Taras,

On Mon, Jun 8, 2009 at 5:36 PM, Taras<ta...@securityaudit.ru> wrote:
>
> Hello, list!
>
> I decided to inform you about current status of proxy tool improvement:

Good,

>  * Table presentation and editing of request/response data (headers) and so 
> on - done
>  * Table presentation of request params  - in TODO (simple task)

Ok,

>  * Tabbed request/response GUI - done

Seen it, looks and works great, except from some cases where the
response has long lines, and the window grows *really* wide in order
to show the line. I think that there is a problem with the
ScrolledWindow configuration.

>  * More convenient History navigation and presentation - in progress (Let's 
> moving from hacker's search with SQL syntax to more convenient search by URL 
> in main text entry + hidden advanced options bar for options (e.g "code = 
> 404" and "id>5") like in Google.)

I'm trying to understand this, as far as I can see without reading the
code, the advanced part will be like a wizard for the user to create a
new search string, right?

Also related, please see this [0], which is a bug fix that I
implemented a couple of days ago, and is related with the type of data
of the primary keys, and the way the information is stored. Maybe it's
a good idea that you merge this into your branch before continuing to
work.

[0] 
http://w3af.svn.sourceforge.net/viewvc/w3af/trunk/core/data/db/persist.py?revision=2898&view=markup

>  * Audit plugins integration for manual checks - in TODO
>  * HEX editor  - in TODO

Ok,

>  * Options -> separate tab - done

That looks awful, but it's not your fault, it's the framework's fault.
I'll work on the way that the options are displayed (I also talked
with Achim about this).

>  * More keyborad friendly navigation and common GUI improvements - done

Cool,

>  * Andres also recently added syntax highlight tab for response HTML data

Yes, but this needs some work also, adding to my never ending TODO list ;)

> Any questions or comments? =)

Not really, you are doing a great job and I know that at the end we'll
have a perfect local proxy =) Thanks!

Anyone else has comments? To be able to test this branch, you have to
download the taras branch like this:

svn co https://w3af.svn.sourceforge.net/svnroot/w3af/branches/taras w3af-taras

And then just cd w3af-taras , and ./w3af_gui

Cheers,

> --
> Taras
> ----
> "Software is like sex: it's better when it's free." - Linus Torvalds
>
> ------------------------------------------------------------------------------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables unlimited
> royalty-free distribution of the report engine for externally facing
> server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> W3af-develop mailing list
> W3af-develop@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-develop
>
>



-- 
Andrés Riancho
Founder, Bonsai - Information Security
http://www.bonsai-sec.com/
http://w3af.sf.net/

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to