Re: [W3af-develop] W3AF Proxy tool - dev status

2009-06-09 Thread Andres Riancho
Taras,

On Tue, Jun 9, 2009 at 1:25 AM, Tarasta...@securityaudit.ru wrote:
 Andres,

   * More convenient History navigation and presentation - in progress 
  (Let's moving from hacker's search with SQL syntax to more convenient 
  search by URL in main text entry + hidden advanced options bar for options 
  (e.g code = 404 and id5) like in Google.)

 I'm trying to understand this, as far as I can see without reading the
 code, the advanced part will be like a wizard for the user to create a
 new search string, right?

 1. There will be no any wizards =). See screenshot [0]
 2. By default advanced search options will be hidden and will showed after 
 Advanced button will be clicked
 3. Main search entry will ne search only by URL - because it is most common 
 task

 [0] http://picasaweb.google.ru/lh/photo/lvLn5jKcrQyG-FzibaH8JA?feat=directlink

Is this feature 100% completed?

 --
 Taras
 
 Software is like sex: it's better when it's free. - Linus Torvalds




-- 
Andrés Riancho
Founder, Bonsai - Information Security
http://www.bonsai-sec.com/
http://w3af.sf.net/

--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
___
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop


Re: [W3af-develop] W3AF Proxy tool - dev status

2009-06-08 Thread Andres Riancho
Taras,

On Mon, Jun 8, 2009 at 5:36 PM, Tarasta...@securityaudit.ru wrote:

 Hello, list!

 I decided to inform you about current status of proxy tool improvement:

Good,

  * Table presentation and editing of request/response data (headers) and so 
 on - done
  * Table presentation of request params  - in TODO (simple task)

Ok,

  * Tabbed request/response GUI - done

Seen it, looks and works great, except from some cases where the
response has long lines, and the window grows *really* wide in order
to show the line. I think that there is a problem with the
ScrolledWindow configuration.

  * More convenient History navigation and presentation - in progress (Let's 
 moving from hacker's search with SQL syntax to more convenient search by URL 
 in main text entry + hidden advanced options bar for options (e.g code = 
 404 and id5) like in Google.)

I'm trying to understand this, as far as I can see without reading the
code, the advanced part will be like a wizard for the user to create a
new search string, right?

Also related, please see this [0], which is a bug fix that I
implemented a couple of days ago, and is related with the type of data
of the primary keys, and the way the information is stored. Maybe it's
a good idea that you merge this into your branch before continuing to
work.

[0] 
http://w3af.svn.sourceforge.net/viewvc/w3af/trunk/core/data/db/persist.py?revision=2898view=markup

  * Audit plugins integration for manual checks - in TODO
  * HEX editor  - in TODO

Ok,

  * Options - separate tab - done

That looks awful, but it's not your fault, it's the framework's fault.
I'll work on the way that the options are displayed (I also talked
with Achim about this).

  * More keyborad friendly navigation and common GUI improvements - done

Cool,

  * Andres also recently added syntax highlight tab for response HTML data

Yes, but this needs some work also, adding to my never ending TODO list ;)

 Any questions or comments? =)

Not really, you are doing a great job and I know that at the end we'll
have a perfect local proxy =) Thanks!

Anyone else has comments? To be able to test this branch, you have to
download the taras branch like this:

svn co https://w3af.svn.sourceforge.net/svnroot/w3af/branches/taras w3af-taras

And then just cd w3af-taras , and ./w3af_gui

Cheers,

 --
 Taras
 
 Software is like sex: it's better when it's free. - Linus Torvalds

 --
 Crystal Reports - New Free Runtime and 30 Day Trial
 Check out the new simplified licensing option that enables unlimited
 royalty-free distribution of the report engine for externally facing
 server and web deployment.
 http://p.sf.net/sfu/businessobjects
 ___
 W3af-develop mailing list
 W3af-develop@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/w3af-develop





-- 
Andrés Riancho
Founder, Bonsai - Information Security
http://www.bonsai-sec.com/
http://w3af.sf.net/

--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
___
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop


Re: [W3af-develop] W3AF Proxy tool - dev status

2009-06-08 Thread Taras
Andres, 

   * More convenient History navigation and presentation - in progress (Let's 
  moving from hacker's search with SQL syntax to more convenient search by 
  URL in main text entry + hidden advanced options bar for options (e.g code 
  = 404 and id5) like in Google.)
 
 I'm trying to understand this, as far as I can see without reading the
 code, the advanced part will be like a wizard for the user to create a
 new search string, right?

1. There will be no any wizards =). See screenshot [0]
2. By default advanced search options will be hidden and will showed after 
Advanced button will be clicked
3. Main search entry will ne search only by URL - because it is most common task

[0] http://picasaweb.google.ru/lh/photo/lvLn5jKcrQyG-FzibaH8JA?feat=directlink

-- 
Taras

Software is like sex: it's better when it's free. - Linus Torvalds


pgpsXZzeeFTaW.pgp
Description: PGP signature
--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects___
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop