Tool Bottom Drawer - zaproxy/zap-hud GitHub Wiki
Bottom-Drawer
The bottom-drawer is a panel inserted at the bottom of webpages that logs different events happening during navigation in a page.
As for now, the following tabs appear in the bottom-drawer:
- History
- Storage
Furthermore, using pamplemousse/zap-hud's bottom-drawer branch, the following tab is added:
- DOMEvents
History
List of HTTP interactions (request verb, URL endpoint and related response status) initiated by the page, from the most recent to the oldest.
Storage
Stream of interactions with Storage happening on a page.
Needs the bundled tracker to be in zap-hud's files.
DOMEvents
Stream of events happening in a webpage.
Needs the bundled tracker to be in zap-hud's files.
Dependencies
For the DOMEvents and Storage tabs, "the tracker" is required.
The presence of <<ZAP_SHARED_SECRET>>
is checked by the HUD to ensure that the received message is trustworthy.
This <<ZAP_SHARED_SECRET>>
is replaced by the actual shared secret during the injection of the script into the webpage (see HudAPI.java).