Re: [W3af-users] w3af framework unit test scipts

2013-08-26 Thread Andres Riancho
Got the files but was unable to spend any time with them. This is in my TODO list, will try to work on it this week. On Sun, Aug 25, 2013 at 4:28 AM, Shafeeque O.K [gmail] wrote: > Hi Andres, > > Any clue from the files which I have sent to you? > > Do you need any more info, > > Please update. >

Re: [W3af-users] w3af framework unit test scipts

2013-08-25 Thread Shafeeque O.K [gmail]
Hi Andres, Any clue from the files which I have sent to you? Do you need any more info, Please update. Regards, -S- On Wed, Aug 21, 2013 at 1:20 PM, Shafeeque O.K [gmail] wrote: > Hi, > > I did git checkout feature/module and noticed my w3af version is changed > back to 1.5. > > Completed t

Re: [W3af-users] w3af framework unit test scipts

2013-08-20 Thread Andres Riancho
git checkout feature/module On Tue, Aug 20, 2013 at 10:40 PM, Shafeeque O.K [gmail] wrote: > Please let me know how to get this specific branch > https://github.com/andresriancho/w3af/tree/feature/module locally. > > > On Sun, Aug 18, 2013 at 11:31 PM, Andres Riancho > wrote: >> >> Also, just ad

Re: [W3af-users] w3af framework unit test scipts

2013-08-18 Thread Andres Riancho
Also, just added a little bit more debugging for you, use the feature/module branch of the w3af repository to run the scan. Instead of a line like: "The HTTP body for "http://192.168.92.135/dvwa/security.php"; could NOT be parsed by lxml." You should see something like: "The HTTP body for "http:

Re: [W3af-users] w3af framework unit test scipts

2013-08-18 Thread Andres Riancho
Just tried these two files really quick and I was able to parse them, at least with the way I used to reproduce it, w3af works. Lets try something different, could you capture the whole traffic of a w3af scan against that site and send me the pcap? Thanks! On Mon, Aug 12, 2013 at 11:29 PM, Shafe

Re: [W3af-users] w3af framework unit test scipts

2013-08-12 Thread Shafeeque O.K [gmail]
Hi Andres, Kindly find attached the files. On Mon, Aug 12, 2013 at 7:00 PM, Andres Riancho wrote: > It should be enough to wget them, yes. > > On Fri, Aug 9, 2013 at 9:45 AM, Shafeeque O.K [gmail] > wrote: > > Is it ok, if I just do the following to get the files, which was unable > tp > > pr

Re: [W3af-users] w3af framework unit test scipts

2013-08-12 Thread Andres Riancho
It should be enough to wget them, yes. On Fri, Aug 9, 2013 at 9:45 AM, Shafeeque O.K [gmail] wrote: > Is it ok, if I just do the following to get the files, which was unable tp > process by w3af.. > > 1. wget http://192.168.92.135/dvwa/login.php > 2. wget http://192.168.92.135/dvwa/security.php

Re: [W3af-users] w3af framework unit test scipts

2013-08-09 Thread Shafeeque O.K [gmail]
Is it ok, if I just do the following to get the files, which was unable tp process by w3af.. 1. wget http://192.168.92.135/dvwa/login.php 2. wget http://192.168.92.135/dvwa/security.php do I need to set any options for wget? Kindly guide. On Fri, Aug 9, 2013 at 12:41 AM, Andres Riancho wrot

Re: [W3af-users] w3af framework unit test scipts

2013-08-08 Thread Andres Riancho
Shafeeque, On Thu, Aug 8, 2013 at 2:13 PM, Shafeeque O.K [gmail] wrote: > Hi Andres, > > Thanks again for the instant reply. > >>>Item #2,3 - i will do some more investigation. > >>> Typing in the shell. The cursor moment in the shell was not smooth, >>> after typing a command, we need to press

Re: [W3af-users] w3af framework unit test scipts

2013-08-08 Thread Shafeeque O.K [gmail]
Hi Andres, Thanks again for the instant reply. >>Item #2,3 - i will do some more investigation. >> Typing in the shell. The cursor moment in the shell was not smooth, after typing a command, we need to press two enter to get a new command prompt. Some time I was keep hitting the enter key to ge

Re: [W3af-users] w3af framework unit test scipts

2013-08-08 Thread Andres Riancho
Shafeeque, On Thu, Aug 8, 2013 at 12:16 PM, Shafeeque O.K [gmail] wrote: > Dear Andres, > > Thank you for your quick reply. > > I will check the links given for testing w3af framework. > > Some observations from my testing. They are not major, kindly note that I > may be wrong, you are welcome to

Re: [W3af-users] w3af framework unit test scipts

2013-08-08 Thread Shafeeque O.K [gmail]
Dear Andres, Thank you for your quick reply. I will check the links given for testing w3af framework. Some observations from my testing. They are not major, kindly note that I may be wrong, you are welcome to guide me! The points are below. 1. Once a full fledged scan is started, if we are try

Re: [W3af-users] w3af framework unit test scipts

2013-08-08 Thread Andres Riancho
Shafeeque, On Thu, Aug 8, 2013 at 11:25 AM, Shafeeque O.K [gmail] wrote: > Hi, > > I have playing around with latest w3af and testing DVWA using this tools. > > Some how I am failing to get the SQLi, injection vulnerabilities of DVWA > detected by w3af. I am able to get BlindSQLi bugs.. So I deci

[W3af-users] w3af framework unit test scipts

2013-08-08 Thread Shafeeque O.K [gmail]
Hi, I have playing around with latest w3af and testing DVWA using this tools. Some how I am failing to get the SQLi, injection vulnerabilities of DVWA detected by w3af. I am able to get BlindSQLi bugs.. So I decided to check whether the SQLi is realling working (ofcourse it works) I understand t