Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-23 Thread Taras
Hi! Thanks for help! Solved by installing libxslt-devel and libxml2-devel packages! :) В Пн, 21/09/2015 в 17:18 +0100, Owen Tuz пишет: > Hi Taras, > > Sorry for the slow reply. I'm a bit lost, to be honest, not having > built this on Fedora myself lately. > > One last thing to try, however: it

Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-21 Thread Owen Tuz
Hi Taras, Sorry for the slow reply. I'm a bit lost, to be honest, not having built this on Fedora myself lately. One last thing to try, however: it looks like Fedora has both a libxml-devel and a libxml2-devel package. Could you try installing libxml2-devel as well, since I see you have the main

Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-18 Thread Taras
Hi, Owen! Sorry for delay. В Ср, 16/09/2015 в 11:34 +0100, Owen Tuz пишет: > Hi Taras, > > Sorry - I mistook it for 'yum' output. Not awake. > Any change if you try: > > export STATIC_DEPS=true > > ...before running? As per: > https://stackoverflow.com/questions/27084580/python-error-when-ins

Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-16 Thread Taras
Owen, libxml-devel is already installed. Please, see rpm output below. В Ср, 16/09/2015 в 10:26 +0100, Owen Tuz пишет: > Try installing libxml-devel and re-run? Looks like pip is trying to > build but needs the header files, which are usually in the -devel > package. > Cheers, > Owen > On 16 Sep 20

Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-16 Thread Owen Tuz
Hi Taras, Sorry - I mistook it for 'yum' output. Not awake. Any change if you try: export STATIC_DEPS=true ...before running? As per: https://stackoverflow.com/questions/27084580/python-error-when-installing-packages If you could attach the dependency install script, that would also be helpful.

Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-16 Thread Owen Tuz
Try installing libxml-devel and re-run? Looks like pip is trying to build but needs the header files, which are usually in the -devel package. Cheers, Owen On 16 Sep 2015 10:05 am, "Taras" wrote: > Hello! > > Trying to run it on Fedora 22 inside virtualenv and while installing > all deps see su

Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-16 Thread Taras
Hello! Trying to run it on Fedora 22 inside virtualenv and while installing all deps see such error: /tmp/pip-build-mBBs62/lxml/src/lxml/includes/etree_defs.h:14:31: fatal error: libxml/xmlversion.h: No such file or directory compilation terminated. error: command 'gcc' faile

Re: [W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-10 Thread Taras
Andres, great job! :-) I will try to test it. В Чт, 10/09/2015 в 12:16 -0300, Andres Riancho пишет: > List, > > I'm glad to announce that w3af can now detect 100% of the XSS > vulnerabilities in WAVSEP! > > As part of the "Improve w3af's score for WAVSEP XSS by at least > 20%" [0] task, I

[W3af-develop] Cross-Site Scripting context detection engine rewrite

2015-09-10 Thread Andres Riancho
List, I'm glad to announce that w3af can now detect 100% of the XSS vulnerabilities in WAVSEP! As part of the "Improve w3af's score for WAVSEP XSS by at least 20%" [0] task, I completely rewrote (twice) the context detection engine originally developed by Taras. The new engine has the fol