crashappsec / zap-with-chalk-example

An example of running zap augmented by chalk metadata

About

This repository contains an example of running Zap augmented by chalk metadata

Prerequisites

Ensure that you have a valid PAT token and that you have successfully authenticated with github:

❯ docker login ghcr.io
Authenticating with existing credentials...
Login did not succeed, error: Error response from daemon: Get "https://ghcr.io/v2/": denied: denied
Username (<your username>):
Password:
Login Succeeded

Performing a Scan

1. Run docker compose up -d dvwa to bring up the damn vulnerable web app
2. Run docker compose run --rm zap zap.sh -cmd -autorun /zap/wrk/FullScanTech.yaml to trigger a ZAP scan.

Cleanup

Run docker compose down to clean up resources.