diff --git a/site/content/docs/desktop/addons/retire.js/_index.md b/site/content/docs/desktop/addons/retire.js/_index.md index f6a290993..e2bb8de83 100644 --- a/site/content/docs/desktop/addons/retire.js/_index.md +++ b/site/content/docs/desktop/addons/retire.js/_index.md @@ -6,7 +6,7 @@ weight: 1 cascade: addon: id: retire - version: 0.38.0 + version: 0.39.0 --- # Retire.js {#id-10003} diff --git a/site/content/docs/desktop/addons/technology-detection/_index.md b/site/content/docs/desktop/addons/technology-detection/_index.md index 5d37da1f1..ac95e8798 100644 --- a/site/content/docs/desktop/addons/technology-detection/_index.md +++ b/site/content/docs/desktop/addons/technology-detection/_index.md @@ -6,7 +6,7 @@ weight: 1 cascade: addon: id: wappalyzer - version: 21.39.0 + version: 21.40.0 --- # Technology Detection @@ -27,20 +27,20 @@ Right clicking on a technology will display a 'Show evidence' menu under which a Selecting a regex will switch to the 'Search' tab and search through the history for that regex. Note: If multiple rows are selected the menu will not be displayed. Beside the site selection drop down is an Export button which can be used to export a CSV (comma separated values) file based on the -table information currently being displayed. There is also a toggle button which allows users to easily Enable/Disable the Technology Detection -passive scanner. +table information currently being displayed. -The toolbar includes an enable/disable toggle button which controls whether the technology detection passive scan rule is functioning or not. -This enabled state is persisted between ZAP sessions. +The toolbar also includes: -## Reporting +* An enable/disable toggle button which controls whether the technology detection passive scan rule is functioning or not. This enabled state is persisted between ZAP sessions. -Technology data is available to reports via the [WappalyzerJobResultData](https://github.com/zaproxy/zap-extensions/tree/main/addOns/wappalyzer/src/main/java/org/zaproxy/zap/extension/wappalyzer/automation/WappalyzerJobResultData.java) class. + ## Reporting -## External Links + Technology data is available to reports via the [TechJobResultData](https://github.com/zaproxy/zap-extensions/tree/main/addOns/wappalyzer/src/main/java/org/zaproxy/zap/extension/wappalyzer/automation/TechJobResultData.java) class. -| | | | -|---|-------------------------------------------------------------------|-------------------------------------------------------------------------------------------| -| | [Enthec Webappanalyzer](https://github.com/enthec/webappanalyzer) | This project is a continuation of the iconic Wappalyzer that went private in August 2023. | -| | | The Wappalyzer Homepage | -| | https://github.com/wappalyzer/wappalyzer | As of early August 2023 the Wappalyzer Repository is no longer public. | + ## External Links + + | | | | + |---|-------------------------------------------------------------------|-------------------------------------------------------------------------------------------| + | | [Enthec Webappanalyzer](https://github.com/enthec/webappanalyzer) | This project is a continuation of the iconic Wappalyzer that went private in August 2023. | + | | | The Wappalyzer Homepage | + | | https://github.com/wappalyzer/wappalyzer | As of early August 2023 the Wappalyzer Repository is no longer public. | diff --git a/site/content/docs/desktop/addons/technology-detection/options.md b/site/content/docs/desktop/addons/technology-detection/options.md new file mode 100644 index 000000000..a7bb2615c --- /dev/null +++ b/site/content/docs/desktop/addons/technology-detection/options.md @@ -0,0 +1,25 @@ +--- +# This page was generated from the add-on. +title: Options Tech Detection screen +type: userguide +weight: 2 +--- + +# Options Tech Detection screen + +This screen allows you to configure the [Tech Detection](/docs/desktop/addons/technology-detection/) options: + +### Mode + +The Mode which controls the behavior of the technology detection passive scan rule. This Mode is persisted between ZAP sessions. + +* Quick \> Return on first match; which may mean missing version information, but should be slightly more performant. (This is the default.) +* Exhaustive \> Keep matching and don't return early; likely slightly less performant. + +### Alerts {#10004} + +Allows the user to select whether or not the technology detection passive scan rule should raise alerts as technologies are identified (Enabled by default). Alerts are Informational and include the Tech Name, a Description of the tech if available, Other Info may include CPE or version details, and References may contain Tech specific URLs. + +Latest code: [TechPassiveScanner.java](https://github.com/zaproxy/zap-extensions/blob/main/addOns/wappalyzer/src/main/java/org/zaproxy/zap/extension/wappalyzer/TechPassiveScanner.java) + +Alert ID: [10004](/docs/alerts/10004/) diff --git a/site/content/docs/sbom/retire.md b/site/content/docs/sbom/retire.md index e35c782b7..cb7f0ab46 100644 --- a/site/content/docs/sbom/retire.md +++ b/site/content/docs/sbom/retire.md @@ -6,10 +6,10 @@ weight: 1 cascade: addon: id: retire - version: 0.38.0 + version: 0.39.0 sbom: format: CycloneDX - downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.38.0/bom.json + downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.39.0/bom.json components: - name: aopalliance version: '1.0' diff --git a/site/content/docs/sbom/wappalyzer.md b/site/content/docs/sbom/wappalyzer.md index 934e6ae28..836b651ac 100644 --- a/site/content/docs/sbom/wappalyzer.md +++ b/site/content/docs/sbom/wappalyzer.md @@ -6,10 +6,10 @@ weight: 1 cascade: addon: id: wappalyzer - version: 21.39.0 + version: 21.40.0 sbom: format: CycloneDX - downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/wappalyzer-v21.39.0/bom.json + downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/wappalyzer-v21.40.0/bom.json components: - name: aopalliance version: '1.0' diff --git a/site/data/addons.yaml b/site/data/addons.yaml index ed3f95691..6b9b3dbf1 100644 --- a/site/data/addons.yaml +++ b/site/data/addons.yaml @@ -868,14 +868,14 @@ version: 0.9.0 - id: retire name: Retire.js - description: Retire.js + description: Use Retire.js to identify vulnerable or out-dated JavaScript packages. author: Nikita Mundhada and the ZAP Dev Team status: release infoUrl: /docs/desktop/addons/retire.js/ repoUrl: https://github.com/zaproxy/zap-extensions/ - downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.38.0/retire-release-0.38.0.zap - date: 2024-08-05 - version: 0.38.0 + downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/retire-v0.39.0/retire-release-0.39.0.zap + date: 2024-08-28 + version: 0.39.0 - id: reveal name: Reveal description: Show hidden fields and enable disabled fields @@ -1045,9 +1045,9 @@ status: release infoUrl: /docs/desktop/addons/technology-detection/ repoUrl: https://github.com/zaproxy/zap-extensions/ - downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/wappalyzer-v21.39.0/wappalyzer-release-21.39.0.zap - date: 2024-07-04 - version: 21.39.0 + downloadUrl: https://github.com/zaproxy/zap-extensions/releases/download/wappalyzer-v21.40.0/wappalyzer-release-21.40.0.zap + date: 2024-08-28 + version: 21.40.0 - id: webdriverlinux name: Linux WebDrivers description: Linux WebDrivers for Firefox and Chrome.