Re: [W3af-develop] A huge problems with Unicode support in w3af

2012-02-15 Thread Daniel Zulla
Hi, Why do you even want to convert bytestrings to unicode? Do you have some code / a example where those exceptions usually appear in the current w3af code? Regards, Daniel Am 15.02.2012 um 22:06 schrieb Javier Andalia: > Hello Daniel, > > On Wed, Feb 15, 2012 at 5:11 PM, Daniel Zulla > wro

Re: [W3af-develop] A huge problems with Unicode support in w3af

2012-02-15 Thread Javier Andalia
Hello Daniel, On Wed, Feb 15, 2012 at 5:11 PM, Daniel Zulla wrote: > What about switching over to Python3? > It solves the UnicodeDecodeException madness. Can you please be more specific? What exactly do you have in mind? Maybe I'm wrong, but the way I see it w3af would still receive/transmit e

Re: [W3af-develop] A huge problems with Unicode support in w3af

2012-02-15 Thread Daniel Zulla
What about switching over to Python3? It solves the UnicodeDecodeException madness. Cheers, Daniel Am 14.02.2012 um 12:24 schrieb Taras: > There is one more thing to say about Unicode. > Let's use decode(..., errors="ignore") for decoding strings into Unicode > ones because without this option

Re: [W3af-develop] A huge problems with Unicode support in w3af

2012-02-15 Thread Javier Andalia
Taras, Andres,, On Tue, Feb 14, 2012 at 8:57 AM, Andres Riancho wrote: > Javier, > >    How do the changes you commited yesterday affect the way we handle > encodings? Do you agree with Taras' errors=ignore? > IMO, the right fix for this is to figure out what are the input sources for the remain

Re: [W3af-develop] Filtering fuzzable requests in w3afCore

2012-02-15 Thread Taras
Andres, > What worries me is that you're only counting the number of URLs. > Are we sure that all the filtered URLs were indeed variants of a > previously found one AND that we already had X variants in the list > and the filtered one was the X+1? Something else... which discovery > plugins a

Re: [W3af-develop] Filtering fuzzable requests in w3afCore

2012-02-15 Thread Andres Riancho
Taras, On Wed, Feb 15, 2012 at 11:29 AM, Taras wrote: > Andres, > > it is interesting thing that after I uncomment this code I got: > > Before filtering... 146 > After filtering... 37 > > More then 50% of requests were filtered! And scan was faster!:) Sure, scan will be much faster because w

Re: [W3af-develop] Filtering fuzzable requests in w3afCore

2012-02-15 Thread Taras
Andres, it is interesting thing that after I uncomment this code I got: Before filtering... 146 After filtering... 37 More then 50% of requests were filtered! And scan was faster!:) About proper place for filtering. Imho, there are 2 place (with option like 'filterFuzzableRequests') for it: 1

Re: [W3af-develop] Filtering fuzzable requests in w3afCore

2012-02-15 Thread Andres Riancho
Taras, On Wed, Feb 15, 2012 at 10:05 AM, Taras wrote: > Hi, all! > > There is code in w3afCore._realStart() [0] to filter such requests as: >  - http://host.tld/?id=3739286 >  - http://host.tld/?id=3739285 > > The question is why this code is commented out in the trunk? According to [0] it l

Re: [W3af-develop] When do we plan next w3af release?

2012-02-15 Thread Andres Riancho
Taras, On Tue, Feb 14, 2012 at 9:10 AM, Taras wrote: > Andres, > > it looks like roadmap page [0] is little bit out of date. Yep, I've been a lazy project manager ;) > When do we plan next w3af release and what issues it will include? As you already know we don't have a strict schedule

[W3af-develop] Filtering fuzzable requests in w3afCore

2012-02-15 Thread Taras
Hi, all! There is code in w3afCore._realStart() [0] to filter such requests as: - http://host.tld/?id=3739286 - http://host.tld/?id=3739285 The question is why this code is commented out in the trunk? [0] http://w3af.svn.sourceforge.net/viewvc/w3af/trunk/core/controllers/w3afCore.py?view=ma