Hi all,
I'd also like to have a simple "grep"-plugin like (and including) host-extract.
According the protocol part, keep in mind that some system support much
more than just (ht|f)tps? . You also may find (ldap|smb|smtp|ssh)://
and many, many more.
How about using a regex to identify them: ([a-zA-Z][a-zA-Z0-9-]*)
Also keep in mind when searching for external references (host-extract)
that the protocol (aka schema) part may be missing completely, such as
<img src=//some.tld/some.jpg >
Cio,
Achim
Am 19.03.11 13:27, schrieb Raul Siles:
> Andrés,
> Practice mames perfect, but at first sight I suggest to look at the
> last dot in the example, that won't be on IP addresses.
> Also, looking at protocols before the IP or hostname might help. E.g.
> http:// or ftp://...
>
> For http, looking at the expected characters after the IP or hostname
> may also help, such as / or ; (URL cookies) or ? (get arguments), etc.
>
> Perhaps the best option would be to provide as output a more trusted
> list of IP and hostnames, and an extended list that would potentially
> include false possitives, not to miss anything.
>
> Cheers,
> --
> Raul Siles
------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
