• caglararli@hotmail.com
  • 05386281520

Running zap scan on a web application is not detecting all endpoints

Çağlar Arlı      -    7 Views

Running zap scan on a web application is not detecting all endpoints

I want to run ZAP automated scan to a web application. I have the url which is example.com/myapp. When I browse the application in burpsuite, I can see some rest endpoints being called like example.com/authz/rights-administration/.

When running the ZAP scan, the zap scanner does not detect the rest endpoint I mentioned. Is there a way to make sure these endpoints are detected by ZAP automatically ?