Re: [W3af-develop] Requirements for ticketing system

2011-09-12 Thread ox...@oxdef.info
Hi! > A couple of weeks ago we were talking with Javier about the > requirements we need for a Trac replacement and this is what we got: > > - API for creation/modification of tickets > - Custom fields for tickets > - Custom reports (like Trac allows with "SQL" language) > - Integrated with S

[W3af-develop] Announcement: web UI and other new features in w3af

2011-10-17 Thread ox...@oxdef.info
Hi all! I want to tell you some news :) Here in Yandex [0] we (I and Dmitriy V. Simonov ) are developing some new features for w3af to make it more usable for enterprise. Among them: * web UI with multi-user support and task scheduling [1] * auth-plugins [2] which should make much simpler to

Re: [W3af-develop] [W3af-svn-notify] SF.net SVN: w3af:[4444] branches/auth-plugins

2011-10-18 Thread ox...@oxdef.info
Andres, > I would add something similar to this: > > for plugin in self._plugins['auth']: > plugin.userLogin( self.uriOpener ) > > To the audit section of w3afCore, but in that section, instead of > those two lines I would do something like

[W3af-develop] Batch mode for w3af_console?

2011-10-18 Thread ox...@oxdef.info
Hi all! As I remember we has already discussed this topic but...the problem is still unresolved - how to run w3af in batch mode with specified profile like: w3af_console -p prod_scan.pw3af ? We need it in web UI. If we run w3af_console with script then settings from profile are not applied.

[W3af-develop] Generic auth plugin

2011-10-19 Thread ox...@oxdef.info
I just has commited generic auth plugin [0]. It can be used in most cases with simple auth form (username/password). Will be glad to read feedback from you! [0] https://w3af.svn.sourceforge.net/svnroot/w3af/branches/auth-plugins/plugins/auth/generic.py [1] https://w3af.svn.sourceforge.net/svn

Re: [W3af-develop] Batch mode for w3af_console?

2011-10-20 Thread ox...@oxdef.info
Andres, > > Hi all! > > > > Currently profiles works like predefined options for scan. When user > > launches GTK or console UI with -p profile_name w3af loads these > > settings and waits for commands from him. > > There is also opportunity to run w3af in batch mode but without profile > > support