Hi Andres:
Thanks for your response. I will look into this.
However, my requirement is a little different. The requests and responses
is queued. I want to send HTTP request one at a time and have that scanned,
as it enters the queue. Your solution seems to be to scan a bunch of
requests loaded in a file. Correct me if I am wrong please.
On Fri, May 27, 2016 at 9:02 PM, Andres Riancho <andres.rian...@gmail.com>
wrote:
> Yup, completely possible. Most likely following these steps:
>
> * Start the API
> * Write a file containing the HTTP request (base64 encoded)
> * Write a file containing a scan profile. The scan profile should use
> the import_results plugin [0] and point to the previously created file
> with the HTTP request
> * Start the scan with the provided scan profile
>
> [0]
> https://github.com/andresriancho/w3af/blob/master/w3af/plugins/crawl/import_results.py#L172-L182
>
> On Wed, May 25, 2016 at 8:45 AM, Abhay Bhargav <abhaybhar...@gmail.com>
> wrote:
> > Hi Group:
> >
> > I was wondering if we could do single URL scans with w3af api. What I
> mean
> > is this: I have a DB of HTTP requests of an application that need to be
> > scanned. These are part of the same application. I would like to scan
> them
> > one at a time in a queue with w3af's API. Is that possible? Or does it
> only
> > have to be a typical w3af scan?
> >
> >
> ------------------------------------------------------------------------------
> > Mobile security can be enabling, not merely restricting. Employees who
> > bring their own devices (BYOD) to work are irked by the imposition of MDM
> > restrictions. Mobile Device Manager Plus allows you to control only the
> > apps on BYO-devices by containerizing them, leaving personal data
> untouched!
> > https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
> > _______________________________________________
> > W3af-develop mailing list
> > W3af-develop@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/w3af-develop
> >
>
>
>
> --
> Andrés Riancho
> Project Leader at w3af - http://w3af.org/
> Web Application Attack and Audit Framework
> Twitter: @w3af
> GPG: 0x93C344F3
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
