Shulou(Shulou.com)06/01 Report--

Plug-n-Hack and ZAP: you can manually change the proxy settings after initializing the PnH configuration

Plug-n-Hack proposes a new standard that integrates resources of browsers and security tools. OWASP ZAP has a built-in plug-n-hack (pnh) protocol that can change the configuration of Firefox agents, which allows OWASP ZAP to monitor Firefox's traffic.

First, you need to change your browser proxy to the proxy address of ZAP, as shown in the gif image below.

With this step, Firefox will use http://localhost:7070/proxy.pac 's proxy configuration.

If you set Firefox's proxy configuration to No Proxy or Auto-detect proxy settings for this network or Usesystem proxy settings, Firefox's traffic will not pass through the ZAP proxy but will be normal.

If you want Firefox traffic to still pass through the ZAP proxy, you need to reset the Firefox proxy address to the ZAP proxy address (http://localhost:7070/pnh)). Once set, Firefox will prompt "Aprovider with this name has already been configured"

Answer the question:

What is the purpose of using the tool?

As a user, my expectation for this tool is that I will only be able to direct browser traffic to ZAP when I paste the address of http://localhost:7070/pnh into Firefox according to the instructions, but I have not been successful in doing so.

How to fix it?

You need to overwrite your previous proxy settings or you can use PnH to clear the previous proxy configuration and direct Firefox's proxy to http://localhost:7070/pnh

Press shift+F2 in Firefox and two options appear.

Translated from: https://renouncedthoughts.wordpress.com/2014/11/19/plug-n-hack-and-zap-manually-changed-proxy-settings-after-initial-pnh-configuration/

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.