Re: [W3af-develop] NTLM Authentication

2009-06-11 Thread mOses
Andres, On Jun 11, 2009, at 10:13 PM, Andres Riancho wrote: > mOses, > > On Wed, Jun 10, 2009 at 11:07 PM, > mOses wrote: >> Andres, >>> >> >> Andres, >> I am not familiar with patch and diff, I am not really a >> developer, this is >> honestly one of the first things i've done publicly. Any

Re: [W3af-develop] NTLM Authentication

2009-06-11 Thread Andres Riancho
mOses, On Wed, Jun 10, 2009 at 11:07 PM, mOses wrote: > Andres, > > On Jun 10, 2009, at 8:59 AM, Andres Riancho wrote: > >> m0ses, >> >> On Wed, Jun 10, 2009 at 12:09 AM, mOses >> wrote: >>> >>> Andres and team, >>> >>> >>> I have started work on this and I believe I have something I'd like t

Re: [W3af-develop] Directory/File Bruteforcing

2009-06-11 Thread Achim Hoffmann
Hi Andres, Jon, On Thu, 11 Jun 2009, jrose wrote: !! Hey Andres, !! I was thinking just a small or medium sized list, using an external file. a "small" file (~60.000) is provided by jbruzz. dirbuster (with which this thread started) has huge files (>2^30). >  If a user wants to !! supply their

Re: [W3af-develop] Directory/File Bruteforcing

2009-06-11 Thread jrose
Hey Andres, I was thinking just a small or medium sized list, using an external file. If a user wants to supply their own wordlist, such as the dirbuster list, its up to them. This would keep the download size manageable with the flexibility to use any list you want. I'll take a shot

Re: [W3af-develop] Directory/File Bruteforcing

2009-06-11 Thread Andres Riancho
Jon, On Thu, Jun 11, 2009 at 4:56 PM, jrose wrote: > Hey Andres, > I was thinking just a small or medium sized list, using an external file. Yes, I meant that also, the directory list should be an external txt file. It shouldn't be a python list inside the code. By convention, if the plugin is ca

Re: [W3af-develop] Directory/File Bruteforcing

2009-06-11 Thread Andres Riancho
Jon, On Thu, Jun 11, 2009 at 2:21 PM, jrose wrote: > Has anyone written a plugin to bruteforce directories or file names > similar to Dirbuster by OWASP? I haven't, and I don't know of anyone that has... but there have been people interested in doing it. I think that the reason that they haven't

[W3af-develop] Directory/File Bruteforcing

2009-06-11 Thread jrose
Has anyone written a plugin to bruteforce directories or file names similar to Dirbuster by OWASP? - Jon -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensing option that enables

Re: [W3af-develop] NTLM Authentication

2009-06-11 Thread Andres Riancho
List, On Wed, Jun 10, 2009 at 11:07 PM, mOses wrote: > Andres, > > On Jun 10, 2009, at 8:59 AM, Andres Riancho wrote: > >> m0ses, >> >> On Wed, Jun 10, 2009 at 12:09 AM, mOses >> wrote: >>> >>> Andres and team, >>> >>> >>> I have started work on this and I believe I have something I'd like to