Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add challenge 37 for ZAP configuration with authenticated endpoint #941

Merged
merged 56 commits into from
Oct 2, 2023
Merged

Add challenge 37 for ZAP configuration with authenticated endpoint #941

merged 56 commits into from
Oct 2, 2023

Conversation

commjoen
Copy link
Collaborator

@commjoen commjoen commented Aug 20, 2023 •
edited
Loading

What kind of changes does this PR include?

  • Fixes or refactors
  • A new challenge
  • Additional documentation
  • Something else

Description

Relations

Closes #813

References

Checklist:

  • All the contributions made are solely the work of me and my co-authors
  • I tested the changes in this PR (if applicable)
  • I added unit tests to ensure my change works (when change in Java or on front-end code)
  • I added UI tests to ensure my UI changes work (when change in the overall UI, not needed if just adding a challenge)
  • The PR passes pre-commit hooks and automated tests

TODO:

  • implement basic auth
  • Implement credential obfuscation/encryption so it is harder to find\
  • configure basic auth for ZAP and embed in CI/CD
  • finish 3 doc files (hints/why/challenge content
  • Make sure we have stable values for these random answer challenges for ctf setups
  • add unit tests (controller+auth, challenge tests)

@commjoen commjoen changed the title Challenge 37 for ZAP configuration with authenticated endpoint Add challenge 37 for ZAP configuration with authenticated endpoint Aug 29, 2023
@commjoen commjoen force-pushed the feature-zap-scan-leak branch from a0ccbf0 to e434ffb Compare September 4, 2023 13:43
@commjoen commjoen marked this pull request as ready for review September 13, 2023 03:44
@commjoen commjoen marked this pull request as draft September 13, 2023 03:51
@commjoen commjoen marked this pull request as ready for review September 30, 2023 06:35
@commjoen
Copy link
Collaborator Author

ZAP configuration now works, challenges work. Cypress only fails because it is missing challenge36. Depends on #947

@commjoen commjoen merged commit 97aa645 into master Oct 2, 2023
@commjoen commjoen deleted the feature-zap-scan-leak branch October 2, 2023 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bendehaan bendehaan bendehaan approved these changes

Assignees
No one assigned
Labels
hacktoberfest-accepted
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

have a Zap auth config for a given challenge hardcoded
2 participants
@commjoen @bendehaan