I've been tearing my hair out for the past few days about this.
I have an EC2 instance spun up with Ubuntu on it and have set up my AWS instance so that all traffic accessing port 8088 and 8090 are allowed in. Going off of this link, I thought it would be easy to just use the GUI with my browser, since I don't have access to the GUI on my EC2 instance. So I run this command (from the tutorial):
docker run -u zap -p 8088:8088 -p 8090:8090 -i owasp/zap2docker-stable zap-webswing.sh
It starts up without saying anything. But when I go to my public EC2 IP with port
8088, I just get an error saying "This site can't be reached." I've successfully set up jenkins on this EC2 instance on a different port, and that is accessible.. so I'm unsure why I can't access this port when trying to run OWASP/ZAP.
When I run
sudo iptables -t nat -L -n I get the following:
Chain PREROUTING (policy ACCEPT) target prot opt source destination DOCKER all -- 0.0.0.0/0 0.0.0.0/0 ADDRTYPE match dst-type LOCAL Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination DOCKER all -- 0.0.0.0/0 !127.0.0.0/8 ADDRTYPE match dst-type LOCAL Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- 172.17.0.0/16 0.0.0.0/0 MASQUERADE tcp -- 172.17.0.2 172.17.0.2 tcp dpt:8088 Chain DOCKER (2 references) target prot opt source destination RETURN all -- 0.0.0.0/0 0.0.0.0/0 DNAT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:8088 to:172.17.0.2:8088
I'm not great with this sort of thing.. so I have no clue what's really going on or what I need to change? But is there anyway I can start OWASP/ZAP and have it work when I go to my public IP and the port I specified?