Re: [W3af-users] Kali packaging for w3af - Automated and unittested

[Andres R. <and...@gm...>]

Christian,

On Sat, Apr 5, 2014 at 10:05 PM, Christian Heinrich
<chr...@cm...> wrote:
> Andres,
>
> As far as I am aware there no tests specific to Python and Kali Linux
> i.e. https://wiki.debian.org/Python/Packaging#Example_2:_Python_application
>
> The workflow I use is to create the Kali package then install it on a
> "new" Kali VM (I use "snapshots" under VMWare so the test is
> repeatable) and execute all the w3af tests within the Kali Linux
> terminal itself i.e. not executed as part of the package installation
> itself.
>
> The above might not be clear so I will put a wiki page with
> screenshots together and publish it on GitHub.

It was clear, thanks. No need for that wiki with screenshots.

Were you able to test the latest w3af in Kali? We packaged 1.6.0.1

Regards,

> On Fri, Apr 4, 2014 at 10:34 PM, Andres Riancho
> <and...@gm...> wrote:
>> Christian,
>>
>>     Did you review the changes in the w3af package? What can we
>> improve? Could you test the package in a vanilla Kali?
>>
>>     I believe that running all tests is not an option for testing the
>> deb package, running all packages simply takes a lot of time. We could
>> write one or two tests, with a target of a local webserver, and run a
>> simple scan against that... but as with everything I'm doing these
>> days, I would like it to be automated. The tool to use in this case
>> seems to be auto-pkg-test: any experience with that?
>>
>> [0] http://packaging.ubuntu.com/html/auto-pkg-test.html
>>
>> Regards,
>>
>> On Thu, Apr 3, 2014 at 9:27 PM, Christian Heinrich
>> <chr...@cm...> wrote:
>>> Andres,
>>>
>>> The w3af "nose" tests, etc should be executed within the
>>> ./DEBIAN/rules file i.e.
>>> https://github.com/andresriancho/w3af-kali/blob/master/debian/rules.
>>>
>>> As far as I am aware there is no Continuous Integration (CI) for Kali
>>> Linux however CI should be possible with Tox and Jenkins.  You have
>>> also raised Tox in the past within
>>> https://github.com/andresriancho/w3af/issues/1048
>>>
>>> On Fri, Apr 4, 2014 at 1:33 AM, Andres Riancho <and...@gm...> wrote:
>>>>     How do you believe we can improve the package? Could you run some
>>>> tests over it to make sure it works well? Do you believe we could add
>>>> some type of automated build + test to the process to make sure it
>>>> doesn't break?
>>>
>>>
>>> --
>>> Regards,
>>> Christian Heinrich
>>>
>>> http://cmlh.id.au/contact
>>
>>
>>
>> --
>> Andrés Riancho
>> Project Leader at w3af - http://w3af.org/
>> Web Application Attack and Audit Framework
>> Twitter: @w3af
>> GPG: 0x93C344F3
>
>
>
> --
> Regards,
> Christian Heinrich
>
> http://cmlh.id.au/contact



-- 
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3