Re: [W3af-users] Authentication Parameters

2013-03-07 Thread Andres Riancho
Ali, On Mon, Feb 25, 2013 at 12:31 PM, Ali Khalfan wrote: > I'm not understanding the authentication parameters in the generic tab. > What does check_url and check_string stand for ? I recommend you read through the plugin source code: https://github.com/andresriancho/w3af/blob/threading2/

Re: [W3af-users] W3AF method

2013-03-07 Thread Andres Riancho
Disclaimer so we don't get sued: As *any other automated tool* w3af is dangerous to run against a production environment. Any plugin can destroy your system, you should use it only in test environments. With that said, w3af's plugin try not to break anything. But, imagine the worse case: w3af sca

Re: [W3af-users] Best Linux Distro for W3af

2013-03-07 Thread Andres Riancho
Adri, While there's no specific distribution I can recommend where w3af works better, I use Ubuntu 12.04 and test w3af (extensively) in that platform. The bug you're mentioning is NOT because of CentOS or CentOS' python installation, it's because of w3af's source code. I recommend you help us