Re: [W3af-develop] [Task #150826] slash and no slash

2009-03-13 Thread Andres Riancho
Nicolas, On Fri, Mar 13, 2009 at 6:56 PM, Nicolas Rotta wrote: > List, >    I've been working on this plug-in and it is now ready for your > testing and comments. Thank you very much for your contribution, the plugin looks *really* nice. Here are some comments: - The plugin worked, but

[W3af-develop] [Task #150826] slash and no slash

2009-03-13 Thread Nicolas Rotta
List, I've been working on this plug-in and it is now ready for your testing and comments. It is my first contribution to the project, so don't be so harsh on me. Please, pay special attention to the relative_distance function usage. Cheers, Nicolas Rotta ''' slash.py Copyright 2006 Andres

Re: [W3af-develop] Introduction

2009-03-13 Thread olle
On Fri, Mar 13, 2009 at 09:40:41AM -0200, Andres Riancho wrote: > > This is the output of "grep Apache output.txt | grep 1.3.23", right? > I'm missing some information, that could help me debug this issue. > Maybe you could send us "grep Apache output.txt" ? That would give me > some more info. Th

Re: [W3af-develop] Introduction

2009-03-13 Thread Andres Riancho
Olle, On Fri, Mar 13, 2009 at 6:42 AM, olle wrote: > On Wed, Mar 11, 2009 at 02:10:20PM -0200, Andres Riancho wrote: >> >> > The webSpider module gets confused by Apache error pages and gets stuck in >> > a loop as the log shows: > >> > New URL found by webSpider plugin: >> > http://10.80.2.1/s

Re: [W3af-develop] Bug with redirects and vhost discovery

2009-03-13 Thread Andres Riancho
Olle, Achim, On Fri, Mar 13, 2009 at 8:38 AM, Achim Hoffmann wrote: > !! > When a server redirects requests with a 302, vhost discovery gets > confused. > !! > !! So the bug is basically that w3af follows 302 redirects off-site. > !! This could potentially be problematic in other cases as well.

Re: [W3af-develop] Bug with redirects and vhost discovery

2009-03-13 Thread Achim Hoffmann
!! > When a server redirects requests with a 302, vhost discovery gets confused. !! !! So the bug is basically that w3af follows 302 redirects off-site. !! This could potentially be problematic in other cases as well. !! !! This bug also means that you get false positives for vhost discovery when

Re: [W3af-develop] Bug with redirects and vhost discovery

2009-03-13 Thread olle
On Fri, Mar 13, 2009 at 10:21:35AM +0100, olle wrote: > > When a server redirects requests with a 302, vhost discovery gets confused. So the bug is basically that w3af follows 302 redirects off-site. This could potentially be problematic in other cases as well. This bug also means that you get f

[W3af-develop] Bug with redirects and vhost discovery

2009-03-13 Thread olle
Dammit, this assignment I'm doing just keeps piling up the bugs: When a server redirects requests with a 302, vhost discovery gets confused. Example: GET https://target/ HTTP/1.1 Host: iDoNotExistPleaseGoAwayNowOrDieRhYC HTTP/1.1 302 Moved Temporarily content-length: 0 expires: Thu, 01 Jan 1970

Re: [W3af-develop] Introduction

2009-03-13 Thread olle
On Wed, Mar 11, 2009 at 02:10:20PM -0200, Andres Riancho wrote: > > > The webSpider module gets confused by Apache error pages and gets stuck in > > a loop as the log shows: > > New URL found by webSpider plugin: > > http://10.80.2.1/support/admin/Apache/Apache/Apache/Apache/Apache/1.3.23 > > >