Break

When testing a site there are many times when it is useful to be able to change requests 'on the fly' - you can do this using the 'Break' tool.

The following form uses HTML5 to limit the values to between 1 and 100:

Enter a number from 1 to 100:

When you click the 'break' tool you will see that the button changes to and this means that all requests to and from your browser will be intercepted by ZAP. When you then submit the form (or navigate to another page) you will be shown a dialog that contains the request that has been sent by the browser. You can change any part of the request before it is submitted to the site, including the values set via the form, and then select either:

• Step: to submit this request and then break on the next request or response
• Continue: to submit this request and turn the 'break' tool off
• Drop: to prevent the request from being sent to the site or the response from being received by the browser

Break works with both HTTP and WebSocket messages.