Never ending spider

[garthoid]

I have been able to use zap-cli in the official owasp zap docker container. With a preconfigured context for login against a sample target site (juiceshop for example) the spider does not stop.

Is it possible to provide a max depth (the ZAP UI supports this) or perhaps provide a max time?

Thanks

[garthoid]

Next I tried using quick-scan with the spider option:

docker exec zap_engine zap-cli --zap-url <zapurl> --port <zapport> -v quick-scan --spider -r -c <contextfile> http://targeturl

However the spider gets stuck at 3% [DEBUG] Spider progress %: 3 [DEBUG] Spider progress %: 3

which continues....

The target in this case is juiceshop as a test target environment

[thc202]

For the record, the infinite loop issue is tracked in zaproxy/zaproxy#4084.

[Grunny]

:+1: We can add a max depth option and a timeout, both would be useful for the spider command I think. :)

[ali-habibzadeh]

👍 We can add a max depth option and a timeout, both would be useful for the spider command I think. :)

Yes would be nice to run it against a single URL