ZAP supports scripts that can be embedded within ZAP and can access internal ZAP data structures and classes. These scripts allow you to dynamically enhance ZAP from within ZAP.
ZAP supports any scripting language that supports JSR 223 (http://www.jcp.org/en/jsr/detail?id=223) , including:
WARNING - scripts run with the same permissions as ZAP, so do not run any scripts that you do not trust!
Different types of scripts are supported:
Note: Add-ons can add additional types of scripts, which should be described in the help of the corresponding add-on.
For more details on how to run ZAP scripts see the Script Console add-on help pages.
|UI Overview||for an overview of the user interface|
|Features||provided by ZAP|
|ZAP Community Scripts repo|
|ZAP In Ten: ZAP Scripting - An Introduction (9:33)|
|ZAP In Ten: ZAP Scripting - Targeted Scripts (10:01)|
|ZAP In Ten: ZAP Scripting - Proxy and HttpSender Scripts (10:14)|
|ZAP In Ten: ZAP Scripting - Passive Scan Scripts (11:55)|
|ZAP In Ten: ZAP Scripting - Active Scan Scripts (11:38)|