2008/12/20 Andres Riancho <andres.rian...@gmail.com> > Viktor, > > On Sat, Dec 20, 2008 at 10:56 AM, Viktor Gazdag <woodsp...@gmail.com> > wrote: > > 2008/12/17 Andres Riancho <andres.rian...@gmail.com> > >> > >> Viktor, > >> > >> On Tue, Dec 16, 2008 at 8:17 PM, Viktor Gazdag <woodsp...@gmail.com> > >> wrote: > >> > 2008/12/12 Viktor Gazdag <woodsp...@gmail.com> > >> >> > >> >> 2008/12/12 Andres Riancho <andres.rian...@gmail.com> > >> >>> > >> >>> Viktor, > >> >>> > >> >>> On Thu, Dec 11, 2008 at 8:10 PM, Viktor Gazdag <woodsp...@gmail.com > > > >> >>> wrote: > >> >>> > On Thu, Dec 11, 2008 at 6:10 PM, Viktor Gazdag < > woodsp...@gmail.com> > >> >>> > wrote: > >> >>> >>> > >> >>> >>> > Hello Andres! > >> >>> >>> > > >> >>> >>> > > >> >>> >>> > I look after the _vti_bin, but it can be exist if > _vti_inf.html > >> >>> >>> > not. > >> >>> >>> > The > >> >>> >>> > _vti_bin could be anywhere and it is a virtual directory. I > have > >> >>> >>> > to > >> >>> >>> > rewrite > >> >>> >>> > the frontpage_version plugin, because the _vti_inf.html > default > >> >>> >>> > place > >> >>> >>> > is the > >> >>> >>> > root,but it can be somewhere else. > >> >>> >>> > Here is the link I read: > http://support.microsoft.com/kb/828909 > >> >>> >>> > What should we do? > >> >>> >>> > > >> >>> >>> Accodring to the kb article: "Note By default, the _vti_inf.html > >> >>> >>> file > >> >>> >>> is located in the root of the site. For example, the file is > >> >>> >>> located > >> >>> >>> at http://servername/_vti_inf.html." , is there any reason a > user > >> >>> >>> may > >> >>> >>> change it? How hard is it to change it? Is it really possible? > >> >>> >> > >> >>> >> I found 1 or 2 website, so it is real. I don't know how hard to > >> >>> >> change, i > >> >>> >> didn't use frontpage server. > >> >>> > >> >>> It's not so hard, you should take a look at the phpinfo discovery > >> >>> plugin, and take some ideas from there. > >> >> > >> >> I meant that the _Vti_inf.html how hard to change, not the plugin.:) > >> > > >> > If you have little time, please have a look at it. I don't know why it > >> > doesn't appear in the KB window. Will it be OK? > >> > >> I don't have much time right now, I'll look at it over the weekend. > >> Thanks for your code and time =) > > > > Don't look at it, i know why not good. But i don't know how to get the > > version in the audit.frontpage plugin. I know that i have to use > > kb.kb.getData('frontpage_version','version'), but that's all i know.:( > And > > why can't i use two regex? > > what? I don't understand your email :( > I was going to review your plugin today, should I just ignore it?
Ignore it. I don't know how to do the audit.frontpage things. If something works, i get only "[]". How should i extract the version from the kb? I'm not really find any useful in the plugins. > > > >> > >> >> > >> >> > >> >>> > >> >>> Cheers, > >> >>> > >> >>> >>> > >> >>> >>> Cheers, > >> >>> >>> -- > >> >>> >>> Andres Riancho > >> >>> >>> http://w3af.sourceforge.net/ > >> >>> >>> Web Application Attack and Audit Framework > >> >>> >> > >> >>> > > >> >>> > > >> >>> > > >> >>> > > >> >>> > > ------------------------------------------------------------------------------ > >> >>> > SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las > Vegas, > >> >>> > Nevada. > >> >>> > The future of the web can't happen without you. Join us at MIX09 > to > >> >>> > help > >> >>> > pave the way to the Next Web now. Learn more and register at > >> >>> > > >> >>> > > >> >>> > > http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ > >> >>> > _______________________________________________ > >> >>> > W3af-develop mailing list > >> >>> > W3af-develop@lists.sourceforge.net > >> >>> > https://lists.sourceforge.net/lists/listinfo/w3af-develop > >> >>> > > >> >>> > > >> >>> > >> >>> > >> >>> > >> >>> -- > >> >>> Andres Riancho > >> >>> http://w3af.sourceforge.net/ > >> >>> Web Application Attack and Audit Framework > >> >> > >> > > >> > > >> > >> > >> > >> -- > >> Andres Riancho > >> http://w3af.sourceforge.net/ > >> Web Application Attack and Audit Framework > > > > > > > > -- > Andres Riancho > http://w3af.sourceforge.net/ > Web Application Attack and Audit Framework >
------------------------------------------------------------------------------
_______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop