• Application Security Discussions

  Proxying ZAP (localhost) through Firefox

  Posted by Christophe on October 1, 2021 at 5:10 pm

  I found myself needing to repeat this step a few times and wasting time trying to find it, so here it goes:

  Step 1:

  Firefox Preferences -> Scroll all the way down to “Network Settings” and click on Settings… -> Select “Manual proxy configuration”

  Set the HTTP Proxy field to 127.0.0.1 and the Port to 8080. Select “Also use this proxy for FTP and HTTPS.”

  Save.

  Step 2:

  In ZAP, click on Tools (in the menu) -> Options… -> Dynamic SSL Certificates -> Generate -> Save -> Pick a location to save

  Firefox Preferences -> search (top right) for security -> click on View Certificates -> Make sure you’re in the “Authorities” tab -> Import -> Navigate to where you saved the certificate file -> Check the box that says you trust this CA to identify websites -> Click OK

  Step 3:

  Open a new Firefox tab and type about:config

  Click “Accept the Risk and Continue”

  Another search bar will appear in the Firefox window. Type network.proxy.allow_hijacking_localhost

  Double click the false to set it to true.

  Once you’re done proxying through ZAP, make sure you undo step #1 and step #2.

  Christophe replied 1 year, 8 months ago 1 Member · 0 Replies
• 0 Replies

Log In to Reply