Re: [W3af-develop] REST API for w3af

[Bipin U. <mux...@gm...>]

I'd love to, but haven't played with w3af in a while (change of jobs,
country)
I can assist you though.

--
Bipin Upadhyay
http://projectbee.org/


On Thu, Mar 20, 2014 at 4:06 PM, Andres Riancho <and...@gm...>wrote:

> +1 on defining the API before coding.
> For now nothing is really defined, any chance you've got the time to
> draft the first version in the wiki?
>
> On Thu, Mar 20, 2014 at 12:01 PM, Bipin Upadhyay <mux...@gm...>
> wrote:
> > This is good news, Andres!
> > Is the API list available somewhere for us to see before it's actually
> > implemented? It's been my personal experience that defining a REST API
> > properly is vital before getting started with the code. It may provoke a
> > purist vs non-purist REST debates, but it's mostly works in favor of the
> > project.
> >
> > --
> > Bipin Upadhyay
> > http://projectbee.org/
> >
> >
> > On Thu, Mar 20, 2014 at 3:47 PM, Andres Riancho <
> and...@gm...>
> > wrote:
> >>
> >> Lists,
> >>
> >>     Talking with different users off-list, I've noticed that the
> >> advanced users want to integrate w3af with other tools, and while this
> >> is possible today (w3af console script + XML output) it is not the
> >> best approach.
> >>
> >>     The world is moving towards REST APIs, and we're going there too.
> >> A REST API allows users to spawn a w3af server in their datacenter and
> >> have it run scans of all their web applications, calling it remotely
> >> from continuous integration / delivery systems, etc.
> >>
> >>     w3afRemote [1] was an innovative project built by Deb some time
> >> ago, which had the main goals but a different technology stack:
> >> xmlrpc. Together with Deb we've decided to code a REST API wrapper
> >> around w3afCore/kb and make that part of the project. When this is
> >> done you'll be able to run ./w3af_api and have a fully functioning
> >> HTTP daemon exposing the REST API listening on localhost.
> >>
> >>     This part of the project is just starting [0]: we have the idea
> >> and some time to dedicate to it. If you want to join us speak now!;
> >> your input is very valuable.
> >>
> >> [0] https://github.com/andresriancho/w3af/issues?milestone=8&state=open
> >> [1] http://sourceforge.net/projects/w3afremote/
> >>
> >> Regards,
> >> --
> >> Andrés Riancho
> >> Project Leader at w3af - http://w3af.org/
> >> Web Application Attack and Audit Framework
> >> Twitter: @w3af
> >> GPG: 0x93C344F3
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >> Learn Graph Databases - Download FREE O'Reilly Book
> >> "Graph Databases" is the definitive new guide to graph databases and
> their
> >> applications. Written by three acclaimed leaders in the field,
> >> this first edition is now available. Download your free book today!
> >> http://p.sf.net/sfu/13534_NeoTech
> >> _______________________________________________
> >> W3af-develop mailing list
> >> W3a...@li...
> >> https://lists.sourceforge.net/lists/listinfo/w3af-develop
> >
> >
>
>
>
> --
> Andrés Riancho
> Project Leader at w3af - http://w3af.org/
> Web Application Attack and Audit Framework
> Twitter: @w3af
> GPG: 0x93C344F3
>