Kevin,

On Wed, Dec 10, 2008 at 11:12 AM,  <[EMAIL PROTECTED]> wrote:
> Revision: 2166
>          http://w3af.svn.sourceforge.net/w3af/?rev=2166&view=rev
> Author:   kdenver
> Date:     2008-12-10 13:12:49 +0000 (Wed, 10 Dec 2008)
>
> Log Message:
> -----------
> This patch allows to specify a filename in the miscSettings in which all the
> requests (found by the discovery plugins) get exported (CSV).
> You can import them later using the importResult plugin if you like.
> This is usefull if you only want to spider a site once,
> but scan it frequently. Or if you want to use the requests in
> other tools like sqlmap.
>
> Modified Paths:
> --------------
>    trunk/core/controllers/miscSettings.py
>    trunk/core/controllers/w3afCore.py
>    trunk/core/data/request/fuzzableRequest.py

Some more ideas about the patch:

- Maybe the "_exportFuzzableRequests" method could be refactored to be
a function, and to be outside the w3afCore.py file? I think that
w3afCore.py should get smaller (in lines of code) and not bigger. The
right place for this function is inside the coreHelpers directory.

- What happens when you try to export a JSON fuzzable request? what
about Web Services postdata requests? Please check all types of
fuzzable requests here "w3af/trunk/core/data/request", and if some of
the fr aren't supported by the feature, please add a comment to the
code that explicitly says so, something like: # TODO: x and y don't
work.

Thanks!

>
> This was sent by the SourceForge.net collaborative development platform, the 
> world's largest Open Source development site.
>
> ------------------------------------------------------------------------------
> SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
> The future of the web can't happen without you.  Join us at MIX09 to help
> pave the way to the Next Web now. Learn more and register at
> http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
> _______________________________________________
> W3af-svn-notify mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/w3af-svn-notify
>



--
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework

------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
W3af-develop mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to