Re: [W3af-develop] OpenVAS + w3af

2009-10-18 Thread Andres Riancho
Kost, On Sun, Oct 18, 2009 at 8:24 PM, Vlatko Kosturjak wrote: > Andres Riancho wrote: - In a section of the code it reads: "See the preferences section for w3af options.", what are those options? How could I read them? >>> >>> Currently, you can only set profile (it's full_audit b

Re: [W3af-develop] OpenVAS + w3af

2009-10-18 Thread Vlatko Kosturjak
Andres Riancho wrote: >>> - In a section of the code it reads: "See the preferences section for >>> w3af options.", what are those options? How could I read them? >> Currently, you can only set profile (it's full_audit by default) and >> verboseness is automatically set if you set verbose globally

Re: [W3af-develop] new plugin - favicon identification implementation

2009-10-18 Thread Andres Riancho
Ulises, On Fri, Oct 16, 2009 at 1:39 PM, Ulises2k wrote: > Hi Vlatko & Andres, > > I would like to contribute with a MD5 > > phpMyAdmin-3.2.2.1 > > d037ef2f629a22ddadcf438e6be7a325  favicon.ico > > I am sure more people could colaborate to increasing the MD5 database Just added this to the DB, t

Re: [W3af-develop] OpenVAS + w3af

2009-10-18 Thread Andres Riancho
Kost, On Sun, Oct 18, 2009 at 7:08 PM, Vlatko Kosturjak wrote: > Andres Riancho wrote: >> >> - In a section of the code it reads: "See the preferences section for >> w3af options.", what are those options? How could I read them? > > Currently, you can only set profile (it's full_audit by default)

Re: [W3af-develop] OpenVAS + w3af

2009-10-18 Thread Vlatko Kosturjak
Andres Riancho wrote: > - In a section of the code it reads: "See the preferences section for > w3af options.", what are those options? How could I read them? Currently, you can only set profile (it's full_audit by default) and verboseness is automatically set if you set verbose globally in OpenV

Re: [W3af-develop] OpenVAS + w3af

2009-10-18 Thread Andres Riancho
Kost, On Sun, Oct 18, 2009 at 5:42 PM, Vlatko Kosturjak wrote: >>    You're welcome. As we talk about OpenVAS, maybe it's good time and >>    place to ask about it. My plan is to write OpenVAS NVT (NASL) script >>    which would run w3af automatically if http(s) port(s) is found >>    (similar to

[W3af-develop] OpenVAS + w3af

2009-10-18 Thread Vlatko Kosturjak
> You're welcome. As we talk about OpenVAS, maybe it's good time and > place to ask about it. My plan is to write OpenVAS NVT (NASL) script > which would run w3af automatically if http(s) port(s) is found > (similar to nikto NASL plugin). I think this mailing list is best > plac

Re: [W3af-develop] Introduction

2009-10-18 Thread Andres Riancho
Olle, On Wed, Mar 11, 2009 at 11:55 AM, olle wrote: > Hi all! > > I am a security professional working with, among other things, large scale > vulnerability assessments. > While evaluating w3af for use in automated scanning of discovered webservers > I found a couple of bugs. > > As Andres got

Re: [W3af-develop] New plugin : xssedDotCom

2009-10-18 Thread Andres Riancho
List, I'm a little bit flooded with work (at least for today). Could anyone please review this plugin? Thanks! Cheers, On Sun, Oct 18, 2009 at 7:38 AM, shatter wrote: > Hello everybody, > > I'm new on this mailing-list so i don't know exactly how it's work to > publish a new plugin... > > I