[W3af-users] Didn't get it right letting W3AF ignore some URLs by confuring ignore_regex
Status: Beta
Brought to you by:
andresriancho
From: <spa...@gm...> - 2015-06-01 09:33:43
|
Hello, I didn't get it right to ignore some URLs during evaluation of a target webapp. Let's say the target URL should be http://test.host/foo/bar/index.html On this entry site there are two links (among others) which should NOT be considered for further investigation by W3AF: http://test.host/foo/search/ http://test.host/print.html I didn't get it right yet trying for instance: set ignore_regex .*(search|print\.html)$ or (to get rid of at least the first link) set ignore_regex .*search.* or even (trying to match the second URL to ignore) set ignore_regex .*print\.html$ But W3AF always comes up with timeouts regarding both of the two URLs (the target webapp is running in a special test environment where the mentioned links are not backed by a responding application); it also lists the links in the report's section "URLs found during application scan". What am I doing wrong here? I've tested the regular expressions for compatibility issues regarding PERL's syntax etc. here: http://www.pythonregex.com/ Thank you for any kind of help. Christian |