Re: [W3af-users] Shell shock plugin for w3af: Done!

[Ali K. <ali...@gm...>]

i keep trying to run the git version of w3af and it says that phply is
missing, yet I have it:



/usr/local/lib/python2.7/dist-packages/phply-0.9.1-nspkg.pth
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info
/usr/local/lib/python2.7/dist-packages/phply.egg-link
/usr/local/lib/python2.7/dist-packages/phply/phpast.py
/usr/local/lib/python2.7/dist-packages/phply/phpast.pyc
/usr/local/lib/python2.7/dist-packages/phply/phplex.py
/usr/local/lib/python2.7/dist-packages/phply/phplex.pyc
/usr/local/lib/python2.7/dist-packages/phply/phpparse.py
/usr/local/lib/python2.7/dist-packages/phply/phpparse.pyc
/usr/local/lib/python2.7/dist-packages/phply/pythonast.py
/usr/local/lib/python2.7/dist-packages/phply/pythonast.pyc
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/PKG-INFO
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/SOURCES.txt
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/dependency_links.txt
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/installed-files.txt
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/namespace_packages.txt
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/not-zip-safe
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/requires.txt
/usr/local/lib/python2.7/dist-packages/phply-0.9.1.egg-info/top_level.txt


On 09/25/2014 03:22 PM, Andres Riancho wrote:
> List,
> 
>     Take a look at the w3af plugin I've just finished coding [0], it
> detects shell shock vulnerabilities by using time delays. Pull
> requests with improvements are welcome :)
> 
> [0] https://gist.github.com/andresriancho/4ef11d75c1f517c24f94
> 
> Regards,
>