Hello,
I have also tried to export the cookie from firefox using various addons but it
didn't worked for me, w3af said they were not in the right format.
My technique is a bit un-orthodox but it works:
I have used a php script like:
http://www.electrictoolbox.com/php-curl-cookies/
which saves
Ok, thanks Andres.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Tuesday, April 3, 2012 8:26 PM
Subject: Re: [W3af-users] can't import cookies file
Adi,
Sorry mate, can't solve every issue you hav
Andres,
Then why doesn't it worked for me? Tried again, multiple times.
I've attached the file.
Best regards,
Adrian
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Tuesday, April 3, 2012 2:58 PM
Subj
Hello,
I've tried to import a cookies file in http settings according to:
http://www.shaunzinck.com/post/5286243475/easy-bake-cookies-in-w3af
and
http://ibrokethedam.blogspot.com/2011/04/loading-cookie-jar-files-in-w3af.html
and i got an error saying invalid format.
Can you tell me what shoul
unning: $COMMAND"
./w3af_console -n -s $W3AF_SCRIPT
mv $OUTFILE* $DIR
cd $DIR # Back to working folder
strings $REPORT_HTTP > $REPORT_HTTP.tmp # Removing binary garbage
mv $REPORT_HTTP.tmp $REPORT_HTTP
echo
echo "[*] Done!]"
What do you think? Is it necessary to run w3af a
Hello,
I get this error in my report file:
ri Mar 16 03:13:21 2012 - error] Error in grep plugin, "motw" raised the
exception: can't start new thread. Please report this bug to the
w3af sourceforge project page [
https://sourceforge.net/apps/trac/w3af/newticket ]
Exception: Traceback (mos
Yeah, imagined...thanks Andres.
I will tell also to the owtf author about this, perhaps he will want to change
the defaults.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Tuesday, March 13, 2012 5:25 PM
S
ework was ran from inside owtf , so i guess pretty much explains the
results, right?
Regards,
A.
From: Adi Mutu
To: Andres Riancho
Cc: "w3af-users@lists.sourceforge.net"
Sent: Monday, March 12, 2012 8:59 PM
Subject: Re: [W3af-users] html output
Andres,
Thanks for the help, but didn't had any time to work on this lately.
When i'll find some free time , i'll retry and if the problem will persist
i'll get back to you.
Regards,
A.
From: Andres Riancho
To: Adi Mu
.
Anyway, i will have to redo the scan. I'll also redo the crawling and after
importing the result i will also use the auth plugin, because i've missed that
fist time!
____
From: Adi Mutu
To: Andres Riancho
Cc: "w3af-users@lists.sourceforge.net"
Found a better way: proxychains + w3af.
From: Adi Mutu
To: "w3af-users@lists.sourceforge.net"
Sent: Monday, February 27, 2012 7:28 PM
Subject: [W3af-users] spiderMan trough proxy?
Hello,
I have the following setup. I can access a site, but o
Andres,
The site was crawled manually with Spiderman, exported and then imported and
scanned.
I'm not sure if i have enabled other discovery plugins, but i'll check later.
Thanks,
A.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.
Hello,
I have exported fuzzable requests, i've imported then, ran a scan, however only
after that i've noticed there are no cookies in the csv file, thus my
'authenticated' scan, was actually un-authenticated. Now how could i add
cookies ?
The headers file from the http-settings? In what for
Hello,
The html output file is incomplete. After is empty. Do you think it's
because i've deleted the .txt output because it was getting to large? over 1.5
Gb?
Now i'm thinking that probably the file was used and parse to generate the html
file.
Cheers,
A.--
Should it work with tor like this? Basically that would be socks5..
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Tuesday, February 28, 2012 3:08 PM
Subject: Re: [W3af-users] spiderMan trough proxy?
Adi,
O
grrrSo if you recieve a Ctrl ^C signal to finish, couldn't you do the
writing in that signal handler?
I don't know, i'm just asking.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Tuesday, F
Hello,
I have the following setup. I can access a site, but only trough a proxy. I
want to crawl this website using the spiderMan plugin and export the results.
The problem is i can crawl this website only trought a proxy. So i guess i
would need if possible for the spiderMan plugin to forwar
Hello,
I'm using w3af ran it from inside owtf and i got borred and clicked Ctrl ^C .
Now i do get output as txt file and http output files but the html file is 0
size. Any idea what that might be the cause?
Thanks,
A.-
cool, thank Taras.
I'll try it.
From: Taras
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Wednesday, February 8, 2012 4:30 PM
Subject: Re: [W3af-users] problem on FC 16
Adi, I have tried this case on FC 16 and confirm that you n
Hi guys,
Any ideas about the problem bellow?
From: Adi Mutu
To: "w3af-users@lists.sourceforge.net"
Sent: Thursday, February 2, 2012 11:11 AM
Subject: problem on FC 16
hi,
After installing some dependencied for w3af (i thougt all of them:) ) i
hi,
After installing some dependencied for w3af (i thougt all of them:) ) i got
this:
You have to install python-gtksourceview2.
But i think i've installed that also because i when i do:
rpm -q gnome-python2-gtksourceview
gnome-python2-gtksourceview-2.32.0-5.fc16.x86_64
If I open a python
Hi All,
Is it possible to import/export crawling results?
Thanks,--
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, Sh
Hi,
Only now i got the time to test.
Seems ok:)
I'll get back to you if the problem reappears.
Thanks,
From: Adi Mutu
To: Javier Andalia
Cc: "w3af-users@lists.sourceforge.net"
Sent: Thursday, January 5, 2012 3:19 PM
Subject: Re: [W3af-user
Hi Javier,
RightI will try, but i can't just now..and most important i have to
remeber exactly what i was testing then, but i think i can rember that:)
Anyway most probably i'll try to do it this weekend.
Thanks,
A
From: Javier Andalia
To
Cool Andres, Thanks:)
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Monday, January 2, 2012 10:02 PM
Subject: Re: [W3af-users] exception in spiderman
Adi,
Please read inline,
On Sat, Dec 17, 2011 at 10:
Cool Andres, this is really great news!
Congratz to you, Taras and the rest of the team!
From: Andres Riancho
To: "w3af-deve...@lists.sourceforge.net" ;
w3af-users@lists.sourceforge.net
Sent: Saturday, December 17, 2011 4:22 PM
Subject: [W3af-users] Authentica
Hi guys,
Got another exception in spiderman i think:
Exception happened during processing of request from ('127.0.0.1', 58375)
Traceback (most recent call last):
File "/usr/lib64/python2.6/SocketServer.py", line 281, in
_handle_request_noblock
self.process_request(request, client_address
can't wait to get home and look at it:)
From: Andres Riancho
To: Taras
Cc: w3af-users@lists.sourceforge.net
Sent: Thursday, December 15, 2011 1:36 PM
Subject: Re: [W3af-users] w3af-fu: How-to test web applications with w3af
Looks good my friend! :)
On Thu,
Error in grep plugin, "httpAuthDetect" raised the exception: 'ascii' codec
can't decode byte 0xdd in position 1: ordinal not in range(128). Please report
this bug to the w3af sourceforge project page [
https://sourceforge.net/apps/trac/w3af/newticket ]
Exception: Traceback (most recent call las
do_CONNECT(): [('SSL routines', 'SSL3_READ_BYTES', 'tlsv1
alert unknown ca'), ('SSL routines', 'SSL3_READ_BYTES', 'ssl handshake
failure')]
Closing browser-proxy and proxy-site connections.
From: Ad
id or unsupported form of compression."
Does it work for you?
How should spiderman and webspider work togeher? First manual spidering and
then it continues automatically? Or both at the same time?
____
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lis
Np Andres:)
yes ofc i've tried to request that page more than once. Many times, cause i
wanted to be sure.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Tuesday, December 13, 2011 1:17 PM
Subject:
Hi,
I have enabled only the spiderman and sqli plugins, set the proxy to my browser
as indicated, crawled a few pages and then i navigate
to “http://127.7.7.7/spiderMan?terminate"; but spiderman doesn't stop and ssqli
plugin is not started. what am i doing wrong?
Also is it possible to expor
Hi,
Nevermind the "logout" link question, i found my answer looking at the
webspider plugin options.
Cheers,
A.--
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a
igured.
Also, i couldn't find an option to exclude logout links from parser after
searching and reading the manual.
Thanks,
From: Adi Mutu
To: Andres Riancho
Cc: "w3af-users@lists.sourceforge.net"
Sent: Wednesday, December 7, 2011 12:09 P
Andres,
I haven't saved all the steps, but in case something was not clear,i'll
rephrase it and i'll try to come back with the exact steps later.
Basically.
If I configure w3af, plugins, settings and at THE END i set the target and
click start it's ok.
If i set the target at the begining of co
Hello,
I get this error "No target URI configured." allthough target is configured. I
only get this if i do some other settings after setting target.
If i set target at the end and then click start it's ok.
Thanks,
--
Cl
mal?
Profile is audit_high_risk
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Sunday, December 4, 2011 9:36 PM
Subject: Re: [W3af-users] w3af_console breaks at start
Adi,
Yes, that message is fine. There is no easy way fo
n error occurred while parsing
"http://x.com/index.php";, original exception: ""
Thanks,
'
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Sunday, December 4, 2011 5:29 PM
Subject: Re: [W3af-users] w3af_console breaks at
nevermind the last email, i've discovered svn diff -r :)
From: Adi Mutu
To: Andres Riancho
Cc: "w3af-users@lists.sourceforge.net"
Sent: Sunday, December 4, 2011 11:46 AM
Subject: Re: [W3af-users] w3af_console breaks at start
Hi Andres,
_
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Saturday, December 3, 2011 9:02 PM
Subject: Re: [W3af-users] w3af_console breaks at start
Adi,
Thanks for reporting this bug, it is an issue in the way libxml2
parses HTML responses (which is
Hello,
this is what i get after choosing profile, selecting target and start:
w3af>>> start
Exiting setOutputPlugins()
Called w3afCore.start()
Called buildOpeners
keepalive: added one connection, len(self._hostmap[".com"]): 1
DNS response from DNS server for domain: .com
ypeError: 'target' is an invalid keyword argument for this function
Called _discoverWorker()
Called _bruteforce()
No URLs found by discovery.
Cleared urllib2 local cache.
Enabling _dnsCache()
Calling join on all daemon threads
Scan finished in 1 second.
__
domain.comFALSE/FALSE1330347788psidc53dd475e1a5dcebcacb31608bf12b07
www.domain.comFALSE/FALSE1322398987confirm-access1
Thanks,
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Wednesday, November 23, 2011 3:02 PM
ckage SOAPpy-0.11.6-5.el5.art.noarch already installed and latest version
Package pyOpenSSL-0.6-2.el5.i386 already installed and latest version
From: Adi Mutu
To: Andres Riancho
Cc: "w3af-users@lists.sourceforge.net"
Sent: Friday, November 25, 2011 9:56
Andres,
This solved the problem:)
http://www.geekymedia.com/tech-articles/rhel5-centos5-rpms-for-python-2-5-and-2-6/
In case anybody needs it.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Thursday, November 24,
p searching.
Thanks,
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Thursday, November 24, 2011 10:22 PM
Subject: Re: [W3af-users] error when starting console.
Adi,
It seems you're using a very old version of python, please use
python2.6 or 2.
what could be the problem? i see that on some systems it works on others it
doesn't.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Wednesday, November 23, 2011 3:02 PM
Subject: Re: [W3af-users] error when s
from svn.
did not change anything.
From: Andres Riancho
To: Adi Mutu
Cc: "w3af-users@lists.sourceforge.net"
Sent: Wednesday, November 23, 2011 3:02 PM
Subject: Re: [W3af-users] error when starting console.
On Wed, Nov 23, 2011 at 5:57 AM, Adi M
Hi,
I get the following error when starting console.
./w3af_console
File "./w3af_console", line 117
rev = 0 if (a == 'HEAD') else -1
^
SyntaxError: invalid syntax
Thanks,
--
All the data continuou
Hello,
Taras, thanks for citing me, i feel proud:)
Now
back to serious business. When I wrote that email about mod_rewrite and
variations I was thinking at Acunetix also, because that is where I got
the idea from (and the term 'variation').
Now, I personally think that Andres is a little exagerat
Hello,
Is there any mod_rewrite functionality in the crawler plugins?
Also, can i limit the number of request w3af does to a certain script with
different get parameters?
for example if i have
news.php? id =1
news.php? id =2
..
..
..
news.php? id =1000
I don't want that w3af does 1000 reques
52 matches
Mail list logo