diff --git a/src/main/resources/lessons/httpproxies/documentation/3browsersetup.adoc b/src/main/resources/lessons/httpproxies/documentation/3browsersetup.adoc index 4757ccb90..e679d3a85 100644 --- a/src/main/resources/lessons/httpproxies/documentation/3browsersetup.adoc +++ b/src/main/resources/lessons/httpproxies/documentation/3browsersetup.adoc @@ -1,24 +1,7 @@ ==== Setting up browser -If you use the latest ZAP version (>= 2.8.0), you only need to start ZAP and click the browser button to be able to proxy, see image below: - -{nbsp} + - -image::images/zap-browser-button.png[ZAP Start,style="lesson-image"] - -{nbsp} + - -In the browser type: http://localhost:8080/WebGoat, you should see WebGoat and the OWASP ZAP Heads On Display (if you use OWASP ZAP as the proxy): - -{nbsp} + - -image::images/loginscreen.png[Browser with HUD,style="lesson-image"] - -{nbsp} + - -You might notice that this is the Dutch login screen. The browser determines the language settings. For some pages, there will be some local translations. You can contribute to WebGoat and add more for your preferred language. You can disable the Heads On Display by clicking on the highlighted button. You can learn about the OWASP ZAP HUD on their website. For now, we recommend disabling it as it kind of blocks the menu items. - -You should see the following in OWASP ZAP on the history panel: +As the ZAP setup for proxying localhost varies based on your browser, we recommend following the instructions at: https://www.zaproxy.org/docs/desktop/start/proxies/ +After you setup the proxy, you should see the following in OWASP ZAP on the history panel: {nbsp} + diff --git a/src/main/resources/lessons/httpproxies/documentation/5configurefilterandbreakpoints.adoc b/src/main/resources/lessons/httpproxies/documentation/5configurefilterandbreakpoints.adoc index c642561bb..413b0c5bb 100644 --- a/src/main/resources/lessons/httpproxies/documentation/5configurefilterandbreakpoints.adoc +++ b/src/main/resources/lessons/httpproxies/documentation/5configurefilterandbreakpoints.adoc @@ -17,7 +17,7 @@ And in the `URL Exc Regex` box type: [source] ---- -.*lesson.*.mvc +.*lesson.*.mvc.* ---- Click 'Apply to close the window, and ZAP will now no longer show internal WebGoat requests. diff --git a/src/main/resources/lessons/httpproxies/images/loginscreen.png b/src/main/resources/lessons/httpproxies/images/loginscreen.png deleted file mode 100644 index cf4a9365b..000000000 Binary files a/src/main/resources/lessons/httpproxies/images/loginscreen.png and /dev/null differ diff --git a/src/main/resources/lessons/httpproxies/images/zap-browser-button.png b/src/main/resources/lessons/httpproxies/images/zap-browser-button.png deleted file mode 100644 index 8537a7202..000000000 Binary files a/src/main/resources/lessons/httpproxies/images/zap-browser-button.png and /dev/null differ