Re: [W3af-develop] [Fwd: [WEB SECURITY] [new tool announcement] host-extract]

2011-04-07 Thread Taras
Totally agree! I create a ticket in the trac [0] for it. [0] https://sourceforge.net/apps/trac/w3af/ticket/162539 On Wed, 2011-04-06 at 13:04 +0200, Andres Riancho wrote: > Taras, > > On Tue, Mar 15, 2011 at 11:14 PM, Taras wrote: > > Hi, all! > > > > What do you think about making some kind

Re: [W3af-develop] [Fwd: [WEB SECURITY] [new tool announcement] host-extract]

2011-04-06 Thread Andres Riancho
Taras, On Tue, Mar 15, 2011 at 11:14 PM, Taras wrote: > Hi, all! > > What do you think about making some kind of port of host-extract tool > described below in w3af? It can be a grep plugin. We already have > privateIP grep plugin but it is useful in some cases to extract also > hosts/IPs which a

Re: [W3af-develop] [Fwd: [WEB SECURITY] [new tool announcement] host-extract]

2011-03-19 Thread Achim Hoffmann
Hi all, I'd also like to have a simple "grep"-plugin like (and including) host-extract. According the protocol part, keep in mind that some system support much more than just (ht|f)tps? . You also may find (ldap|smb|smtp|ssh):// and many, many more. How about using a regex to identify them: ([a-

Re: [W3af-develop] [Fwd: [WEB SECURITY] [new tool announcement] host-extract]

2011-03-19 Thread Raul Siles
Andrés, Practice mames perfect, but at first sight I suggest to look at the last dot in the example, that won't be on IP addresses. Also, looking at protocols before the IP or hostname might help. E.g. http:// or ftp://... For http, looking at the expected characters after the IP or hostname may a

Re: [W3af-develop] [Fwd: [WEB SECURITY] [new tool announcement] host-extract]

2011-03-17 Thread Andres Riancho
Taras, On Tue, Mar 15, 2011 at 7:14 PM, Taras wrote: > Hi, all! > > What do you think about making some kind of port of host-extract tool > described below in w3af? It can be a grep plugin. We already have > privateIP grep plugin but it is useful in some cases to extract also > hosts/IPs which ar

[W3af-develop] [Fwd: [WEB SECURITY] [new tool announcement] host-extract]

2011-03-15 Thread Taras
Hi, all! What do you think about making some kind of port of host-extract tool described below in w3af? It can be a grep plugin. We already have privateIP grep plugin but it is useful in some cases to extract also hosts/IPs which are different than target (not only private IPs). Forward