2008/12/20 Andres Riancho <andres.rian...@gmail.com>

> Viktor,
>
> On Sat, Dec 20, 2008 at 10:56 AM, Viktor Gazdag <woodsp...@gmail.com>
> wrote:
> > 2008/12/17 Andres Riancho <andres.rian...@gmail.com>
> >>
> >> Viktor,
> >>
> >> On Tue, Dec 16, 2008 at 8:17 PM, Viktor Gazdag <woodsp...@gmail.com>
> >> wrote:
> >> > 2008/12/12 Viktor Gazdag <woodsp...@gmail.com>
> >> >>
> >> >> 2008/12/12 Andres Riancho <andres.rian...@gmail.com>
> >> >>>
> >> >>> Viktor,
> >> >>>
> >> >>> On Thu, Dec 11, 2008 at 8:10 PM, Viktor Gazdag <woodsp...@gmail.com
> >
> >> >>> wrote:
> >> >>> > On Thu, Dec 11, 2008 at 6:10 PM, Viktor Gazdag <
> woodsp...@gmail.com>
> >> >>> > wrote:
> >> >>> >>>
> >> >>> >>> > Hello Andres!
> >> >>> >>> >
> >> >>> >>> >
> >> >>> >>> > I look after the _vti_bin, but it can be exist if
> _vti_inf.html
> >> >>> >>> > not.
> >> >>> >>> > The
> >> >>> >>> > _vti_bin could be anywhere and it is a virtual directory. I
> have
> >> >>> >>> > to
> >> >>> >>> > rewrite
> >> >>> >>> > the frontpage_version plugin, because the _vti_inf.html
> default
> >> >>> >>> > place
> >> >>> >>> > is the
> >> >>> >>> > root,but it can be somewhere else.
> >> >>> >>> > Here is the link I read:
> http://support.microsoft.com/kb/828909
> >> >>> >>> > What should we do?
> >> >>> >>> >
> >> >>> >>> Accodring to the kb article: "Note By default, the _vti_inf.html
> >> >>> >>> file
> >> >>> >>> is located in the root of the site. For example, the file is
> >> >>> >>> located
> >> >>> >>> at http://servername/_vti_inf.html."; , is there any reason a
> user
> >> >>> >>> may
> >> >>> >>> change it? How hard is it to change it? Is it really possible?
> >> >>> >>
> >> >>> >> I found 1 or 2 website, so it is real. I don't know how hard to
> >> >>> >> change, i
> >> >>> >> didn't use frontpage server.
> >> >>>
> >> >>> It's not so hard, you should take a look at the phpinfo discovery
> >> >>> plugin, and take some ideas from there.
> >> >>
> >> >> I meant that the _Vti_inf.html how hard to change, not the plugin.:)
> >> >
> >> > If you have little time, please have a look at it. I don't know why it
> >> > doesn't appear in the KB window. Will it be OK?
> >>
> >> I don't have much time right now, I'll look at it over the weekend.
> >> Thanks for your code and time =)
> >
> > Don't look at it, i know why not good. But i don't know how to get the
> > version in the audit.frontpage plugin. I know that i have to use
> > kb.kb.getData('frontpage_version','version'), but that's all i know.:(
> And
> > why can't i use two regex?
>
> what? I don't understand your email :(
> I was going to review your plugin today, should I just ignore it?


Ignore it. I don't know how to do the audit.frontpage things. If something
works, i get only "[]". How should i extract the version from the kb? I'm
not really find any useful in the plugins.


>
>
> >>
> >> >>
> >> >>
> >> >>>
> >> >>> Cheers,
> >> >>>
> >> >>> >>>
> >> >>> >>> Cheers,
> >> >>> >>> --
> >> >>> >>> Andres Riancho
> >> >>> >>> http://w3af.sourceforge.net/
> >> >>> >>> Web Application Attack and Audit Framework
> >> >>> >>
> >> >>> >
> >> >>> >
> >> >>> >
> >> >>> >
> >> >>> >
> ------------------------------------------------------------------------------
> >> >>> > SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las
> Vegas,
> >> >>> > Nevada.
> >> >>> > The future of the web can't happen without you.  Join us at MIX09
> to
> >> >>> > help
> >> >>> > pave the way to the Next Web now. Learn more and register at
> >> >>> >
> >> >>> >
> >> >>> >
> http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
> >> >>> > _______________________________________________
> >> >>> > W3af-develop mailing list
> >> >>> > W3af-develop@lists.sourceforge.net
> >> >>> > https://lists.sourceforge.net/lists/listinfo/w3af-develop
> >> >>> >
> >> >>> >
> >> >>>
> >> >>>
> >> >>>
> >> >>> --
> >> >>> Andres Riancho
> >> >>> http://w3af.sourceforge.net/
> >> >>> Web Application Attack and Audit Framework
> >> >>
> >> >
> >> >
> >>
> >>
> >>
> >> --
> >> Andres Riancho
> >> http://w3af.sourceforge.net/
> >> Web Application Attack and Audit Framework
> >
> >
>
>
>
> --
> Andres Riancho
> http://w3af.sourceforge.net/
> Web Application Attack and Audit Framework
>
------------------------------------------------------------------------------
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to