diff --git a/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/automation.html b/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/automation.html index 5645d11d570..aae1e1aed5b 100644 --- a/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/automation.html +++ b/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/automation.html @@ -23,6 +23,8 @@

Job: sequence-import

assertLength: # Integer, if supplied then add approx len assertion (value between 0 and 100). +This job will automatically detect any HTTP Form parameters that are used in future requests and add Zest assignments to handle them. +

Job: sequence-activeScan

The sequence-activeScan job allows you to active scan sequences.
diff --git a/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/sequence.html b/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/sequence.html
index c1e1ba824e5..fbf002c755e 100644
--- a/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/sequence.html
+++ b/addOns/sequence/src/main/javahelp/org/zaproxy/zap/extension/sequence/resources/help/contents/sequence.html
@@ -12,24 +12,41 @@ 

Sequence Scanner

This add-on facilitates the recording and scanning sequences of requests. In some web applications it is necessary for particular events or pages to be accessed or completed in a certain order. By recording a sequence and then scanning it, it is possible to ensure such flows happen in an expected manner. +

+This add-on supports the Automation Framework.

Creating Sequences

One sequence script should be created for each multi-step operation in the application/site being tested.

-There are two options for creating sequences: +There are three options for creating sequences:

    +
  1. Use the Automation Framework sequence-import job.
  2. In either the Sites tree or History tab select the requests you wish to have included, right click, and use "Add To Zest Script" (either choosing to create a new script or adding to an existing Sequence script).
  3. From the main tool bar, use the "Record a New Zest Script..." button, selecting "Sequence" as the type.

Scanning

-When a new Active Scan is created there is a "Sequence" tab in which you can choose the sequence(s) to be scanned. -Note: The Sequence tab is only visible when "Show advanced options" is selected. + +You can active scan sequences via: + + For Example:
+

+ +

Reporting

+The following reports can include sequence scanning results: +

See also

ZAP Multi-step Blog