Taras / Andres
El día 10 de abril de 2012 13:04, Andres Riancho
<andres.rian...@gmail.com> escribió:
> Martin,
>
> On Tue, Apr 10, 2012 at 1:37 AM, Martin Tartarelli
> <martin.tartare...@gmail.com> wrote:
>> Hi Taras!
>>
>> Sorry for the delay, I try to scan some pages but I found the
>> following topics: (maybe you can help me solve)
>>
>> step by step
>>
>> 1 - Install all needed packages (at first glance, it sounds to many)
>> 2 - Install also python-setuptools
>> 3 - Configure MySQL and Django based on the README file
>> 4 - Run django and Celeryd
>>
>> I like the interface, it's simple and easy to use. Loads profiles and
>> target like Nessus style ;)
>> When trying to add a new task, it's loaded but not running and does
>> not generate the report.
>>
>> Copy the log with Celeryd error. Maybe you can tell me how to follow
>>
>> ...
>>
>> [2012-04-10 08:23:54,598: INFO/PoolWorker-2] child process calling self.run()
>> [2012-04-10 08:23:54,607: INFO/PoolWorker-4] child process calling self.run()
>> [2012-04-10 08:23:54,610: INFO/PoolWorker-3] child process calling self.run()
>> [2012-04-10 08:23:54,618: INFO/PoolWorker-7] child process calling self.run()
>> [2012-04-10 08:23:54,619: INFO/PoolWorker-5] child process calling self.run()
>> [2012-04-10 08:23:54,623: INFO/PoolWorker-6] child process calling self.run()
>> [2012-04-10 08:23:54,625: INFO/PoolWorker-8] child process calling self.run()
>> [2012-04-10 08:23:54,630: INFO/PoolWorker-9] child process calling self.run()
>> [2012-04-10 08:23:54,634: INFO/PoolWorker-10] child process calling
>> self.run()
>> [2012-04-10 08:23:54,638: WARNING/MainProcess] celery@mdt0x11 has started.
>> [2012-04-10 08:23:54,638: INFO/PoolWorker-11] child process calling
>> self.run()
>> [2012-04-10 08:23:54,645: INFO/Beat] child process calling self.run()
>> [2012-04-10 08:23:54,646: INFO/Beat] Celerybeat: Starting...
>> [2012-04-10 08:24:00,000: INFO/Beat] Scheduler: Sending due task
>> w3af_webui.tasks.find_scans
>> [2012-04-10 08:24:04,731: INFO/MainProcess] Got task from broker:
>> w3af_webui.tasks.find_scans[551d7675-1ab6-4f96-987e-df9e7e329283]
>> [2012-04-10 08:24:04,768: ERROR/MainProcess] Task
>> w3af_webui.tasks.find_scans[551d7675-1ab6-4f96-987e-df9e7e329283]
>> raised exception: ImportError('No module named cronex',)
>> Traceback (most recent call last):
>> File "/usr/local/lib/python2.6/dist-packages/celery/execute/trace.py",
>> line 153, in trace_task
>> R = retval = task(*args, **kwargs)
>> File
>> "/home/tartamar/tools/w3af/extras/w3af_webui/trunk/src/w3af_webui/tasks.py",
>> line 15, in find_scans
>> call_command('find_scans', *args)
>> File
>> "/usr/local/lib/python2.6/dist-packages/django/core/management/__init__.py",
>> line 134, in call_command
>> klass = load_command_class(app_name, name)
>> File
>> "/usr/local/lib/python2.6/dist-packages/django/core/management/__init__.py",
>> line 69, in load_command_class
>> module = import_module('%s.management.commands.%s' % (app_name, name))
>> File "/usr/local/lib/python2.6/dist-packages/django/utils/importlib.py",
>> line 35, in import_module
>> __import__(name)
>> File
>> "/home/tartamar/tools/w3af/extras/w3af_webui/trunk/src/w3af_webui/management/commands/find_scans.py",
>> line 5, in <module>
>> from cronex import CronExpression
>> ImportError: No module named cronex
>
> Damn! That was my fault, I modified the README file and forgot to add
> these lines:
>
> cd cronex
> cp cronex.py `python -c "from distutils.sysconfig import
> get_python_lib; print(get_python_lib())"`
> cd ..
>
> Those lines install the cronex library in the dist-packages directory
> as Taras suggests in his email. I updated the README file so this
> won't happen again. Thanks Martin for testing :) Let us know how it
> goes now that you can run scans :)
Thank's !!! I could solve the problem
One comment on the README file is asking to create the directory
"w3af_webgui" but the web application used to write the "w3af-webgui"
Changing this, everything went well
The scan run now but i have a error in celeryd logs
[2012-04-11 07:51:01,295: ERROR/PoolWorker-4] w3af_run exception: File
contains no section headers.
file: /var/local/w3af-webui/2012/4/11/tmpRvrcnD.pw3af, line: 1
'OWASP_TOP10.pw3af\n'
[2012-04-11 07:51:01,307: ERROR/PoolWorker-4] task.py scan_start
exception File contains no section headers.
file: /var/local/w3af-webui/2012/4/11/tmpRvrcnD.pw3af, line: 1
'OWASP_TOP10.pw3af\n'
Now I'll run some scan =)
Cheers
>
> Regards,
>
>> ...
>>
>> Thank's
>>
>> El día 8 de abril de 2012 04:41, Taras <ox...@oxdef.info> escribió:
>>> Hi, Martin!
>>>
>>> Did you try it? What do you think about it?
>>>
>>>
>>> On 04/06/2012 10:22 AM, Martín Tartarelli wrote:
>>>>
>>>>
>>>> Yes! I can play with the new webUI !
>>>>
>>>>
>>>> El 04/04/2012, a las 23:11, Andres Riancho<andres.rian...@gmail.com>
>>>> escribió:
>>>>
>>>>> Lists,
>>>>>
>>>>> Anyone had a chance to test the webUI ? I've been exchanging some
>>>>> emails with Taras about it in private. We need more feedback from you
>>>>> guys about it! :)
>>>>>
>>>>> Regards,
>>>>>
>>>>> On Thu, Mar 22, 2012 at 5:08 PM, Taras<ox...@oxdef.info> wrote:
>>>>>>
>>>>>> Hi, all!
>>>>>>
>>>>>> I want to announce reloaded w3af web interface [0].
>>>>>> It is developed in Yandex by Dmitriy Simonov (in the past) and Svetlana
>>>>>> Popova (current development).
>>>>>>
>>>>>> The main aim of this project is to make w3af usable as enterprise
>>>>>> solution for regular scans. Yes, you can run w3af_console as cron job,
>>>>>> but web UI looks better choice ;)
>>>>>>
>>>>>> We will be glad to get feedback from you!
>>>>>>
>>>>>> [0]
>>>>>> https://w3af.svn.sourceforge.net/svnroot/w3af/extras/w3af_webui/trunk/
>>>>>>
>>>>>> --
>>>>>> Taras
>>>>>> http://oxdef.info
>>>>>>
>>>>>>
>>>>>> ------------------------------------------------------------------------------
>>>>>> This SF email is sponsosred by:
>>>>>> Try Windows Azure free for 90 days Click Here
>>>>>> http://p.sf.net/sfu/sfd2d-msazure
>>>>>> _______________________________________________
>>>>>> W3af-users mailing list
>>>>>> w3af-us...@lists.sourceforge.net
>>>>>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Andrés Riancho
>>>>> Project Leader at w3af - http://w3af.org/
>>>>> Web Application Attack and Audit Framework
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> Better than sec? Nothing is better than sec when it comes to
>>>>> monitoring Big Data applications. Try Boundary one-second
>>>>> resolution app monitoring today. Free.
>>>>> http://p.sf.net/sfu/Boundary-dev2dev
>>>>> _______________________________________________
>>>>> W3af-develop mailing list
>>>>> W3af-develop@lists.sourceforge.net
>>>>> https://lists.sourceforge.net/lists/listinfo/w3af-develop
>>>
>>>
>>>
>>> --
>>> Taras
>>> http://oxdef.info
>>
>>
>>
>> --
>> Martin Tartarelli
>> Linux User #476492
>> http://owasp.org/index.php/Argentina
>> --
>
>
>
> --
> Andrés Riancho
> Project Leader at w3af - http://w3af.org/
> Web Application Attack and Audit Framework
--
Martin Tartarelli
Linux User #476492
http://owasp.org/index.php/Argentina
--
------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
