scan is created there is a "Sequence" tab in which you can choose the sequence(s) to be scanned.
Note: The Sequence tab is only visible when "Show advanced options" is selected.

You can active scan sequences via:
<ul>
<li>The "Sequence" tab in the Active Scan dialog - this is only visible when "Show advanced options" is selected.
<li>The context menu "Active Scan Sequence" option on the top node of a Sequence script.
<li>The Automation Framework <a href="automation.html">sequence-activeScan</a> job.
</ul>

For Example:<br>
<img src="images/ascan-sequence.png"></img>
<p>

<H2>Reporting</H2>
The following reports can include sequence scanning results:
<ul>
<li><a href="https://www.zaproxy.org/docs/desktop/addons/report-generation/report-traditional-json/">Traditional JSON Report</a>.
<li><a href="https://www.zaproxy.org/docs/desktop/addons/report-generation/report-traditional-json-plus/">Traditional JSON Report with Requests and Responses</a>.
</ul>

<H3>See also</h3>
<a href="https://zapmultistep.wordpress.com/">ZAP Multi-step Blog</a>
Expand Down

0 comments on commit 4c9f69b

Please sign in to comment.