Daily automated commit

Author: pzaino

README.md

@@ -0,0 +1,58 @@
+# ZAProxy Automated Security Tests Collection
+This repository contains a collection of scripts to automate ZAP Security Tests.
+
+## Getting Started
+
+To get started simply clone this repository, then browse each sub-directory for details on how to use each automation tool.
+
+Tools on the project root are usable directly.
+
+You can use this repo in conjunction with the Vagrant Kali-Linux base-box you'll find here: 
+
+[https://app.vagrantup.com/zfpsystems/boxes/kali-base-x86_64] 
+
+to have a full automated build environment and deploy of your testing VM.
+
+### Prerequisites
+
+You need git to clone this repository, obviously. You can get git from
+[http://git-scm.com/](http://git-scm.com/).
+
+Scripts are mostly Python scripts so you'll need a Python interpreter installed and fully working.
+
+You'll need ZAProxy installed, you can find the latest release here: 
+[https://github.com/zaproxy/zaproxy]
+
+You'll need Java VM installed.
+
+### Install
+To install the automation tools just clone this repo inside your Kali Linux (or the system you want to use to run ZAProxy):
+```
+git clone https://github.com/zfpsystems/zap-automation
+```
+
+I usually test these tools from /opt/zfpsystems/zap-automaion , but you can use whatever path you prefer.
+
+Tools come with different licenses so please check sub-directory for licenses.
+
+### Reccommendations (yeah read them!)
+- DO NOT USE ZAProxy or this ZAProxy automation tools collection to hack web sites and web applications you don't own or you don't have a written permission to pen-test.
+
+- I do not assume any responsabilities for your actions, nor for the content of this repository.
+
+- This automation tools collection sole purpose is to help people (especially the ones who can't afford expensive security solutions) to test security of their web applications and web sites to improve the quality and security of this world and not to make it worst!
+
+### How to help this project
+If you have ZAProxy automation scripts you want to include in this collection please feel free, here is how to:
+
+- Create a public github.com repository of your tool, for example JohnWayne-zap-automation
+- Add your tool, required dependencies and everything is needed to make it work fine in the repository you have created
+- Add a README.md file with instructions on how to install and use your automation tool and your name
+- Let me know the URL to your repo and I will add it to the autobuild that generates this collection daily. If your automation tool pass the basic working tests then it will be published on this public repository
+- Please note: This is a public and open source repository, so do not add copyrighted stuff that won't allow me to publish your automation tools.
+
+Thanks!
+
+
+
+

jm-zap-automation/README.md

@@ -0,0 +1,41 @@
+# ZAP Automated Penetration Testing
+
+Node.js script for automated testing using the OWASP ZAP tool, which is an integrated penetration testing tool for finding vulnerabilities in web applications.
+
+
+## Getting Started
+
+To get you started you can simply clone this repository, install the dependencies, and set your browser up to proxy through ZAP.
+
+### Prerequisites
+
+You need git to clone this repository. You can get git from
+[http://git-scm.com/](http://git-scm.com/).
+
+We also use a number of node.js tools to run the script. You must have node.js and
+its package manager (npm) installed.  You can get them from [http://nodejs.org/](http://nodejs.org/).
+
+You will also need a minimum of Java 7 to run. You can get it from [https://www.java.com/en/](https://www.java.com/en/).
+
+### Clone Project
+
+Clone the project to source tree
+
+### Install Dependencies
+
+Install dependencies via NPM by running the below command while within the source folder.  
+```
+npm install
+```
+
+### Proxy Browser
+
+Navigate to `.../resources/`and import the `owasp_zap_root_ca.cer` certificate into your browser. This will allow HTTPS requests to be routed though ZAP.
+Next, adjust the browser's proxy settings to point to `localhost:8080`. If you are using Chrome browser, use an extension like SwitchySharp.
+
+### Run the Application
+
+```
+npm test
+```
+Results output to "```zap-test-report.html```"

jm-zap-automation/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "zap-penetration-test-suite",
+  "private": true,
+  "version": "1.0.0",
+  "description": "Node.js script for automated testing using the OWASP ZAP tool, which is an integrated penetration testing tool for finding vulnerabilities in web applications.",
+  "main": "penetration.test.js",
+  "dependencies": {
+    "async": "^2.1.4",
+    "cli-progress": "^1.3.0",
+    "co": "^4.6.0",
+    "co-prompt": "^1.0.0",
+    "yield": "^0.0.6-8",
+    "zaproxy": "^0.2.0"
+  },
+  "devDependencies": {},
+  "scripts": {
+    "test": "node penetration.test.js"
+  },
+  "repository": {},
+  "author": "James Marcogliese",
+  "license": "Not yet defined."
+}