lfatty

Increase Recursion Limit

2

I noticed the error below > RecursionError: maximum recursion depth exceeded while calling a Python object Is there a way to increase the recursion depth?

Add Getting Started guide to README, with a walkthrough of running it on a Django repo

21

I discovered many SyntaxError during setup.py installation. ``` build/bdist.macosx-10.12-x86_64/egg/pyt/__main__.py", line 323 if args.print: ^ SyntaxError: invalid syntax ``` ``` File "build/bdist.macosx-10.12-x86_64/egg/pyt/analysis_base.py", line 9 class AnalysisBase(metaclass=ABCMeta): ^ SyntaxError: invalid syntax ```...

HTTP Headers Scenario

1

@continuumsecurity Http_header kept failing even though my application has all security headers configured. `java.lang.RuntimeException: No HTTP requests-responses recorded at net.continuumsecurity.steps.WebApplicationSteps.recordFirstHarEntry(WebApplicationSteps.java:513) at net.continuumsecurity.steps.WebApplicationSteps.accessSecureBaseUrlAndRecordHTTPResponse(WebApplicationSteps.java:543) at ✽.When the following URLs are visited and...

Spider Exception when sitemap.xml not found

6

Please apply the update in order to fix this issue. See link: https://github.com/zaproxy/zaproxy/issues/2745

Connection refused

5

Any idea why am I seeing this error. net.continuumsecurity.proxy.ProxyException: org.zaproxy.clientapi.core.ClientApiException: java.net.ConnectException: Connection refused at net.continuumsecurity.proxy.ZAProxyScanner.validateMinimumRequiredZapVersion(ZAProxyScanner.java:112) at net.continuumsecurity.proxy.ZAProxyScanner.(ZAProxyScanner.java:54) at net.continuumsecurity.steps.AppScanningSteps.getScanner(AppScanningSteps.java:81) at net.continuumsecurity.steps.AppScanningSteps.disableAllScanners(AppScanningSteps.java:76) at ✽.And a scanner with all policies disabled(app_scan.feature:7) Caused...

OWASP Application Security Validation Mapped to BDD-Security Security Requirements

3

I was thinking about way we could map OWASP Application Security Verification Standards to BDD-Security security requirements in each story. https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project

Dockerize bdd-security

2

I am thinking about way we could dockerize bed-security framework.

Zaproxy Error: Data File size limit is reached

1

This is the error that keep showing during scan: [ZAP-ActiveScanner-1] FATAL hsqldb.db.HSQLDB379AF3DEBD.ENGINE - data file reached maximum size /var/lib/jenkins/.ZAP/session/untitled1.data [java] 106425634 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascan.ActiveScan - java.sql.SQLException: Data File size limit...

Read Time Out

5

Lately I noticed the following error when bdd-security is running especially against a huge app/site 10802624 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Read timed out [java]...

Install Yum on Centos 7

1

Thanks for this great utility and I am wondering way to install YUM for package updater/installer on Centos7 base image?