Found Java version 1.7.0_91 Available memory: 3952 MB Setting jvm heap size: -Xmx512m 195 [main] INFO org.zaproxy.zap.DaemonBootstrap - OWASP ZAP 2.4.3 started. 489 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open start 496 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open end 798 [main] INFO org.parosproxy.paros.common.AbstractParam - Setting config api.disablekey = true was null 800 [main] INFO org.parosproxy.paros.network.SSLConnector - Reading supported SSL/TLS protocols... 801 [main] INFO org.parosproxy.paros.network.SSLConnector - Using a SSLEngine... 1022 [main] INFO org.parosproxy.paros.network.SSLConnector - Done reading supported SSL/TLS protocols: [SSLv2Hello, SSLv3, TLSv1, TLSv1.1, TLSv1.2] 1027 [main] INFO org.parosproxy.paros.extension.option.OptionsParamCertificate - Unsafe SSL renegotiation disabled. 1036 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory - Loading extensions 1756 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory - Extensions loaded 2066 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Change user agent to other browsers. 2066 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Detect insecure or potentially malicious content in HTTP responses. 2066 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Detect and alert 'Set-cookie' attempt in HTTP response for modification. 2066 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Avoid browser cache (strip off IfModifiedSince) 2066 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log cookies sent by browser. 2066 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log unique GET queries into file:filter/get.xls 2066 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log unique POST queries into file: filter/post.xls 2067 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log request and response into file: filter/message.txt 2067 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP request body using defined pattern. 2067 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP request header using defined pattern. 2067 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP response body using defined pattern. 2067 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP response header using defined pattern. 2067 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Send ZAP session request ID 2226 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows ZAP to check for updates 2230 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionViewOption 2230 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionEdit 2230 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionFilter 2230 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides a rest based API for controlling and accessing ZAP 2321 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionState 2321 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHistory 2323 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Show hidden fields and enable disabled fields 2323 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Search messages for strings and regular expressions 2324 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Encode/Decode/Hash... 2324 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to intercept and modify requests and responses 2324 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Passive scanner 2364 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Script passive scan rules 2365 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Application Error Disclosure 2365 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Incomplete or No Cache-control and Pragma HTTP Header Set 2365 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Content-Type Header Missing 2365 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Cookie No HttpOnly Flag 2366 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Cookie Without Secure Flag 2366 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Cross-Domain JavaScript Source File Inclusion 2366 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Web Browser XSS Protection Not Enabled 2366 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Secure Pages Include Mixed Content 2366 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Password Autocomplete in Browser 2366 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Private IP Disclosure 2367 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Session ID in URL Rewrite 2367 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: X-Content-Type-Options Header Missing 2367 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: X-Frame-Options Header Not Set 2379 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to view and manage alerts 2380 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Active scanner, heavily based on the original Paros active scanner, but with additional tests added 2384 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Spider used for automatically finding URIs on a site 2388 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing A set of common popup menus for miscellaneous tasks 2388 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Forced browsing of files and directories using code from the OWASP DirBuster tool 2389 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionManualRequest 2389 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Compares 2 sessions and generates an HTML file showing the differences 2389 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Invoke external applications passing context related information such as URLs and parameters 2390 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Handles anti cross site request forgery (CSRF) tokens 2391 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionAuthentication 3099 [ZAP-daemon] INFO org.zaproxy.zap.extension.authentication.ExtensionAuthentication - Loaded authentication method types: [Form-based Authentication, HTTP/NTLM Authentication, Manual Authentication, Script-based Authentication] 3100 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Creates a dynamic SSL certificate to allow SSL communications to be intercepted without warnings being generated by the browser 3100 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Logs errors to the Output tab in development mode only 3100 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionUserManagement 3101 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Summarise and analyse FORM and URL parameters as well as cookies 3101 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Script integration 3108 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Scripting console, supports all JSR 223 scripting languages 3108 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionForcedUser 3108 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Extension handling HTTP sessions 3109 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Zest is a specialized scripting language from Mozilla specifically designed to be used in security tools 3177 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionDiff 3177 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionRequestPostTableView 3178 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Simple browser configuration 3178 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionSessionManagement 3254 [ZAP-daemon] INFO org.zaproxy.zap.extension.sessions.ExtensionSessionManagement - Loaded session management method types: [Cookie-based Session Management, Http Authentication Session Management] 3255 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelRequestFormTableView 3255 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Capture messages from WebSockets with the ability to set breakpoints. 3258 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Summarise and analyse FORM and URL parameters as well as cookies 3258 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionAuthorization 3258 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing AJAX Spider, uses Crawljax 3259 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Handles adding Global Excluded URLs 3259 [ZAP-daemon] WARN org.zaproxy.zap.extension.globalexcludeurl.ExtensionGlobalExcludeURL - GlobalExcludeURL.optionsLoaded() 3259 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Adds menu item to refresh the Sites tree 3259 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Adds support for configurable keyboard shortcuts for all of the ZAP menus. 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing OWASP ZAP User Guide 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionReport 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to configure which extensions are loaded when ZAP starts 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelComponentonentAll 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelHexView 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelImageView 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelLargeRequestView 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelLargeResponseView 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelRequestQueryCookieTableView 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelSyntaxHighlightTextView 3260 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Quick Start panel 3261 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Translations of the core language files 3261 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Tips and Tricks 3261 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Passive Scan Rules 3261 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows to fuzz WebSocket messages. 3261 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides WebDrivers to control several browsers using Selenium and includes HtmlUnit browser. 3262 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Active Scan Rules 3262 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing The ZAP Getting Started Guide 3262 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing The Online menu links 3262 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionSaveRawHttpMessage 3262 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides the foundation for concrete message types (for example, HTTP, WebSockets) expose fuzzer implementations. 3263 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows to fuzz HTTP messages. 3271 [Thread-4] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL - Creating new root CA certificate 3388 [ZAP-daemon] INFO org.zaproxy.zap.DaemonBootstrap - ZAP is now listening on 0.0.0.0:8090 3905 [Thread-4] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL - New root CA certificate created 20459 [ZAP-ProxyThread-1] INFO org.zaproxy.zap.extension.httpsessions.ExtensionHttpSessions - Added new session token for site '172.17.0.2:8080': JSESSIONID 20460 [ZAP-ProxyThread-1] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 0, active=false, tokenValues=''] 20589 [ZAP-ProxyThread-2] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 1, active=false, tokenValues=''] 20683 [ZAP-ProxyThread-3] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 2, active=false, tokenValues=''] 20999 [ZAP-ProxyThread-6] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 3, active=false, tokenValues=''] 23013 [ZAP-ProxyThread-7] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 4, active=false, tokenValues=''] 25086 [ZAP-ProxyThread-9] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 5, active=false, tokenValues=''] 27128 [Thread-15] INFO org.zaproxy.zap.extension.spider.SpiderThread - Starting spidering scan on SpiderApi-0 at Sat Jan 23 11:03:14 UTC 2016 27131 [Thread-15] INFO org.zaproxy.zap.spider.Spider - Spider initializing... 27147 [Thread-15] INFO org.zaproxy.zap.spider.Spider - Starting spider... 27149 [Thread-15] INFO org.zaproxy.zap.spider.Spider - Adding seed for spider: http://172.17.0.2:8080/wavsep/index-active.jsp 27155 [Thread-15] INFO org.zaproxy.zap.spider.Spider - Adding seed for spider: http://172.17.0.2:8080/robots.txt 27156 [Thread-15] INFO org.zaproxy.zap.spider.Spider - Adding seed for spider: http://172.17.0.2:8080/sitemap.xml 69424 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 69424 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 69437 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 69617 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 69620 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 83230 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 83230 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 83237 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 84114 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 84117 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 85261 [pool-1-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL in the spidering process (on base http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/Case03-Redirect-RedirectMethod-FilenameContext-Unrestricted-HttpURL-DefaultInvalidInput-AnyPathReq-Read.jsp?target=httk://google.com): unknown protocol: httk 85383 [pool-1-thread-2] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL in the spidering process (on base http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/Case07-Redirect-RedirectMethod-FilenameContext-Unrestricted-HttpURL-DefaultEmptyInput-PartialPathReq-Read.jsp?target): Expected authority at index 7: http:// 90745 [pool-1-thread-2] INFO org.zaproxy.zap.spider.Spider - Spidering process is complete. Shutting down... 90748 [Thread-16] INFO org.zaproxy.zap.extension.spider.SpiderThread - Spider scanning complete: true 91660 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 91661 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 91669 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 93173 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 93176 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 95019 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 95019 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 95027 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 95382 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 95385 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 97643 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Path Traversal 97644 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote File Inclusion 97644 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Include 97645 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Reflected) 97645 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) 97646 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection 97646 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Code Injection 97646 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote OS Command Injection 97647 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Directory Browsing 97647 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin External Redirect 97647 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Buffer Overflow 97648 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Format String Error 97648 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin CRLF Injection 97648 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Parameter Tampering 97649 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Prime 97649 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Spider 97649 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Script Active Scan Rules 97652 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.Scanner - scanner started 97654 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Path Traversal 97654 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote File Inclusion 97655 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Include 97656 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Reflected) 97656 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) 97657 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection 97657 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Code Injection 97658 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote OS Command Injection 97658 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Directory Browsing 97659 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin External Redirect 97659 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Buffer Overflow 97660 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Format String Error 97660 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin CRLF Injection 97661 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Parameter Tampering 97661 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Prime 97662 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Spider 97663 [Thread-17] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Script Active Scan Rules 97668 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPathTraversal strength INSANE threshold MEDIUM 101779 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:329) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 106450 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:329) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 110109 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:329) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 118747 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:329) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 120320 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:301) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 134718 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 134718 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 134724 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 135056 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 135059 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 135734 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:301) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 136069 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:301) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 136538 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:301) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 142215 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 181694 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:301) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 191781 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:301) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 193396 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 195442 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 195442 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 195448 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 195791 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 195793 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 199991 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:379) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 200970 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:379) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 201464 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243086 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243284 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243285 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243486 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243492 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243687 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243688 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243891 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 243893 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244090 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244090 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244291 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244292 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244491 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244491 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244694 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244695 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244695 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244696 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244895 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244896 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 244896 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245101 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245101 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245101 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245102 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245298 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245298 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245298 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245498 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245499 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245699 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245700 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245700 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245901 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245902 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245902 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 245904 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 246101 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 246101 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 246913 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/c:\Windows\system.ini org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/c:\Windows\system.ini at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 18 more 249606 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 249606 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 249613 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 249900 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 249902 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 252564 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPathTraversal in 154.896s 252565 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestRemoteFileInclude strength INSANE threshold MEDIUM 294294 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 294295 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 294300 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 295430 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 295432 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 376768 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 376768 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 376773 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 377612 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 377614 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 404554 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 404554 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 404752 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 404979 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 404982 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 405175 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 405354 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 405354 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 405554 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 406368 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 406368 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 406368 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 406369 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 406563 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 406564 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 407204 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 407208 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 407409 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 407410 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 407411 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 407411 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 407587 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 407788 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 407989 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 420836 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestRemoteFileInclude in 168.272s 420836 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestServerSideInclude strength INSANE threshold MEDIUM 575406 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestServerSideInclude in 154.57s 575406 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestCrossSiteScriptV2 strength INSANE threshold MEDIUM 633997 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 633997 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 634003 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 635333 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 635336 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 719293 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 719694 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 719894 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 719894 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 720097 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 721103 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 721505 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 721705 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 721706 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 721907 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 730148 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestCrossSiteScriptV2 in 154.742s 730148 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestSQLInjection strength INSANE threshold MEDIUM 762054 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 762054 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 762060 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 762608 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 762612 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 801415 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 801415 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 801421 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 801732 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 801735 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 851092 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 851092 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 851099 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 851945 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 851948 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 920899 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 920900 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 920905 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 922727 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 922729 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 935421 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestSQLInjection in 205.272s 935421 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | CodeInjectionPlugin strength INSANE threshold MEDIUM 1099503 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | CodeInjectionPlugin in 164.082s 1099503 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | CommandInjectionPlugin strength INSANE threshold MEDIUM 1104579 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1104580 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1104586 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1105864 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1105867 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1156164 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1156165 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1156170 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1158244 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1158247 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1244326 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1244326 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1244331 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1245703 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1245706 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1274644 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | CommandInjectionPlugin in 175.141s 1274644 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestDirectoryBrowsing strength INSANE threshold MEDIUM 1457592 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestDirectoryBrowsing in 182.948s 1457592 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestExternalRedirect strength INSANE threshold MEDIUM 1457798 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [userinput] with payload [8482278571049466195.owasp.org] 1526145 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1526145 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1526151 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1527789 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1527791 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1561453 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1616246 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1616247 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1616445 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1616448 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1616649 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1616651 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1616845 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1616850 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1617049 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1617050 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1617251 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1618084 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1618255 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1618255 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1618456 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1618661 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1618663 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1618860 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1618866 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1619066 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1619067 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1619261 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1619266 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://8482278571049466195.owasp.org] 1619462 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1619462 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1619664 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1619665 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1619867 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1619870 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1620067 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://8482278571049466195.owasp.org] 1621076 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1621679 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1621679 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1621878 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1621878 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622079 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622080 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622280 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622280 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622481 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622481 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622682 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622682 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622883 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1622883 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1623084 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1623287 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1623287 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1623485 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1623486 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1623686 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1623688 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1624851 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1624852 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1624889 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1624891 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1625090 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1625090 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1625294 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1625294 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1625493 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [8482278571049466195.owasp.org] 1627098 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestExternalRedirect in 169.506s 1627098 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | BufferOverflow strength INSANE threshold MEDIUM 1768100 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1768499 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1768699 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1768700 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - IuNKaWPCVrbsLffBYmQmLeOgmPJwbnVSDvVqqSvFoHrhxMBkRuuwpusLPXslinIQSMkXngPlsSWUdsujdIxLtAFMUNdGRZtTEaArWJwMrxISecoevKrBpLctRoZLABdlpWTDxXaaffZTYVniolbUNcPSgZbYFKaIXlYhWSUyjVAnHVZyQrKZeRLBYuQKXrLLxDPpqdTCGmIRqWyjTpJJEEbAdOmXTDutXdDZaUNyPGAChWPcSojBuwGOXYTIaKPIBbbPhqplPTumYCxSevUlDkARnOvqvadKPnTqFhvCwGXHgabBZYwueWtKnhCRPCkXOVdpDKIcusnTFsDtGoATmVkSTDnJlkhShyBvnhJlfNqnMwEQdHrjPsoosdDRkIuHIgthqhbPwSMDoKZkJKOgOKyfaYgKrmRKwqWfnsYhJGvaNMQKOQiTdDFZiAMiWwqVxpHZbiRlioAsJpEDoBjPQilkEfivLVCHaxIrfCbxPDckNUOfVngkAvHghhdAVOfqTccVtsfoEnFlRIRYjblpDYDbhhXnCLHiIDBYoIfkpveJBwHvKOGGIPyqNpZqaGRUfbxwXfpxLIAOkvMhASXFmEPDAMHMLXAMRYMReRJONbhlpPNWXPcQUlZCmqDMsTrqQJiZLBcPeityKMlDFILgFZrBCVOhLYACMObSIpEPRuEwdTjwyFEqfPtsGrcjicUipkoxcnBHBvFcwHQtSoxukgriPwIBrGlAGJZtDOCgfAIRanYhnSAhbWhFUijBKvlYPedIWTQDJPfiYuTtLpKJUHRFAOlAsWTwQJGtcIVrWQFiKOJfKFNyAtABqSVwexrmEsfbvniVeewmcNwxyhclTECYIDvmUKxiCgXgNrBSFBcYmEHxcqXkfbwaYQtUiyTHRUtXqxVoyGgcIgykdfnleBpGdMbwIhRLaLghoXXxYlYFoNZBgTDBGoFIqbdglvBAHsHtCjZhoGChnXriMSKNuhwRiCcuDBwJDbxihqnZouloCvaKTrgQYQwbEEBSLdAEsDSbYbhSEvOdOpafAKDqCDpBLDLWKxtDXsCjBpcKArLpjKFHyfScuQIeVZWYFDWiGhqdEeBqTOpKunaIdxMWfqPVLJrpnPEDdvlVpgXDyXDAHPQNsUSsslejIpUGFCrQjPeVbhoxMvQIwWAyNaLXEcJeyiDcpawwVJiMSQmtaeTxRCEpbYjCvygLkLVngnnTVjJYCRJCjDMVUJgBUhCmVZIgXIKOOkZxWUTeNrcFgiPYpTtYCUJSQJMxpRgInwInrdShQeyACclvYMblbfRahlaGGJZUSsxHdICLdjjVYouOVAUshyPaaHmwVgvgnlAtwjWZZluEsoJgHoDqKIqQjoHxfTCEvFqLBJVBniqAaysLjNywRmCDCvwTFsNrKSKeiYmpMJYFgwuVmUSalcEfPYSXcCQyvaabpYPUqaGfyUyTcbofRmOCFhIAQfyQXuaTIQwayesJCVSsyrKfdygwEScWVjrwdgTmFBnRMyDacWbtiVbsfjrRfpPLsnKrwdVkilkjMyjgnsXNpoQsFNqXNJChqkYuJLJVjRGWxopCMpiwsMgxwdRtcLpdeHKbeynycBGepjIMCGYHKDllWVcjcLZlCIVKNZFqKWFWOrKfpvOsiCSVyidVpqdMJheoWZUhOVEjUpQUdfkrqecUlVXcSWXStpPgVCiwPCCdyfdRXQDtCGXskOkxJULXElufdgfoiORgvRQUljVYptwpkxLLejsDwrTisoxIndqkyklyLalAAFDLYAaoDgNhFibIxPoFaTikkHEATmUimVrsUomkmQUtQvwPRfvrehJXQvNnaEdRdTdZwJhSSlCPiYFpkAmUZGjdfefIhlIyRRrEepkfATkYmeOtxhWLBZmbPMZtVfLxkyHLcQudAHjDjmwAgyLtNSAKlnFnrYBZhWGUQccgTxhZbdEFRkEWgfUPEstkPfyFRBmXHJhIvltEvATirIOcCfBuFpxUyABukMHyFMdotPSKwgvbfSjOUEORZQlcqxqFgVgcrOMlwYFWBXHiHQQxVCbPNPjguaAsyFgAmHZkmWMjIsYlFSuGhOErFQCcytvSUnWZpOvr java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1768901 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - GBpWkWcasKogYpCKoUmRcqHEYaogyitAHILOnyZcfcKneaNbkDCISQUxdohTynVihvfhkrhOlAoAyRvRGueOiOPGhpaQuoIErhMYVyjJNFXJZdIJZxxNsqhEEaTwbckNMsfOFPSIQtxmgleZWNJRaPDPtmAqxZoNVDuOMFMyXrdKLXIiHknwtBbmFqYVSegsamrAdJdBgpUywQNBnFOiBiIdeCLqnpHxaGxDmQaEXuRKMvhtCBIgJLeXNghPdeRQYKqkAiaOaMpWCaiAihXiJYDGudTnomxFwYUvfDWfJvqYsGrZgRbdqbBbqvGxbGlMIpLYwxsaIlpNcCgEVkbVqrHqoPMVPfqdIZOcYwZkbPUNglktnjfdxkLRLWILybuZyLuobWbdfhnyrkaohMKIaHUDGHlCfaDadTvBveoFidGkdFgdsLvcJeYrPBACYDdoYWjoQadJQrPmsresWaonHbhctWiYdGRhuhysvASVayAfdJmWBMHxDmkRbDcbwFTPSeGvOFIhgKCmMsKdGwTNIoqXpUUvgLpIBQlyUIUtyNdrQQmNpBxJkJaPvDHvsLDAqsMLqFTiZyFMcimYRlPpWqbKkwdAMaoffalrxPRttfUsFOrSlalJYmibLSOZRVAIXqcgrqfTFLBDJhAZcHvNkQQJJGYkXOyMjNAlPSyZRubjWEFEkXrxXpuSDtvorLyKOOtYXCSFFZTgfvWNoCjQqPyyrlqpZOYtTGCdsuUftWoEysOVIoYDxwgCgKedCbubRwXiwilHJxgwUCuwIArDyohFAdwoQPSkWgwMKuQjvBOYapvMigviTdWOsxAIYkmQEnpIOXHArmBdLmbIHyiajyZqvvafdVVgAhjehXxjoWCBkMkudxfgRAsLwElHBpYStCmyFBUGyWmcAEbjITAHUtPdfBtGZDJmZvdNJMDKqIUdcdetcYULaYxqpPklJQrpMOWOCmYLyRTZOmaTXrmsBZjUBFCeveePRRYcqMNyGbvJQCSXYPUAonkSbGNkHJHvVyRcbNuqNgSAWRNDKVbJCAlDVvQlVARmbXhOvHAwMsdJtTcsgglOMHmutxyUeURgdtnAySMBvtHXtoYVsGDcHmApnmlibvhCQlKjbmqQFpfNQXdpfWkkiVVxSfVSrVOiKRuFyPTBKpoTNetZrWdFwcHiNgatJRqoxVGkXkZxdlnIdCxLAtkAvNfmFEJHsqdALDmQqUfXtWqHJOtJCxdufGFhusZBwoXwxSukBFsRWqIYTfcxrDvLjmmdORAQrvqitNaLwuuKVqMyjRkkfpNwkOObnYxspdRBMTGPNJMCxrDiSxjouAlBFaXubydQHKlcxoDNxoasEIrmAoyCJrJyLTsrwbOKAmgNJMNmnWSQQLnEmSkcTnSumyqpvXjyXycsTMFkcpoNsPAHRlHCwYTOwHBFsiKWqfHOLvMakOMtPDDYkfguytllKYEUIJRXWGOmqEbQdiHvWiCZPRwgKItrmxPyktVDTgQtIrdjeOwfdPlpySptYBLLdWtMmTCRGAZtoQuCJWjXbVEwndXaKHuVTYExwCWQaFvgZsiYeCONCmFQBRaKyuYiVQWKsUVIogSOjYWyYZnPpDlBcpfTrsfwnbIrWPcHKpughMcCwyXyiEcYeVPRxZjrRIpXlybMrAhWeLpgMjkVaxubCMxBorueZpjFKNJiuNobVDRGHWIMMfvcZdhbVccIuvYIYuSNIRmAodFRPvLtPXrVhdFaQuxLZRaMuTPIdxkcdZLAiOCXAfvobIBfCWgVqpFCJSBanZEjyweNhPFProtZoxjaFwsUgHRktUfhKjnOPRoYRoErWqDdZXuwBUHnaELrTBvpVtewsBqgOjoHdMGFBbCoBmEJIbiKDdsUIukWRqJejcwWXkfAGtHQEmCYRthlpIMQhYhfJMgFdAPLCyaFFwBcufPpZtyBtIqyHVhGbkNlfgMAvkjkcKQrthphpCBGPnmuBDYDytysXMZQnQyPtREYatBCqLiSksFSKVdOdQlWUtENKDBUEmtHSEAtDwFAifbKZkdcWPitPXvjBfVIkxrpPioURsSbphwtWLaHeHVWeBLqBbrdcSwmMEZE java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1769909 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1770311 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1770511 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1770515 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: kfLkWrRpRVobRecVKQaRscdnInYgUMDeloKqVxotdBBYLxkSPVWiRJNapOSAWUgxeHHlZExpFhLQsguLhlWGSmxTPsbphrskRDqBgpNkrXjVdlmXsLpXTvUelGvUdmuibrgmEZyDKOCxbJYQgRGwnavYMFZAQyTsWLbNNBmaXfIEpCGEAoKvJcnacJeFXWDWRFCEBNyyYSLeanXHomaAEwMwrUAvqRlXyqKUMOHOIrifshHqixwiuvDNLWIVjtjUKcpglaRpRqBKLGJlbxYoWJkqVQjTkojZwUkfMpGUIVtMjPJfpHibcJXtdyyEYCbEepMmajJIbCyrGYvSDpCTrPcUQMWxuEMbIEjAoGOeLUjTiHJjgcLfumlmVTPmNpZOgckxqUerSYnJWVLOQxMybbNvmYfOYFSUFjPSLGPwBacXTySIuitclbojSTxYRQsuYLiSyvSJefWPsoRCPqFryTSKXXnPfZUKrjYsoEaTtClGINqoJSbtiHmASurvmKWvABLvaWgbxUDmtDRhvcAEuAwarTgTkMKalahIcVqvbAueTkZtoTaqjUvpIZBIqPdVdMEuUYOlgToiQVbJNmogBTQYgUUsUosIJfQLrwCMHEYJqOERIkyUiMZgfiBfSAFcWeDNBsOkkgGThPKADkXQcsopjuEVOyLShdyoZiOOsFaLvuRDDSpLEEgwXTbTxOgvOyPNGtCPEJlbjVqkkwDIEjNABwEKAQWOvGQkKVigkGqCGUbFADHYRtmFCnDxRNkgHjmdRfnLbFWwaFiLChOFcywVgLSKvleoXBHoycLQeGkevGoSgwfWqNZklFvTFwiRVVYQjHykClBumtYVNnMuLYtErHJVJtSljUahBhlXYLwoBNkRLGONhhKXhPvmUONOnHRMpDuWBDSskbAtsGAiBXvEeFvBBauEBWJgIELPPHKILKOjDiPaBpeZSvINXTjQpQTOmusxgwTgIAohlCoxKuiiJNPPVIwkKpagZpbHdBjUfIFgqgDbXygwKJHIkLLuMFTrsploDhDvZSEBVXaGTwVcvNUysHdPIcEhYPdFAXEZFZQOAXrwCGafloWbaPgGRXoGOJgmIpIxYotRgXBgqIHOEfHCSYgehVVvCBFaATMUmZrUTAnPhhUZDmMWBxmoTFksyKnbwKBJGVjaEFgVjFfhIWrmXqicQlnsoCKIxfmBVjVmgXymkHCpjjqoafRAYyRlkKeVxcDYxlEsYQqpniJuxuXQfoffDOeDMLiCcAlYUOpbHQjJaTbuWnyQxsmFCGTXwpqMkbBnPVCuaIDqHlCaPMKKKycYxladwujyZruIEtExTEbCnLuCXInbJKbkCeqlDkreadcCjTolEkIDCPYPiwASMjbJDBwcQofMrkFkPwayAaxvjnpOaFQKhZfJkLLZYqLHwXbBWQdwbSJbHTgOQDVIUqSMoZWvBajNNExEQAxdsVStxVrCqRMuCABZtVnEbvbQslhveScSYFmioZhAYSwxtLERZNZEkLtFDQbIbhdrWiVJXvybyihJQNlIiQTBBTGkbgvXWPZuBcXBkbuKTGchrvjxDeKiGsbsWGplKAmUphWSkLwTwmgEXZewcbOpWLYZHKdjdikqcToueZqfEFlHXGsKQxAZiuMyNvpDJYMKOVGVJdJknQTeffOmxQrxtWYVHWDUuHKSWavcgRmVaLjBjOYQaHbCQZuFbdGeFgQHOUEHvtZxgmrcKhUpvEJXUwghdqSUmxTFgCAyfJHlKysLFhhnKowSaMrPHvCrWLVxSbZjKMVhEHHWDJlGBiHeovmvDyedOlfNheymIIsmYknfdrfTViDTheypQjHhFdMOkhVAgBpNWTustyAdsWRDCvJGVehibgDQgYhLDagnnxfvqjdUmaEbxOekmIwHaZqHwEnGXIZMWQxKhYyAhjQevfpWQHDFYkobxoitnijXHxKsdKPqDYODXjuJHXoyHWvZqOcssceqMVFoAnSsFWlInUEWXTGdujHEitKEJpnXJkQIcCnXewwVoDPveJuCwTYUoDKUQibKBoRgUmuqSkkGMcnGnfDeuRhhDdmanbdRRbKTfRiSESDQdeoLXsnMNxDcanlg at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1770713 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1777642 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | BufferOverflow in 150.544s 1777642 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | FormatString strength INSANE threshold MEDIUM 1870453 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1916807 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1917007 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1917008 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1917210 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1917211 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1917406 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1917409 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1917612 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1917615 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1917812 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1917812 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1918019 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1918019 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1918217 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1918218 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1918818 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1919220 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1919420 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1919421 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1919621 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1921035 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1927257 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | FormatString in 149.615s 1927257 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestInjectionCRLF strength INSANE threshold MEDIUM 1972287 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1972287 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1972292 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1973295 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1973297 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 2080373 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestInjectionCRLF in 153.116s 2080373 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestParameterTamper strength INSANE threshold MEDIUM 2090820 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2182935 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2233636 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - unsupported protocol: '172.17.0.2' java.lang.IllegalStateException: unsupported protocol: '172.17.0.2' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2233860 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2233862 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2234051 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234053 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234072 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2234096 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - java.net.UnknownHostException: at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234099 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234100 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2234245 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234247 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234250 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - java.net.UnknownHostException: at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234252 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234253 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2234264 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2234438 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234464 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2234645 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234646 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - http java.net.UnknownHostException: http at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234647 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234650 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - java.net.UnknownHostException: at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234652 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234654 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2234840 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - unsupported protocol: 'httk' java.lang.IllegalStateException: unsupported protocol: 'httk' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2234862 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2235071 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2235071 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2235245 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: '172.17.0.2' java.lang.IllegalStateException: unsupported protocol: '172.17.0.2' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2235245 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - host parameter is null java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2235550 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2235553 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2235561 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2235870 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2235874 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2235881 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2236049 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2236261 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2236264 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2236272 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2237885 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2245085 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestParameterTamper in 164.712s 2245086 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPersistentXSSPrime strength INSANE threshold MEDIUM 2391959 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPersistentXSSPrime in 146.874s 2391959 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPersistentXSSSpider strength INSANE threshold MEDIUM 2498080 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 2498081 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 2498086 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 2499112 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 2499115 [HSQLDB Timer @33666bf5] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 2573408 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPersistentXSSSpider in 181.449s 2573408 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPersistentXSSAttack strength INSANE threshold MEDIUM 2692644 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPersistentXSSAttack in 119.236s 2692644 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | ScriptsActiveScanner strength INSANE threshold MEDIUM 2819534 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | ScriptsActiveScanner in 126.89s 2819534 [Thread-18] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host http://172.17.0.2:8080 in 2721.871s 2819534 [Thread-17] INFO org.parosproxy.paros.core.scanner.Scanner - scanner completed in 2721.882s