Taras,
w3af can work with and without that new module. I was expecting
w3af to improve its performance significantly by using it... but there
was almost no change. So, I decided to keep the good refactoring that
I did and perform the same tasks that esmre and esm do but with "re"
and "in". To sum up, users are NOT recommended to use esmre for now
since they won't see any difference in performance (at least I
didn't!).
The esmre module can be installed using easy_install and should
work on most installations.
After reviewing the code a little bit, I realized that the message
to the users that don't have esmre installed wasn't really needed
because the library (for now) doesn't show any huge improvements that
users will see in their every day scans. If you want to experiment,
please go ahead :)
Regards,
On Fri, Apr 6, 2012 at 4:10 AM, Taras <ox...@oxdef.info> wrote:
> Andres,
>
> esmre is recommended module and w3af can work correctly without it, am I
> right?
>
> By the way, it is yet another module which can't be found in official
> Fedora, Debian GNU/Linux and Ubuntu repositories :( So the only way to
> install is use easy_install or build package by your self.
>
>
> -------- Исходное сообщение --------
> Тема: W3af-svn-notify Digest, Vol 49, Issue 6
> Дата: Fri, 06 Apr 2012 01:33:13 +0000
> От: w3af-svn-notify-requ...@lists.sourceforge.net
> Отвечать: w3af-svn-not...@lists.sourceforge.net
> Кому: w3af-svn-not...@lists.sourceforge.net
>
> Send W3af-svn-notify mailing list submissions to
> w3af-svn-not...@lists.sourceforge.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.sourceforge.net/lists/listinfo/w3af-svn-notify
> or, via email, send a message with subject or body 'help' to
> w3af-svn-notify-requ...@lists.sourceforge.net
>
> You can reach the person managing the list at
> w3af-svn-notify-ow...@lists.sourceforge.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of W3af-svn-notify digest..."
>
>
> Today's Topics:
>
> 1. SF.net SVN: w3af:[4823] trunk
> (andresrian...@users.sourceforge.net)
> 2. SF.net SVN: w3af:[4824] trunk
> (andresrian...@users.sourceforge.net)
> 3. SF.net SVN: w3af:[4825] branches/esmre/
> (andresrian...@users.sourceforge.net)
> 4. SF.net SVN: w3af:[4826] trunk/core/ui/consoleUi/rootMenu.py
> (andresrian...@users.sourceforge.net)
> 5. SF.net SVN: w3af:[4827] trunk/core/data/esmre
> (andresrian...@users.sourceforge.net)
> 6. SF.net SVN: w3af:[4828] trunk/core/controllers
> (andresrian...@users.sourceforge.net)
> 7. SF.net SVN: w3af:[4829] trunk/core/data/parsers/dpCache.py
> (andresrian...@users.sourceforge.net)
> 8. SF.net SVN: w3af:[4830]
> trunk/core/data/request/variant_identification.py
> (andresrian...@users.sourceforge.net)
> 9. SF.net SVN: w3af:[4831] trunk/core/data/parsers/sgmlParser.py
> (andresrian...@users.sourceforge.net)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 05 Apr 2012 14:40:11 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4823] trunk
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfnr9-0005hg...@sfp-svn-3.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4823
> http://w3af.svn.sourceforge.net/w3af/?rev=4823&view=rev
> Author: andresriancho
> Date: 2012-04-05 14:40:10 +0000 (Thu, 05 Apr 2012)
> Log Message:
> -----------
> Merging esmre branch into trunk. The performance enhancements shown by
> this module haven't been noticable in my tests, but the refactoring
> that was performed might be useful for other things, so I decided to
> merge it back into the trunk. The most important things here are
> the changes added by the multi_in and multi_re classes to all/most
> plugins that perform pattern matching against HTTP responses.
>
> Modified Paths:
> --------------
> trunk/core/controllers/basePlugin/baseBruteforcePlugin.py
> trunk/core/controllers/basePlugin/baseEvasionPlugin.py
> trunk/core/controllers/basePlugin/baseManglePlugin.py
> trunk/core/controllers/basePlugin/baseOutputPlugin.py
> trunk/core/controllers/basePlugin/basePlugin.py
> trunk/core/controllers/misc/dependencyCheck.py
> trunk/core/controllers/miscSettings.py
> trunk/core/controllers/targetSettings.py
> trunk/core/controllers/w3afCore.py
> trunk/core/ui/consoleUi/exploit.py
> trunk/core/ui/consoleUi/menu.py
> trunk/extlib/cluster/cluster.py
> trunk/extlib/cluster/clusterTests.py
> trunk/plugins/attack/rfiProxy.py
> trunk/plugins/audit/LDAPi.py
> trunk/plugins/audit/blindSqli.py
> trunk/plugins/audit/buffOverflow.py
> trunk/plugins/audit/dav.py
> trunk/plugins/audit/eval.py
> trunk/plugins/audit/fileUpload.py
> trunk/plugins/audit/formatString.py
> trunk/plugins/audit/frontpage.py
> trunk/plugins/audit/generic.py
> trunk/plugins/audit/globalRedirect.py
> trunk/plugins/audit/htaccessMethods.py
> trunk/plugins/audit/localFileInclude.py
> trunk/plugins/audit/mxInjection.py
> trunk/plugins/audit/osCommanding.py
> trunk/plugins/audit/phishingVector.py
> trunk/plugins/audit/preg_replace.py
> trunk/plugins/audit/redos.py
> trunk/plugins/audit/remoteFileInclude.py
> trunk/plugins/audit/responseSplitting.py
> trunk/plugins/audit/sqli.py
> trunk/plugins/audit/ssi.py
> trunk/plugins/audit/sslCertificate.py
> trunk/plugins/audit/unSSL.py
> trunk/plugins/audit/xpath.py
> trunk/plugins/audit/xsrf.py
> trunk/plugins/audit/xss.py
> trunk/plugins/audit/xst.py
> trunk/plugins/auth/generic.py
> trunk/plugins/discovery/afd.py
> trunk/plugins/discovery/allowedMethods.py
> trunk/plugins/discovery/archiveDotOrg.py
> trunk/plugins/discovery/bing_spider.py
> trunk/plugins/discovery/content_negotiation.py
> trunk/plugins/discovery/detectReverseProxy.py
> trunk/plugins/discovery/detectTransparentProxy.py
> trunk/plugins/discovery/digitSum.py
> trunk/plugins/discovery/dir_bruter.py
> trunk/plugins/discovery/dnsWildcard.py
> trunk/plugins/discovery/domain_dot.py
> trunk/plugins/discovery/dotNetErrors.py
> trunk/plugins/discovery/favicon_identification.py
> trunk/plugins/discovery/findBackdoor.py
> trunk/plugins/discovery/findCaptchas.py
> trunk/plugins/discovery/findDVCS.py
> trunk/plugins/discovery/findGit.py
> trunk/plugins/discovery/findJBoss.py
> trunk/plugins/discovery/findvhost.py
> trunk/plugins/discovery/fingerBing.py
> trunk/plugins/discovery/fingerGoogle.py
> trunk/plugins/discovery/fingerPKS.py
> trunk/plugins/discovery/fingerprint_WAF.py
> trunk/plugins/discovery/fingerprint_os.py
> trunk/plugins/discovery/frontpage_version.py
> trunk/plugins/discovery/ghdb.py
> trunk/plugins/discovery/googleSpider.py
> trunk/plugins/discovery/halberd.py
> trunk/plugins/discovery/hmap.py
> trunk/plugins/discovery/importResults.py
> trunk/plugins/discovery/oracleDiscovery.py
> trunk/plugins/discovery/phishtank.py
> trunk/plugins/discovery/phpEggs.py
> trunk/plugins/discovery/phpinfo.py
> trunk/plugins/discovery/pykto.py
> trunk/plugins/discovery/ria_enumerator.py
> trunk/plugins/discovery/robotsReader.py
> trunk/plugins/discovery/serverHeader.py
> trunk/plugins/discovery/serverStatus.py
> trunk/plugins/discovery/sharedHosting.py
> trunk/plugins/discovery/sitemapReader.py
> trunk/plugins/discovery/slash.py
> trunk/plugins/discovery/spiderMan.py
> trunk/plugins/discovery/urlFuzzer.py
> trunk/plugins/discovery/urllist_txt.py
> trunk/plugins/discovery/userDir.py
> trunk/plugins/discovery/webDiff.py
> trunk/plugins/discovery/webSpider.py
> trunk/plugins/discovery/wordnet.py
> trunk/plugins/discovery/wordpress_enumerate_users.py
> trunk/plugins/discovery/wordpress_fingerprint.py
> trunk/plugins/discovery/wordpress_fullpathdisclosure.py
> trunk/plugins/discovery/xssedDotCom.py
> trunk/plugins/discovery/zone_h.py
> trunk/plugins/evasion/backSpaceBetweenDots.py
> trunk/plugins/evasion/fullWidthEncode.py
> trunk/plugins/evasion/modsecurity.py
> trunk/plugins/evasion/reversedSlashes.py
> trunk/plugins/evasion/rndCase.py
> trunk/plugins/evasion/rndHexEncode.py
> trunk/plugins/evasion/rndParam.py
> trunk/plugins/evasion/rndPath.py
> trunk/plugins/evasion/selfReference.py
> trunk/plugins/evasion/shiftOutShiftInBetweenDots.py
> trunk/plugins/grep/ajax.py
> trunk/plugins/grep/blankBody.py
> trunk/plugins/grep/codeDisclosure.py
> trunk/plugins/grep/collectCookies.py
> trunk/plugins/grep/creditCards.py
> trunk/plugins/grep/directoryIndexing.py
> trunk/plugins/grep/domXss.py
> trunk/plugins/grep/dotNetEventValidation.py
> trunk/plugins/grep/error500.py
> trunk/plugins/grep/errorPages.py
> trunk/plugins/grep/feeds.py
> trunk/plugins/grep/fileUpload.py
> trunk/plugins/grep/findComments.py
> trunk/plugins/grep/formAutocomplete.py
> trunk/plugins/grep/getMails.py
> trunk/plugins/grep/hashFind.py
> trunk/plugins/grep/httpAuthDetect.py
> trunk/plugins/grep/httpInBody.py
> trunk/plugins/grep/lang.py
> trunk/plugins/grep/metaTags.py
> trunk/plugins/grep/motw.py
> trunk/plugins/grep/objects.py
> trunk/plugins/grep/oracle.py
> trunk/plugins/grep/passwordProfiling.py
> trunk/plugins/grep/pathDisclosure.py
> trunk/plugins/grep/privateIP.py
> trunk/plugins/grep/strangeHTTPCode.py
> trunk/plugins/grep/strangeHeaders.py
> trunk/plugins/grep/strangeParameters.py
> trunk/plugins/grep/strangeReason.py
> trunk/plugins/grep/svnUsers.py
> trunk/plugins/grep/symfony.py
> trunk/plugins/grep/user_defined_regex.py
> trunk/plugins/grep/wsdlGreper.py
> trunk/plugins/mangle/sed.py
> trunk/plugins/tests/audit/test_sqli.py
> trunk/scripts/script-LDAPi.w3af
> trunk/scripts/script-xpath.w3af
>
> Added Paths:
> -----------
> trunk/core/data/esmre/
> trunk/core/data/esmre/__init__.py
> trunk/core/data/esmre/esm_multi_in.py
> trunk/core/data/esmre/esmre_multire.py
> trunk/core/data/esmre/in_multi_in.py
> trunk/core/data/esmre/multi_in.py
> trunk/core/data/esmre/multi_re.py
> trunk/core/data/esmre/re_multire.py
> trunk/core/data/esmre/test_data.py
> trunk/core/data/esmre/test_multi_in.py
> trunk/core/data/esmre/test_multire.py
> trunk/plugins/tests/audit/test_ldapi.py
> trunk/plugins/tests/audit/test_lfi.py
> trunk/plugins/tests/audit/test_mx_injection.py
> trunk/plugins/tests/audit/test_os_commanding.py
> trunk/plugins/tests/audit/test_xpath.py
> trunk/plugins/tests/grep/test_error_pages.py
> trunk/plugins/tests/grep/test_http_in_body.py
>
> Removed Paths:
> -------------
> trunk/core/data/esmre/__init__.py
> trunk/core/data/esmre/esm_multi_in.py
> trunk/core/data/esmre/esmre_multire.py
> trunk/core/data/esmre/in_multi_in.py
> trunk/core/data/esmre/multi_in.py
> trunk/core/data/esmre/multi_re.py
> trunk/core/data/esmre/re_multire.py
> trunk/core/data/esmre/test_data.py
> trunk/core/data/esmre/test_multi_in.py
> trunk/core/data/esmre/test_multire.py
>
> Property Changed:
> ----------------
> trunk/
> trunk/plugins/grep/ssndata/
> trunk/scripts/script-form_autocomplete.w3af
> trunk/scripts/script-robots_txt.w3af
> trunk/scripts/script-sitemap_xml.w3af
> trunk/scripts/script-urllist_txt.w3af
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Thu, 05 Apr 2012 14:42:27 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4824] trunk
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfntl-0001vl...@sfp-svn-4.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4824
> http://w3af.svn.sourceforge.net/w3af/?rev=4824&view=rev
> Author: andresriancho
> Date: 2012-04-05 14:42:27 +0000 (Thu, 05 Apr 2012)
> Log Message:
> -----------
> svn propset svn:ignore '*.py[co]'
>
> Property Changed:
> ----------------
> trunk/core/controllers/auto_update/tests/
> trunk/core/controllers/daemons/tests/
> trunk/core/controllers/sca/
> trunk/core/controllers/sca/tests/
> trunk/core/controllers/tests/
> trunk/core/data/esmre/
> trunk/core/data/parsers/tests/
> trunk/core/data/request/tests/
> trunk/core/data/url/tests/
> trunk/core/data/visualization/
> trunk/core/ui/gtkUi/tests/
> trunk/plugins/auth/
> trunk/plugins/discovery/wordnet/
> trunk/plugins/grep/tests/
> trunk/plugins/output/xmlFile/
> trunk/plugins/tests/
> trunk/plugins/tests/audit/
> trunk/plugins/tests/discovery/
> trunk/plugins/tests/grep/
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 3
> Date: Thu, 05 Apr 2012 17:15:54 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4825] branches/esmre/
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfqhq-0005z7...@sfp-svn-6.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4825
> http://w3af.svn.sourceforge.net/w3af/?rev=4825&view=rev
> Author: andresriancho
> Date: 2012-04-05 17:15:54 +0000 (Thu, 05 Apr 2012)
> Log Message:
> -----------
> Removed branch after merging into trunk.
>
> Removed Paths:
> -------------
> branches/esmre/
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 4
> Date: Thu, 05 Apr 2012 21:43:17 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4826]
> trunk/core/ui/consoleUi/rootMenu.py
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfusb-0003oo...@sfp-svn-3.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4826
> http://w3af.svn.sourceforge.net/w3af/?rev=4826&view=rev
> Author: andresriancho
> Date: 2012-04-05 21:43:16 +0000 (Thu, 05 Apr 2012)
> Log Message:
> -----------
> Grammar.
>
> Modified Paths:
> --------------
> trunk/core/ui/consoleUi/rootMenu.py
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 5
> Date: Thu, 05 Apr 2012 22:37:34 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4827]
> trunk/core/data/esmre
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfvj8-0004pk...@sfp-svn-2.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4827
> http://w3af.svn.sourceforge.net/w3af/?rev=4827&view=rev
> Author: andresriancho
> Date: 2012-04-05 22:37:33 +0000 (Thu, 05 Apr 2012)
> Log Message:
> -----------
> Adding file headers.
>
> Modified Paths:
> --------------
> trunk/core/data/esmre/test_data.py
> trunk/core/data/esmre/test_multi_in.py
> trunk/core/data/esmre/test_multire.py
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 6
> Date: Thu, 05 Apr 2012 22:51:33 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4828]
> trunk/core/controllers
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfvwf-00055i...@sfp-svn-2.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4828
> http://w3af.svn.sourceforge.net/w3af/?rev=4828&view=rev
> Author: andresriancho
> Date: 2012-04-05 22:51:33 +0000 (Thu, 05 Apr 2012)
> Log Message:
> -----------
> Adding some more unit-tests that were simple comments in old code.
>
> Modified Paths:
> --------------
> trunk/core/controllers/misc/levenshtein.py
>
> Added Paths:
> -----------
> trunk/core/controllers/tests/test_levenshtein.py
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 7
> Date: Thu, 05 Apr 2012 23:38:45 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4829]
> trunk/core/data/parsers/dpCache.py
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfwgl-00057d...@sfp-svn-3.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4829
> http://w3af.svn.sourceforge.net/w3af/?rev=4829&view=rev
> Author: andresriancho
> Date: 2012-04-05 23:38:45 +0000 (Thu, 05 Apr 2012)
> Log Message:
> -----------
> Removed unused import.
>
> Modified Paths:
> --------------
> trunk/core/data/parsers/dpCache.py
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 8
> Date: Fri, 06 Apr 2012 00:08:41 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4830]
> trunk/core/data/request/variant_identification.py
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfwjj-0005ax...@sfp-svn-3.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4830
> http://w3af.svn.sourceforge.net/w3af/?rev=4830&view=rev
> Author: andresriancho
> Date: 2012-04-06 00:08:41 +0000 (Fri, 06 Apr 2012)
> Log Message:
> -----------
> Removed the need of generating an HTTPQsRequest object for checking is
> two URLs are variants. Did this based on some profiling that indicated
> that this method was using a lot of time.
>
> Modified Paths:
> --------------
> trunk/core/data/request/variant_identification.py
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> Message: 9
> Date: Fri, 06 Apr 2012 01:33:07 +0000
> From: andresrian...@users.sourceforge.net
> Subject: [W3af-svn-notify] SF.net SVN: w3af:[4831]
> trunk/core/data/parsers/sgmlParser.py
> To: w3af-svn-not...@lists.sourceforge.net
> Message-ID: <e1sfy31-00050p...@sfp-svn-1.v30.ch3.sourceforge.com>
> Content-Type: text/plain; charset=UTF-8
>
> Revision: 4831
> http://w3af.svn.sourceforge.net/w3af/?rev=4831&view=rev
> Author: andresriancho
> Date: 2012-04-06 01:33:07 +0000 (Fri, 06 Apr 2012)
> Log Message:
> -----------
> A tuple seems better in this case.
>
> Modified Paths:
> --------------
> trunk/core/data/parsers/sgmlParser.py
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
> ------------------------------
>
> ------------------------------------------------------------------------------
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
>
> ------------------------------
>
> _______________________________________________
> W3af-svn-notify mailing list
> w3af-svn-not...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-svn-notify
>
>
> End of W3af-svn-notify Digest, Vol 49, Issue 6
> **********************************************
>
> ------------------------------------------------------------------------------
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
> _______________________________________________
> W3af-develop mailing list
> W3af-develop@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-develop
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
------------------------------------------------------------------------------
For Developers, A Lot Can Happen In A Second.
Boundary is the first to Know...and Tell You.
Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
http://p.sf.net/sfu/Boundary-d2dvs2
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
