Found Java version 1.7.0_91 Available memory: 3952 MB Setting jvm heap size: -Xmx512m 195 [main] INFO org.zaproxy.zap.DaemonBootstrap - OWASP ZAP 2.4.3 started. 506 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open start 514 [main] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache open end 845 [main] INFO org.parosproxy.paros.common.AbstractParam - Setting config api.disablekey = true was null 847 [main] INFO org.parosproxy.paros.network.SSLConnector - Reading supported SSL/TLS protocols... 847 [main] INFO org.parosproxy.paros.network.SSLConnector - Using a SSLEngine... 1061 [main] INFO org.parosproxy.paros.network.SSLConnector - Done reading supported SSL/TLS protocols: [SSLv2Hello, SSLv3, TLSv1, TLSv1.1, TLSv1.2] 1065 [main] INFO org.parosproxy.paros.extension.option.OptionsParamCertificate - Unsafe SSL renegotiation disabled. 1074 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory - Loading extensions 1826 [ZAP-daemon] INFO org.zaproxy.zap.control.ExtensionFactory - Extensions loaded 2227 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Change user agent to other browsers. 2227 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Detect insecure or potentially malicious content in HTTP responses. 2227 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Detect and alert 'Set-cookie' attempt in HTTP response for modification. 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Avoid browser cache (strip off IfModifiedSince) 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log cookies sent by browser. 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log unique GET queries into file:filter/get.xls 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log unique POST queries into file: filter/post.xls 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Log request and response into file: filter/message.txt 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP request body using defined pattern. 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP request header using defined pattern. 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP response body using defined pattern. 2228 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Replace HTTP response header using defined pattern. 2229 [ZAP-daemon] INFO org.parosproxy.paros.extension.filter.FilterFactory - loaded filter Send ZAP session request ID 3431 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows ZAP to check for updates 3435 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionViewOption 3435 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionEdit 3435 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionFilter 3435 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides a rest based API for controlling and accessing ZAP 3529 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionState 3529 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHistory 3531 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Show hidden fields and enable disabled fields 3532 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Search messages for strings and regular expressions 3532 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Encode/Decode/Hash... 3532 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to intercept and modify requests and responses 3533 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Passive scanner 3573 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Script passive scan rules 3573 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Application Error Disclosure 3573 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Incomplete or No Cache-control and Pragma HTTP Header Set 3573 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Content-Type Header Missing 3574 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Cookie No HttpOnly Flag 3574 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Cookie Without Secure Flag 3574 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Cross-Domain JavaScript Source File Inclusion 3574 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Web Browser XSS Protection Not Enabled 3574 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Secure Pages Include Mixed Content 3575 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Password Autocomplete in Browser 3575 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Private IP Disclosure 3575 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: Session ID in URL Rewrite 3575 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: X-Content-Type-Options Header Missing 3575 [ZAP-daemon] INFO org.zaproxy.zap.extension.pscan.ExtensionPassiveScan - loaded passive scan rule: X-Frame-Options Header Not Set 3588 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to view and manage alerts 3588 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Active scanner, heavily based on the original Paros active scanner, but with additional tests added 3592 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Spider used for automatically finding URIs on a site 3596 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing A set of common popup menus for miscellaneous tasks 3597 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Forced browsing of files and directories using code from the OWASP DirBuster tool 3597 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionManualRequest 3597 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Compares 2 sessions and generates an HTML file showing the differences 3597 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Invoke external applications passing context related information such as URLs and parameters 3598 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Handles anti cross site request forgery (CSRF) tokens 3599 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionAuthentication 4210 [ZAP-daemon] INFO org.zaproxy.zap.extension.authentication.ExtensionAuthentication - Loaded authentication method types: [Form-based Authentication, HTTP/NTLM Authentication, Manual Authentication, Script-based Authentication] 4478 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Creates a dynamic SSL certificate to allow SSL communications to be intercepted without warnings being generated by the browser 4478 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Logs errors to the Output tab in development mode only 4478 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionUserManagement 4479 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Summarise and analyse FORM and URL parameters as well as cookies 4482 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Script integration 4490 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Scripting console, supports all JSR 223 scripting languages 4490 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionForcedUser 4490 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Extension handling HTTP sessions 4491 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Zest is a specialized scripting language from Mozilla specifically designed to be used in security tools 4569 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionDiff 4569 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionRequestPostTableView 4569 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Simple browser configuration 4569 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionSessionManagement 4663 [ZAP-daemon] INFO org.zaproxy.zap.extension.sessions.ExtensionSessionManagement - Loaded session management method types: [Cookie-based Session Management, Http Authentication Session Management] 4663 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelRequestFormTableView 4663 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Capture messages from WebSockets with the ability to set breakpoints. 4667 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Summarise and analyse FORM and URL parameters as well as cookies 4667 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionAuthorization 4667 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing AJAX Spider, uses Crawljax 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Handles adding Global Excluded URLs 4668 [ZAP-daemon] WARN org.zaproxy.zap.extension.globalexcludeurl.ExtensionGlobalExcludeURL - GlobalExcludeURL.optionsLoaded() 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Adds menu item to refresh the Sites tree 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Adds support for configurable keyboard shortcuts for all of the ZAP menus. 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing OWASP ZAP User Guide 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionReport 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows you to configure which extensions are loaded when ZAP starts 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelComponentonentAll 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelHexView 4668 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelImageView 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelLargeRequestView 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelLargeResponseView 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelRequestQueryCookieTableView 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionHttpPanelSyntaxHighlightTextView 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Quick Start panel 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Translations of the core language files 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Tips and Tricks 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Passive Scan Rules 4669 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows to fuzz WebSocket messages. 4670 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides WebDrivers to control several browsers using Selenium and includes HtmlUnit browser. 4670 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Active Scan Rules 4670 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing The ZAP Getting Started Guide 4671 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing The Online menu links 4671 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing ExtensionSaveRawHttpMessage 4671 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Provides the foundation for concrete message types (for example, HTTP, WebSockets) expose fuzzer implementations. 4672 [ZAP-daemon] INFO org.parosproxy.paros.extension.ExtensionLoader - Initializing Allows to fuzz HTTP messages. 4673 [ZAP-daemon] WARN org.zaproxy.zap.extension.autoupdate.ExtensionAutoUpdate - No check for updates for over 3 month - add-ons may well be out of date 4673 [Thread-4] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL - Creating new root CA certificate 5061 [Thread-4] INFO org.zaproxy.zap.extension.dynssl.ExtensionDynSSL - New root CA certificate created 20351 [ZAP-ProxyThread-1] INFO org.zaproxy.zap.extension.httpsessions.ExtensionHttpSessions - Added new session token for site '172.17.0.2:8080': JSESSIONID 20353 [ZAP-ProxyThread-1] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 0, active=false, tokenValues=''] 20455 [ZAP-ProxyThread-2] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 1, active=false, tokenValues=''] 20548 [ZAP-ProxyThread-3] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 2, active=false, tokenValues=''] 20864 [ZAP-ProxyThread-6] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 3, active=false, tokenValues=''] 21531 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine - Add-on update check complete 21532 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine - Downloading add-on from: https://github.com/zaproxy/zap-extensions/releases/download/2.4/ascanrulesBeta-beta-19.zap 22874 [ZAP-ProxyThread-7] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 4, active=false, tokenValues=''] 23534 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine - Add-on downloaded to: /home/zap/.ZAP/plugin/zest-beta-20.zap 23534 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine - Add-on downloaded to: /home/zap/.ZAP/plugin/selenium-release-5.zap 23534 [ZAP-daemon] INFO org.parosproxy.paros.CommandLine - Add-on downloaded to: /home/zap/.ZAP/plugin/ascanrulesBeta-beta-19.zap 23868 [ZAP-daemon] INFO org.zaproxy.zap.DaemonBootstrap - ZAP is now listening on 0.0.0.0:8090 24940 [ZAP-ProxyThread-9] INFO org.zaproxy.zap.extension.httpsessions.HttpSessionsSite - Created a new session as no match was found: HttpSession [name=Session 5, active=false, tokenValues=''] 26981 [Thread-19] INFO org.zaproxy.zap.extension.spider.SpiderThread - Starting spidering scan on SpiderApi-0 at Mon May 30 16:03:35 UTC 2016 26983 [Thread-19] INFO org.zaproxy.zap.spider.Spider - Spider initializing... 26999 [Thread-19] INFO org.zaproxy.zap.spider.Spider - Starting spider... 27000 [Thread-19] INFO org.zaproxy.zap.spider.Spider - Adding seed for spider: http://172.17.0.2:8080/wavsep/index-active.jsp 27005 [Thread-19] INFO org.zaproxy.zap.spider.Spider - Adding seed for spider: http://172.17.0.2:8080/robots.txt 27006 [Thread-19] INFO org.zaproxy.zap.spider.Spider - Adding seed for spider: http://172.17.0.2:8080/sitemap.xml 69013 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 69014 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 69023 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 69188 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 69191 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 82942 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 82942 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 82953 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 83751 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 83754 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 86095 [pool-1-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL in the spidering process (on base http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/Case03-Redirect-RedirectMethod-FilenameContext-Unrestricted-HttpURL-DefaultInvalidInput-AnyPathReq-Read.jsp?target=httk://google.com): unknown protocol: httk 86210 [pool-1-thread-1] WARN org.zaproxy.zap.spider.URLCanonicalizer - Error while Processing URL in the spidering process (on base http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/Case07-Redirect-RedirectMethod-FilenameContext-Unrestricted-HttpURL-DefaultEmptyInput-PartialPathReq-Read.jsp?target): Expected authority at index 7: http:// 91346 [pool-1-thread-1] INFO org.zaproxy.zap.spider.Spider - Spidering process is complete. Shutting down... 91346 [Thread-20] INFO org.zaproxy.zap.extension.spider.SpiderThread - Spider scanning complete: true 91840 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 91840 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 91848 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 93318 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 93321 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 95046 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 95046 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 95053 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 95336 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 95338 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 97189 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Path Traversal 97190 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote File Inclusion 97190 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Include 97191 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Reflected) 97191 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) 97192 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection 97192 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Code Injection 97193 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote OS Command Injection 97193 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Directory Browsing 97193 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin External Redirect 97194 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Buffer Overflow 97194 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Format String Error 97195 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin CRLF Injection 97195 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Parameter Tampering 97196 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Prime 97196 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Spider 97196 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Script Active Scan Rules 97197 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Source Code Disclosure - SVN 97198 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Source Code Disclosure - /WEB-INF folder 97198 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote Code Execution - Shell Shock 97198 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Anti CSRF Tokens Scanner 97199 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Heartbleed OpenSSL Vulnerability 97199 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross-Domain Misconfiguration 97199 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Source Code Disclosure - CVE-2012-1823 97200 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote Code Execution - CVE-2012-1823 97200 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Session Fixation 97200 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - MySQL 97201 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - Hypersonic SQL 97201 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - Oracle 97201 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - PostgreSQL 97202 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin XPath Injection 97202 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin XML External Entity Attack 97202 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Generic Padding Oracle 97203 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Expression Language Injection 97203 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Backup File Disclosure 97203 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Integer Overflow Error 97204 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Insecure HTTP Method 97204 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin HTTP Parameter Pollution scanner 97204 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Possible Username Enumeration 97207 [ZAP-ProxyThread-36] INFO org.parosproxy.paros.core.scanner.Scanner - scanner started 97209 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Path Traversal 97209 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote File Inclusion 97210 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Include 97210 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Reflected) 97211 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) 97212 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection 97212 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Server Side Code Injection 97213 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote OS Command Injection 97213 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Directory Browsing 97214 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin External Redirect 97214 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Buffer Overflow 97215 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Format String Error 97215 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin CRLF Injection 97216 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Parameter Tampering 97216 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Prime 97217 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross Site Scripting (Persistent) - Spider 97217 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Script Active Scan Rules 97218 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Source Code Disclosure - SVN 97218 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Source Code Disclosure - /WEB-INF folder 97219 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote Code Execution - Shell Shock 97219 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Anti CSRF Tokens Scanner 97220 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Heartbleed OpenSSL Vulnerability 97220 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Cross-Domain Misconfiguration 97221 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Source Code Disclosure - CVE-2012-1823 97221 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Remote Code Execution - CVE-2012-1823 97222 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Session Fixation 97222 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - MySQL 97223 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - Hypersonic SQL 97223 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - Oracle 97224 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin SQL Injection - PostgreSQL 97225 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin XPath Injection 97225 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin XML External Entity Attack 97226 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Generic Padding Oracle 97226 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Expression Language Injection 97227 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Backup File Disclosure 97227 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Integer Overflow Error 97228 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Insecure HTTP Method 97228 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin HTTP Parameter Pollution scanner 97229 [Thread-21] INFO org.parosproxy.paros.core.scanner.PluginFactory - loaded plugin Possible Username Enumeration 97234 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPathTraversal strength MEDIUM threshold MEDIUM 127550 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:329) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 127949 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:301) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 131880 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:329) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 134121 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:379) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 134488 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:329) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 157998 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 157998 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 158005 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 158432 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 158434 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 190317 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 196573 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:379) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 204142 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236138 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236139 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236338 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236338 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236545 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236546 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236741 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236742 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236942 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 236942 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237143 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237145 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237346 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237346 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237545 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237748 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237748 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237949 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237949 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 237950 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238153 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238154 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238156 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238156 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238357 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238358 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238358 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238558 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238558 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238559 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238759 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238759 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238760 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238960 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238961 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: c java.net.UnknownHostException: c at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 238961 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 239161 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 239161 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'c' java.lang.IllegalStateException: unsupported protocol: 'c' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 239162 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 239162 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error occurred while scanning a message: java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 240174 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestPathTraversal - Error scanning parameters for Path Traversal: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/c:\Windows\system.ini org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/c:\Windows\system.ini at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.sendAndCheckPayload(TestPathTraversal.java:444) at org.zaproxy.zap.extension.ascanrules.TestPathTraversal.scan(TestPathTraversal.java:285) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 18 more 245595 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPathTraversal in 148.361s 245596 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestRemoteFileInclude strength MEDIUM threshold MEDIUM 265710 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 265710 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 265716 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 266924 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 266927 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 388056 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 388256 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 388256 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 388474 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 388680 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 388680 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: unsupported protocol: 'www.google.com' 388858 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 389058 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 389058 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 389867 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 389867 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 390173 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 390173 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 390374 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 390374 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 390508 [ZAP-ActiveScanner-1] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 390508 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 390595 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 390595 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 390773 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 390798 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: 'www.google.com' java.lang.IllegalStateException: unsupported protocol: 'www.google.com' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude.scan(TestRemoteFileInclude.java:211) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 390799 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: host parameter is null 390974 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 391174 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestRemoteFileInclude - Error scanning parameters for Path Traversal: http 400069 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestRemoteFileInclude in 154.473s 400069 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestServerSideInclude strength MEDIUM threshold MEDIUM 530795 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 530795 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 530801 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 531349 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 531352 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 548514 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestServerSideInclude in 148.445s 548514 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestCrossSiteScriptV2 strength MEDIUM threshold MEDIUM 691492 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 691892 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 691893 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 692095 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 692096 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 692899 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 693503 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 693704 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 693704 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 693905 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2 - 0W45pz4p java.net.UnknownHostException: 0W45pz4p at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestCrossSiteScriptV2.scan(TestCrossSiteScriptV2.java:128) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 701750 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestCrossSiteScriptV2 in 153.236s 701750 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestSQLInjection strength MEDIUM threshold MEDIUM 744716 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 744716 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 744727 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 745511 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 745518 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 796306 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.TestSQLInjection - An error occurred checking a url for SQL Injection vulnerabilities java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestSQLInjection.scan(TestSQLInjection.java:728) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 799366 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.TestSQLInjection - An error occurred checking a url for SQL Injection vulnerabilities java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestSQLInjection.scan(TestSQLInjection.java:501) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 852563 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestSQLInjection in 150.813s 852563 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | CodeInjectionPlugin strength MEDIUM threshold MEDIUM 866079 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 866079 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 866084 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 868607 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 868609 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1014260 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | CodeInjectionPlugin in 161.697s 1014260 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | CommandInjectionPlugin strength MEDIUM threshold MEDIUM 1047632 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1047632 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1047638 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1048615 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1048617 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1153164 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1153164 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1153170 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1155054 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1155056 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1173838 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | CommandInjectionPlugin in 159.578s 1173838 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestDirectoryBrowsing strength MEDIUM threshold MEDIUM 1356352 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestDirectoryBrowsing in 182.514s 1356353 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestExternalRedirect strength MEDIUM threshold MEDIUM 1356758 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [userinput] with payload [5926090005550314191.owasp.org] 1456434 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1471105 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1507234 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1507435 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1507437 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1507633 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1507636 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1507837 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1507838 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1508034 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1508034 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1508235 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1508235 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1508439 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1508441 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1508640 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1508642 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1509046 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1509051 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1509245 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1509245 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1509446 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1509446 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1509642 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1509648 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [https://5926090005550314191.owasp.org] 1509843 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1509843 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1509844 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1509844 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1509850 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1510994 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1510997 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 1511045 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1511047 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1511248 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1511250 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1511449 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [http://5926090005550314191.owasp.org] 1513055 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1513661 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1513661 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1513859 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1513862 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514062 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514063 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514261 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514262 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514462 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514464 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514663 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514663 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514865 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1514867 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515065 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515267 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515469 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515472 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515668 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515668 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515869 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1515871 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516070 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516070 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516270 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516271 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516472 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516472 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516674 [ZAP-ActiveScanner-0] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1516675 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrules.TestExternalRedirect - [External Redirection Found] on parameter [target] with payload [5926090005550314191.owasp.org] 1518078 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestExternalRedirect in 161.726s 1518078 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | BufferOverflow strength MEDIUM threshold MEDIUM 1658503 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1658703 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1658905 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1658905 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: PLEcorqTMJkSDSBSRobqSKrmbKLyuWJxWECfaWUPUnrhhgvyDEbqDvLaBFmuRDVbUdOallJXBIncZivrYKOlVbmQdYqEALcvMeVydSAMxfyqgYWrSFQNLuFViZNhJRrQaQBVohjVGlwfayOdLwAUOxuyscWLpMhfTMnEARMCexJQqPuPUGCwymNbPViBMHTJiSsrEOahUjDSQkdTibsJnihAFpHBqTvEryKWtiesCuKqrpfiYoiuWjPanjSdWSFkQfflwrJTovKUMnFErbQHeuLJtAxWZsVZqgQvaCjrnoIOYOfpsEIquKeGDBIBhlPQnAkVtXhYCCfCXQZiowtdAfcoZbkhcTVOjUGUWfSOXLmrFFtUHkexxtbMyNQvtjSWsuxEJQGWWGwvsdVcjtdNtMjlvdyNDVyoHMulVIPCdZRUhOawYbXIlQStypxasJkdfMQQDiqWstRYCOqNvbEvUQbZrVVYqbAnUldDSvvLAnrkyXisEJtPgMEFvCwuZYbjinZBhwjBDCEsguacmfDlrxWRAncgBQGGKJsPAfqkJRfRojljUsooGfVuEIZGWEbLSCPtILxQYcXtebYlLPQtJCiuUKsUkUQPtFViYpdSvFCOUAFOwLuohLdANaLafEuQogcuFKnZVhlKuEGFrroeAaKsjToWwJFVcKyJKhdNvBCIifADZmDdKGqavwfgUcVlCXkFdYhLRCEvwfDYQYAQFkqTatWhUUPNfffnyOVBmHufkcPNvvJiSrnmMMBtvQVpjtxBXyJCfZkjFXGrZxLEMEeqkcSNySNDUtHAQDwoMZsFSaWRioFYHTAkKrPBEDGnXHQiGljNlEVQoTaJwCvyMvjqncOHoSihHluDbxSiqGNBJuOpIGxQfjQolvWGDOGSQWfWAgWBsHygLKJobyJgPphqUBeaDntDTIupZeIdfojdxgVdoOSHJNktIwwQowqQrwmkXEEvpTdgoLCkelReYaJuERxeWwJyeXQMWwFbFfTfsGApHlbGBRPvBTwKaemsCjLcfFQsRvyFRNllorClWnZUcEaGUXUIvFhCKEMNSQdnfkxIDxsGwMrDodPHMYupOioXvBwWcpBEPvTUIrCeWBQiHXHPjlYMJrtxTxARDrfPQNwQaQqGBVVtRQUCciwVWBJDltiNcjUpdMJJyYvxUZvmHZPDhrKSjddrtWKymVjJrXeJdPOpYQuhrpLXnMFlkKgjspoEiEBJsnrmgxXLCLYFPkBmTqqKAqutrMYMrjvDvjqrCfumGiHGSpZfnNRugvDDyjHKNOlvPZNjiVPuDwXQdBCnupVJbciftWOfhQdJAodeOANZUbXQWqPHaKOFbEfbIKTJctPjVlYNDmpPastruKBMvjIDWmKmYYdUAgpYwnBOvpKJncXTgWiVwTuWQEyDHLJejXPnequkNhbEWgXKPMIFEiRYgmKZbsCURnYCFkZKFkWGTZAZeqVQZLRQHefYUVvbagUNuCurpVEHnLsLpqFHrqsyLuHUWUOCYROYIqFiTSCqRvgkBXvvRFaIuNmSxFFThcyWFrPUjoORidwlXHLyKuvFVmYZpWvxjuSndwZhGrosTmsgFfHEjAmXUAedFWJZQOariQDcGjgaosbRsUKdLfXmIYGgTvkODRvtHoXgENXrxYHJuhwxDkZUacnMuDEOitnFwrKfrndPHGGKgSSinrgByqwpDAomuRLTnSZElBpPqvbqjpNPTnCZhMhjUETUhXQicvFArUlKXBweMOAmcMBXqUOkjEDOvDutVHLMBTNWsXKWZnvBCVOsOvCIDcwALHijcdTfKEwytDCfCoSPBtvKwbGyTwjDAPdwRHFYVFiRDJnsHnrMwWiBxFKuxfGbWSAoMRKHVpdGaZujNUnVsPyvXvHVCNPjHCKqjQsmvIgQvFOOAvXejUCJaudoFSmYDNRQRQHkbukrhdCgGaSHGaclfNAaURQWnTfrsovwiqKyJYGXAysfrAqSkXCQjlcuckaMAQKWDoBvTCgloBHSdUgtdAYPOfJNUIOkIFVKFItDJFTrvlJQHPYcVCLALAmKQrOgrExuXZgBmIxiTKFpwIAKaTJYGtjWrgkqisFWUsRc at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1659105 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1659910 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - skNesVsXcgQgJbqXaMnZAnYJMjnkMbKBAkvYAobGSMoYnfCCUaIJDMZIOyCMQdqpLqWYWpwsMqJwgnCFjTSnodXVlRIjXIlidwfpoyeBeOuKMVCQnZWlkhteHyMgwdENMMpnJAtgpmIdEyumXDdgpguOXoLeTrGiDyrWDQTBgNQUlukHlnnBYixDqqRpMLkqFXfLvJeWmTvlveUFccWdRrbQYXUSooEgyMfXcZheinlyFSBPNOYflDZEKLZNAQNvMjlyJvBhbcFxYmFWShknNGfDIjlVdTqntVGQLnZquFCXMCFepkayKcanyAkRQHKSydkeTcfmgAPLBbMHvUFhxJQJsKwhbOJIcIcgXkvsBGBpglfLlpMtXNMBxdiaertcLmpDbklIyMMyAIjlSTaROLKYoGfoWtXOSNKWqIcgZeuRujUsriJuIIdMMrOalfcmWvbBveCrlVYucseOjcWhWxpkPrQctEHAVPuUpcFHHYbpFAZlYMtJGYVHFhBgKFkYkbugHmRPWMyAXFwqDPhBJUjjuEJWylIoOrfKAMheyXjfIPTBIwAJdUeoTWopQiRKGWoYDNeKKGwanEphFmXjwVyibMGhTfElwhNAiSnwVOUROcaZwJwOnWpbiLtqsEACxYnlLfgUnyDQaeaTTDbLEBCJunZVDCyShgfygjmEiYWuFLVCOjCohfYWMGhndOrYktDCVFejvYDUrhqvvMERxqCCZrvGJatBIPxZfpxCcFcstbqDNmYlLHuUFbudvqPmTBphXdumHjTAkXkeLlYwJpvEkWxkTKYjBJMaaiIvagicEqdnvhSKNcmatmZoJqSaXYVXbFkePJajqhKkYORnjgKHXxpTVwRSvbtKmRDZXuhbrAyDmfioxtFoNnZSSOffZnWVhFVibsXAIHZbvxGpHxmgHfEQsjIFEUkRQlrnkUvxQcBWuBKivSbPupgJbetcRCGSfAqDGMRFcfZkvxDpsLWqQAXGqDNvhBJneuqCdVdPQASOUOoKPwrDqHDVxoluQyCDjgVyEJZoqnSUKhkFiNQmmSLEEDmgBevHiQvtvOIQugYwrFqtCIiULCxtaBQTvWBIisWocRbbqZJVlGNRCootInAJTpAQgrboiowjAUiZJItpiAiAkfveYMLHTjjvDtHZvqXsHUiEMgZnDgNnMsfQjOMjhSNCrYmZucLeUBBxGPVqaOoJXdHEiRuEHGmJpmYpPXnKuvAiyBORvQBtmUncAWYGXDclPlrZXxbEZuOoDvQnCSOVZYikjDeiAPXMtoCnvQahVSnJvWHewnGNFbDFOIbwIIXrBGISgpHlqqIOjykYVAqHEZLRgKeOKNNwNgTHFYacpwHeWfsAwILlyZjPVlPQLhXpgnnwvPlWdUndaoxJdNmeARdQcRFFXCskKmIFokMFgiNfncfHMAhoiNFscLEAgskPAclKAHwSqgbaKAmZhttYeHmgaIhbhtqOqJkRnpsqpZYkJJkrDcWHpHktUpeqdyhWCKFIIHMOBKqPHVhpTZuHcNFACuqpJHqIUJiqFDuFQdyOosqgoMfOKGsUfwBZmMmsXNRbwCgujiLaRPYyiaaiPFRttLRTSLUMOlCyyaEHJTAnibqrtiiLvetMOPYdTgOiMIGBNfcpxAYAjnpIyBcfyTkByVsdKsSOYqNtJlDshWpeRqkCcOdKolaERrXiJLpGjTECGYVppdapMBBeuKeaOjValybSqcKANpqRlvlapxLBypURKKCLYLgLuVyWhIqVGKKiNeDXgVPWmrfwnnNgRRZLdnnamQvehaHyGiWPXOihgBnhOjHQqkoxrCvkQuNToqIVkYDiJAWdRHbuvGVTYGRYkvYTBTriHrEXfgfHxgyTRYHbwWLjcUeFMfaxnMgDDPcTpxcDgBpUuGtdrwOLaxRUqmbKmBoJKBDVrkpNSctDNTMnIBdpTRrFnCgyIxYukmSxZrIEGbuFKOkvbsypnUfMMZKdAMRNhSTGyQhrgpJOTpdxGLtovXGEeTViyVdppiHiwGBbunThRNsEGymqaiDKnYFuDiyfuFSibReVEMHEZFFZLuJTDMwDpfRkGnDHHQvHUoMUAeAIUvHbhlAp java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1660516 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1660717 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1660722 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1660919 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.BufferOverflow - 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 java.net.UnknownHostException: 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 at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.BufferOverflow.scan(BufferOverflow.java:130) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1667960 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | BufferOverflow in 149.882s 1667960 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | FormatString strength MEDIUM threshold MEDIUM 1761223 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1775600 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/RFI/RFI-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/RFI/RFI-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1810390 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1810590 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1810590 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1810789 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1810790 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1810991 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1810992 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1811190 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1811192 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1811390 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1811390 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1811595 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1811596 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1811795 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1811795 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1812202 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1812806 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1813007 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1813007 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1813208 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:155) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 1814620 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrules.FormatString - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/ZAP%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s%n%s at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.FormatString.scan(FormatString.java:179) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid URL encoding: not a valid digit (radix 16): 110 at org.apache.commons.httpclient.URI.decode(URI.java:1775) at org.apache.commons.httpclient.URI.decode(URI.java:1731) at org.apache.commons.httpclient.URI.getPath(URI.java:3108) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) ... 17 more 1820448 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | FormatString in 152.488s 1820448 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestInjectionCRLF strength MEDIUM threshold MEDIUM 1968353 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestInjectionCRLF in 147.905s 1968353 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestParameterTamper strength MEDIUM threshold MEDIUM 1974385 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 1974385 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 1974391 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 1975958 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 1975960 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 2069789 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2085116 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/RFI/RFI-FalsePositives-GET/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/RFI/RFI-FalsePositives-GET/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2121765 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2121942 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - unsupported protocol: '172.17.0.2' java.lang.IllegalStateException: unsupported protocol: '172.17.0.2' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2121967 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2122154 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122156 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122169 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2122175 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - java.net.UnknownHostException: at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122178 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122179 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2122377 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2122378 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2122544 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122550 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122551 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122553 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - java.net.UnknownHostException: at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122555 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122556 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2122751 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122753 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122754 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - http java.net.UnknownHostException: http at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122756 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - java.net.UnknownHostException: at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122758 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Host name may not be null java.lang.IllegalArgumentException: Host name may not be null at org.apache.commons.httpclient.HttpHost.(HttpHost.java:68) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122759 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2122946 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - unsupported protocol: 'httk' java.lang.IllegalStateException: unsupported protocol: 'httk' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2122971 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2123178 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2123182 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2123636 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2123638 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2123646 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2123751 [ZAP-ActiveScanner-0] ERROR org.parosproxy.paros.network.HttpMethodHelper - unsupported protocol: '172.17.0.2' java.lang.IllegalStateException: unsupported protocol: '172.17.0.2' at org.apache.commons.httpclient.protocol.Protocol.lazyRegisterProtocol(Protocol.java:149) at org.apache.commons.httpclient.protocol.Protocol.getProtocol(Protocol.java:117) at org.apache.commons.httpclient.HttpHost.(HttpHost.java:107) at org.apache.commons.httpclient.HttpMethodBase.setURI(Unknown Source) at org.parosproxy.paros.network.HttpMethodHelper.createRequestMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2123751 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - host parameter is null java.lang.IllegalArgumentException: host parameter is null at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:206) at org.apache.commons.httpclient.HttpConnection.(HttpConnection.java:155) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionWithReference.(MultiThreadedHttpConnectionManager.java:1145) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$ConnectionPool.createConnection(MultiThreadedHttpConnectionManager.java:762) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.doGetConnection(MultiThreadedHttpConnectionManager.java:476) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager.getConnectionWithTimeout(MultiThreadedHttpConnectionManager.java:416) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2124168 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2124171 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2124182 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2124356 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - ZAP java.net.UnknownHostException: ZAP at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:114) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2124568 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Connection refused java.net.ConnectException: Connection refused at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:339) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:200) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:579) at java.net.Socket.connect(Socket.java:528) at java.net.Socket.(Socket.java:425) at java.net.Socket.(Socket.java:280) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80) at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122) at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2124571 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2124578 [ZAP-ActiveScanner-1] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid authority org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 2126195 [ZAP-ActiveScanner-0] WARN org.zaproxy.zap.extension.ascanrules.TestParameterTamper - Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/| org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/| at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrules.TestParameterTamper.scan(TestParameterTamper.java:137) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 2132597 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestParameterTamper in 164.244s 2132597 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPersistentXSSPrime strength MEDIUM threshold MEDIUM 2282011 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPersistentXSSPrime in 149.413s 2282011 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPersistentXSSSpider strength MEDIUM threshold MEDIUM 2461458 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPersistentXSSSpider in 179.447s 2461459 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | TestPersistentXSSAttack strength MEDIUM threshold MEDIUM 2579049 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | TestPersistentXSSAttack in 117.589s 2579049 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | ScriptsActiveScanner strength MEDIUM threshold MEDIUM 2697447 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | ScriptsActiveScanner in 118.398s 2697447 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SourceCodeDisclosureSVN strength MEDIUM threshold MEDIUM 2800409 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.SourceCodeDisclosureSVN - Error executing SQL on temporary SVN SQLite database 'jdbc:sqlite:/tmp/sqlite_svn_wc_db7098454309131203722.tmp': java.sql.SQLException: [SQLITE_NOTADB] File opened that is not a database file (file is encrypted or is not a database) 2800409 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.SourceCodeDisclosureSVN - Error executing SQL on temporary SVN SQLite database 'jdbc:sqlite:/tmp/sqlite_svn_wc_db3656010951655588754.tmp': java.sql.SQLException: [SQLITE_NOTADB] File opened that is not a database file (file is encrypted or is not a database) 2800516 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.SourceCodeDisclosureSVN - Error executing SQL on temporary SVN SQLite database 'jdbc:sqlite:/tmp/sqlite_svn_wc_db669464580444577922.tmp': java.sql.SQLException: [SQLITE_NOTADB] File opened that is not a database file (file is encrypted or is not a database) 2867660 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SourceCodeDisclosureSVN in 170.213s 2867661 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SourceCodeDisclosureWEBINF strength MEDIUM threshold MEDIUM 2867661 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | ShellShockScanner strength MEDIUM threshold MEDIUM 2867674 [ZAP-ActiveScanner-0] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SourceCodeDisclosureWEBINF in 0.013s 2973463 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 2973463 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 2973469 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 2974186 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 2974189 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 3017464 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | ShellShockScanner in 149.803s 3017464 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | Csrftokenscan strength MEDIUM threshold MEDIUM 3088417 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | Csrftokenscan in 70.953s 3088417 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | HeartBleedActiveScanner strength MEDIUM threshold MEDIUM 3088418 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | CrossDomainScanner strength MEDIUM threshold MEDIUM 3088419 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SourceCodeDisclosureCVE20121823 strength MEDIUM threshold MEDIUM 3088421 [ZAP-ActiveScanner-0] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | HeartBleedActiveScanner in 0.004s 3088431 [ZAP-ActiveScanner-1] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | CrossDomainScanner in 0.013s 3262663 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SourceCodeDisclosureCVE20121823 in 174.244s 3262663 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | RemoteCodeExecutionCVE20121823 strength MEDIUM threshold MEDIUM 3443879 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | RemoteCodeExecutionCVE20121823 in 181.216s 3443880 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SessionFixation strength MEDIUM threshold MEDIUM 3445275 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SessionFixation in 1.396s 3445275 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SQLInjectionMySQL strength MEDIUM threshold MEDIUM 3461740 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 3461740 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 3461745 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 3463798 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 3463800 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 3481016 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.SQLInjectionMySQL - An error occurred checking a url for MySQL SQL Injection vulnerabilities java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.SQLInjectionMySQL.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 3560674 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.SQLInjectionMySQL - An error occurred checking a url for MySQL SQL Injection vulnerabilities java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.SQLInjectionMySQL.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 4434886 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SQLInjectionMySQL in 989.611s 4434886 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SQLInjectionHypersonic strength MEDIUM threshold MEDIUM 4439108 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.SQLInjectionHypersonic - An error occurred checking a url for Hypersonic SQL Injection vulnerabilities java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read(BufferedInputStream.java:254) at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78) at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106) at org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.java:1116) at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.readLine(MultiThreadedHttpConnectionManager.java:1413) at org.apache.commons.httpclient.HttpMethodBase.readStatusLine(Unknown Source) at org.zaproxy.zap.ZapGetMethod.readResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodBase.execute(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.SQLInjectionHypersonic.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 4593244 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SQLInjectionHypersonic in 158.358s 4593244 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SQLInjectionOracle strength MEDIUM threshold MEDIUM 4623382 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 4623382 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 4623387 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 4624348 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 4624351 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 4757979 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SQLInjectionOracle in 164.735s 4757979 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | SQLInjectionPostgresql strength MEDIUM threshold MEDIUM 4920009 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | SQLInjectionPostgresql in 162.03s 4920009 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | XpathInjectionPlugin strength MEDIUM threshold MEDIUM 5049724 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 5049725 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 5049730 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 5050457 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 5050459 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 5071985 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | XpathInjectionPlugin in 151.976s 5071985 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | XXEPlugin strength MEDIUM threshold MEDIUM 5076299 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | XXEPlugin in 4.314s 5076299 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | PaddingOraclePlugin strength MEDIUM threshold MEDIUM 5201418 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | PaddingOraclePlugin in 125.119s 5201418 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | ExpressionLanguageInjectionPlugin strength MEDIUM threshold MEDIUM 5293828 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${388855+515288}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/LFI/LFI-FalsePositives-GET/${388855+515288} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5307294 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${718702+562347}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/RFI/RFI-FalsePositives-GET/${718702+562347} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5340758 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${196365+436756}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${196365+436756} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5340759 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${975275+157687}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${975275+157687} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5340956 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${980969+838384}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${980969+838384} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5340957 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${694633+737826}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${694633+737826} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341157 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${956351+929362}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://${956351+929362} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341158 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${609989+316158}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${609989+316158} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341358 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${119687+944529}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${119687+944529} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341359 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${115736+638137}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://${115736+638137} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341559 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${977473+121363}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://${977473+121363} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341560 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${254585+155133}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://${254585+155133} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341760 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${103543+936752}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${103543+936752} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341761 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${901050+887112}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://${901050+887112} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341962 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${830224+768655}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${830224+768655} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5341963 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${417610+662249}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${417610+662249} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5342170 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${509056+912034}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-GET-302Redirect/${509056+912034} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5342565 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${290403+208505}] due to an I/O error org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 5343169 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${982525+613784}] due to an I/O error org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 5343370 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${595618+721686}] due to an I/O error org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 5343370 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${569256+256144}] due to an I/O error org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 5343571 [ZAP-ActiveScanner-1] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${641946+218453}] due to an I/O error org.apache.commons.httpclient.URIException: Invalid authority at org.apache.commons.httpclient.URI.parseAuthority(URI.java:2236) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:1978) at org.apache.commons.httpclient.URI.(URI.java:147) at org.apache.commons.httpclient.HttpMethodBase.getURI(Unknown Source) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) 5345179 [ZAP-ActiveScanner-0] ERROR org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin - Expression Language Injection vulnerability check failed for parameter [target] and payload [${262959+424611}] due to an I/O error org.apache.commons.httpclient.InvalidRedirectLocationException: Invalid redirect location: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-FalsePositives-GET/${262959+424611} at org.apache.commons.httpclient.HttpMethodDirector.processRedirectResponse(Unknown Source) at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) at org.parosproxy.paros.network.HttpSender.executeMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.runMethod(Unknown Source) at org.parosproxy.paros.network.HttpSender.send(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAuthenticated(Unknown Source) at org.parosproxy.paros.network.HttpSender.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.sendAndReceive(Unknown Source) at org.zaproxy.zap.extension.ascanrulesBeta.ExpressionLanguageInjectionPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scanVariant(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractAppParamPlugin.scan(Unknown Source) at org.parosproxy.paros.core.scanner.AbstractPlugin.run(Unknown Source) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.commons.httpclient.URIException: escaped absolute path not valid at org.apache.commons.httpclient.URI.setRawPath(URI.java:2837) at org.apache.commons.httpclient.URI.parseUriReference(URI.java:2023) at org.apache.commons.httpclient.URI.(URI.java:147) ... 17 more 5351202 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | ExpressionLanguageInjectionPlugin in 149.784s 5351202 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | BackupFileDisclosure strength MEDIUM threshold MEDIUM 5393409 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 5393409 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 5393415 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 5394264 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 5394267 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 5437573 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 5437573 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 5437583 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 5438332 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 5438334 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 5483669 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 5483669 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 5483674 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 5484604 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 5484607 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 5529811 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint start 5529811 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose start 5529820 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - dataFileCache commit start 5530766 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - checkpointClose end 5530768 [HSQLDB Timer @ba5d1a4] INFO hsqldb.db.HSQLDB379AF3DEBD.ENGINE - Checkpoint end 5536279 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | BackupFileDisclosure in 185.077s 5536279 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | IntegerOverflow strength MEDIUM threshold MEDIUM 5691319 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | IntegerOverflow in 155.04s 5691319 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | InsecureHTTPMethod strength MEDIUM threshold MEDIUM 5876484 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | InsecureHTTPMethod in 185.165s 5876484 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | HPP strength MEDIUM threshold MEDIUM 5938165 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrulesBeta.HPP - Caught java.lang.IllegalStateException unsupported protocol: '172.17.0.2' when accessing: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-POST-302Redirect/Case14-Redirect-RedirectMethod-FilenameContext-HttpInputRemoval-HttpURL-DefaultInvalidInput-AnyPathReq-Read.jsp?target=http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-POST-302Redirect/none892j3kd.txt%2526zap%253Dzaproxy The target may have replied with a poorly formed redirect due to our input. 5939006 [ZAP-ActiveScanner-1] INFO org.zaproxy.zap.extension.ascanrulesBeta.HPP - Caught java.net.UnknownHostException &zap=zaproxy when accessing: http://172.17.0.2:8080/wavsep/active/Unvalidated-Redirect/Redirect-Detection-Evaluation-POST-302Redirect/Case07-Redirect-RedirectMethod-FilenameContext-Unrestricted-HttpURL-DefaultEmptyInput-PartialPathReq-Read.jsp?target=%2526zap%253Dzaproxy The target may have replied with a poorly formed redirect due to our input. 5941587 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host/plugin http://172.17.0.2:8080 | HPP in 65.103s 5941588 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - start host http://172.17.0.2:8080 | UsernameEnumeration strength MEDIUM threshold MEDIUM 5941588 [Thread-22] INFO org.zaproxy.zap.extension.ascanrulesBeta.UsernameEnumeration - There does not appear to be any configured contexts using Form-based Authentication. Further attempts during the current scan will be skipped. 5941588 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - skipped plugin http://172.17.0.2:8080 | UsernameEnumeration in 0s 5941589 [Thread-22] INFO org.parosproxy.paros.core.scanner.HostProcess - completed host http://172.17.0.2:8080 in 5844.36s 5941589 [Thread-21] INFO org.parosproxy.paros.core.scanner.Scanner - scanner completed in 5844.382s