Geoff,

On Wed, Apr 25, 2012 at 2:59 AM, Geoff Low <g...@mdsol.com> wrote:
> Hi Andres
>
> I'll take a look.

Thanks!

>  I found another issue as well where it fails trying to
> request a request/response by id from the history (same as 171078)

Are you able to reproduce that in a consistent way? I've been trying
to reproduce that bug for a while but failed :( It is one of our Top5
bugs!

>, where
> there is no request/response content - I don't know how it has no
> request/response; but I've wrapped it in a try/except w3afException so it
> doesn't crash.  I'm thinking of flagging it up by having it create a
> httptransaction node with a notfound attribute.

Yes, please do that in xmlFile.py

> I'm just getting moth setup, so I can run the tests.

Cool, just let me know if you need any help with that

> Thanks
> Geoff
>
>
> Geoff Low Ph.D. | Software Architect I | Medidata Solutions Worldwide®
> Harman House, 1 George Street, Uxbridge, UB8 1QQ
> g...@mdsol.com | direct: +44 (0) 1895 275704 | mobile +44 (0)7817 754159 |
> main: +44 (0)1895 275600 | fax: +44 (0)1895 275602
>
> The information in this transmittal and any attachments are confidential
> and intended only for the recipient(s) listed above.
> You are hereby notified that any unauthorized distribution or copying of
> this transmittal or its attachments is prohibited.
> If you have received this transmittal in error, please notify the sender.
>
>
>
>
>
>
>
>
> On 24/04/2012 19:40, "Andres Riancho" <andres.rian...@gmail.com> wrote:
>
>>Geoff,
>>
>>    Just wanted to bring two things to your attention, first, there is
>>a bug in xmlFile [0] that I would appreciate your help with. I tried
>>to reproduce it and failed... maybe you have more luck with it? In the
>>worse case, please change the way the XML is shifted from memory to
>>disk in order to have a better understanding of which part of the XML
>>is the one that's being incorrectly set.
>>
>>    The second thing is that I just created a unit-test for the
>>xmlFile plugin, which can be run by following these steps:
>>        * [other] Download moth VM
>>        * [other] ssh moth@moth    (password: moth)
>>        * [moth] cd /var/www/w3af/
>>        * [moth] svn up
>>        * [other] cd ~/w3af/trunk/
>>        * [other] nosetests --doctest-result-variable=_test_res_
>>--rednose --with-doctest --doctest-tests
>>plugins/tests/output/test_xml_output.py
>>
>>[0] https://sourceforge.net/apps/trac/w3af/ticket/171714
>>
>>Regards,
>>---------- Forwarded message ----------
>>From: Andres Riancho <andres.rian...@gmail.com>
>>Date: Wed, Feb 22, 2012 at 3:34 PM
>>Subject: XML output format is changing
>>To: "w3af-develop@lists.sourceforge.net"
>><W3af-develop@lists.sourceforge.net>
>>Cc: w3af-us...@lists.sourceforge.net
>>
>>
>>List,
>>
>>   Just wanted to let you know that there have been some major
>>changes to the XML output file that w3af generates via it's
>>output.xmlFile plugin. Given that this file is used by other tools to
>>import w3af's result, Javier throught it would be a good idea for me
>>to send this email :) If you want to see what's going on, and exchange
>>some ideas with Geoff Low who's making all these changes, just browse
>>here [0].
>>
>>[0]
>>http://sourceforge.net/tracker/?func=detail&atid=853655&aid=3486198&group_
>>id=170274
>>
>>Regards,
>>--
>>Andrés Riancho
>>Director of Web Security at Rapid7 LLC
>>Founder at Bonsai Information Security
>>Project Leader at w3af
>>
>>
>>--
>>Andrés Riancho
>>Project Leader at w3af - http://w3af.org/
>>Web Application Attack and Audit Framework
>
>



-- 
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to