Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Escaped chars in regex from context import #79

Open
M0ustach3 opened this issue May 9, 2019 · 0 comments
Open

Escaped chars in regex from context import #79

M0ustach3 opened this issue May 9, 2019 · 0 comments

Comments

@M0ustach3
Copy link

M0ustach3 commented May 9, 2019

Hello everyone,
I'm actually testing for some vulns with the official OWASP ZAP container (Docker image) and i'm experiencing an issue :
When importing a context (created and exported with ZAP GUI) into zap-cli, every line concerning the regex of excluded and included site won't be recognized by the spider and scanners. Actually, the program escapes all of the backslashes inside the regexp so, for example, it transforms :
\Qhttp://172.17.0.3:3000/\E.*
By this
\\Qhttp://172.17.0.3:3000/\\E.*

As you can imagine, this is a big problem : the regex isn't recognized by the spider. I tried putting a custom regex direclty in the zap-cli command (eg. :
zap-cli -p 2375 exclude "\Qhttp://172.17.0.3:3000/dontgohereplz\E.*" )
and It worked perfectly.

I have no idea why this happens...

If anyone has a solution to this, this would be very appreciated ! 😄

EDIT : I found that It could be the same issue than #72 ... Please fix :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant