Re: [W3af-users] authenticated scan of application

2014-01-29 Thread Andres Riancho
Not your fault, I should merge that branch into develop/master once and for all... On Wed, Jan 29, 2014 at 11:40 AM, Vojtěch Polášek wrote: > Thank you very much. I am sorry if I am asking something that has been > already mentioned, but I didn't see this trick anywhere explicitly written. > Than

Re: [W3af-users] authenticated scan of application

2014-01-29 Thread Vojtěch Polášek
Thank you very much. I am sorry if I am asking something that has been already mentioned, but I didn't see this trick anywhere explicitly written. Thanks, Vojta Dne 29.1.2014 15:37, Andres Riancho napsal(a): > I'm getting tired of saying this (and it is completely my fault) > but... have you trie

Re: [W3af-users] authenticated scan of application

2014-01-29 Thread Andres Riancho
I'm getting tired of saying this (and it is completely my fault) but... have you tried with the `feature/module` branch? cd w3af git checkout feature/module ./w3af_console On Tue, Jan 21, 2014 at 8:32 PM, Vojtěch Polášek wrote: > Hi, > here I am sending the traceback I get: > ---

Re: [W3af-users] authenticated scan of application

2014-01-21 Thread Vojtěch Polášek
Hi, here I am sending the traceback I get: Exception happened during processing of request from ('127.0.0.1', 44787) Traceback (most recent call last): File "/usr/lib/python2.7/SocketServer.py", line 284, in _handle_request_noblock self.process_request

[W3af-users] authenticated scan of application

2014-01-21 Thread Vojtěch Polášek
Hi, I am doing some penetration testing on a web application. This application doesn't offer any great functions without actually logging in. I found some posts about authenticated scans from earlier times here on this list. So I use spider-man and I set correct regex pattern for ignoring some part