Re: [W3af-users] Need some advice on w3af intallation and startingup

2012-08-02 Thread Andres Riancho
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/02/2012 05:11 PM, si do re wrote:> > Dear Andres, > > I am honoured by your reply. hehe, ok :) That's a little bit too much but I'll take it ;) > Well, I have python 2.6.6 already installed before installing > w3af_1.0_stable_setup.exe It sh

Re: [W3af-users] Need some advice on w3af intallation and startingup

2012-08-02 Thread si do re
Dear Andres, I am honoured by your reply. Well, I have python 2.6.6 already installed before installing w3af_1.0_stable_setup.exe If I understood you correctly from your comment : -- "> > -w3af_1.0_stable_setup.exe > > This EXE should have everything inside it, all the deps,

Re: [W3af-users] svn_sort_compare_items_as_paths on ubuntu 11.10

2012-08-02 Thread Dave Howe
Thanks for that Andres. I can try from the svn trunk, although I try to avoid the tinderbox unless it fixes something, in this case it could do, so I will try it. It will be nice to be able to dodge the whole of the virtual environment question and build onto the native version - although it would

Re: [W3af-users] [W3af-develop] Regular expression DoS

2012-08-02 Thread Andres Riancho
Got it :) Thanks to Shay Chen for pointing me in the right direction. http://www.youtube.com/watch?v=3k_eJ1bcCro&feature=plcp Now all I need to do is install the puzzlemall in the latest moth. On Thu, Aug 2, 2012 at 11:02 AM, Achim Hoffmann wrote: > Note that the OWASP page [1] (see below) is ju

Re: [W3af-users] [W3af-develop] Regular expression DoS

2012-08-02 Thread Achim Hoffmann
Note that the OWASP page [1] (see below) is just an excerpt of Adar's original paper. http://www.checkmarx.com/white_papers/redos-regular-expression-denial-of-service/ Andrés, I don't have a solution for python, but you can use the regex and patterns as described in https://github.com/E

Re: [W3af-users] Regular expression DoS

2012-08-02 Thread Andres Riancho
Carlos, On Wed, Aug 1, 2012 at 10:04 PM, Carlos Pantelides wrote: > Andres: > > I'm in the oven, I'll try to read the links and make something up. > Meanwhile, what are you asking for is a language or library that suffers for > this kind of vulnerability, aren't you? > > I did not try the javascr

Re: [W3af-users] Need some advice on w3af intallation and startingup

2012-08-02 Thread Andres Riancho
Firasov, On Tue, Jul 24, 2012 at 10:58 AM, Firasov si do re wrote: > I'm new to w3af, and I could use a little help installing and starting it :) > > Actually I've installed it, but I have problems starting it, this led me to > think that maybe I have done something wrong installing it.. > > > >

Re: [W3af-users] how do i install w3af? wheres the manual?

2012-08-02 Thread Andres Riancho
http://lmgtfy.com/?q=w3af+manual On Wed, Jul 18, 2012 at 11:33 AM, Kevin Rayford wrote: > i extracted it. looking thru all the folders. no read me. no manual... > -- > Live Security Virtual Conference > Exclusive live eve

Re: [W3af-users] svn_sort_compare_items_as_paths on ubuntu 11.10

2012-08-02 Thread Andres Riancho
Dave, Please read inline, On Thu, Aug 2, 2012 at 8:51 AM, Dave Howe wrote: > Hi All, > > I guess this has come up before given the message from the code when > I run it, but > > I am attempting to set up w3af on ubuntu 11.10 (need to keep that > for now as upgrading breaks OpenVAS, a

[W3af-users] how do i install w3af? wheres the manual?

2012-08-02 Thread Kevin Rayford
i extracted it. looking thru all the folders. no read me. no manual... -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers

[W3af-users] Need some advice on w3af intallation and startingup

2012-08-02 Thread Firasov si do re
I'm new to w3af, and I could use a little help installing and starting it :) Actually I've installed it, but I have problems starting it, this led me to think that maybe I have done something wrong installing it.. I am using a windows vista.. Well, the readMe file was not so perfect, so I cou

Re: [W3af-users] [W3af-develop] Regular expression DoS

2012-08-02 Thread Achim Hoffmann
Am 01.08.2012 20:40, schrieb Andres Riancho: > Ping! Someone can help me out? may be this helps: https://github.com/EnDe/ReDoS not for python, but you get at least some regex and patterns ;-) Achim > > On Thu, Jul 26, 2012 at 1:59 PM, Andres Riancho > wrote: >> Lists, >> >> I'm tr

[W3af-users] svn_sort_compare_items_as_paths on ubuntu 11.10

2012-08-02 Thread Dave Howe
Hi All, I guess this has come up before given the message from the code when I run it, but I am attempting to set up w3af on ubuntu 11.10 (need to keep that for now as upgrading breaks OpenVAS, and downgrading breaks other stuff) I have therefore used virtualenv to set up a python 2.6