Re: [W3af-users] Can't find files that contain the vulnerabilities' description for report generation

[Andres R. <and...@gm...>]

Amanda,

    Sorry for the very late response, but I was unable to get to this sooner.

    The vulndb now supports translations, which are documented here:

        https://github.com/vulndb/data/wiki/Translations

    The python-sdk [0] for vulndb (code that reads the DB in python)
was modified to be able to support translations. There are two things
missing to get this to work 100%:
        * Minor architecture decision in python-sdk to determine which
is the best way for the developer to specify the language to use
        * Minor changes to w3af to let the user choose which language
to use in the vulndb, and then use it.

    And of course, the translations to different languages in vulndb/data :-)

    If you're still interested, I can take a look at Crowdin. It
should be possible to translate everything following the Translations
wiki page, but I understand that it requires some technical knowledge
(git, fork, pull request).

[0] https://github.com/vulndb/python-sdk

Regards,

On Fri, Mar 16, 2018 at 2:00 PM, Amanda <ama...@un...> wrote:
> Hello!
>
> Thanks for answering, that was exactly what I was looking for!
>
> The only tool I know for translation of this kind of software is
> https://crowdin.com/. I'm involved in the ZAP Proxy translation project
> (https://crowdin.com/project/owasp-zap/pt-br#), and I understood that,
> when a translation is made, it automatically updates the source code (I
> don't know if that's the standard procedure or
> if they had to configure that manually). It seems like a nice tool to
> translate softwares and might work for W3af.
>
> About the issue [2], I'm not sure I understood the problem correctly.
> Could you explain it?
>
> Thanks for the help, and for this amazing software!
>
> Amanda
>
>
> Em 16/03/2018 10:44, Andres Riancho escreveu:
>> Amanda,
>>
>>     Thanks for your email and sorry for the late response.
>>
>>     The vulnerability database data is in this repository [0] and
>> there have been some efforts to translate it to other languages [1][2]
>> but sadly I've been unable to deliver the fix for [2] which is a
>> blocker for translations.
>>
>>     I'm completely new to the translation space, do you know about any
>> tools we can use to help with the translations? If I complete [2], how
>> would you provide the translations? A pull request?
>>
>> [0] https://github.com/vulndb/data
>> [1] https://github.com/vulndb/data/issues/26
>> [2] https://github.com/vulndb/data/issues/30
>>
>> On Mon, Mar 5, 2018 at 4:48 PM, Amanda <ama...@sj...> wrote:
>>> Hello!
>>>
>>> I would like to translate the vulnerabilities' descriptions (name,
>>> description, long description) in the XML reports to Brazilian Portuguese.
>>>
>>> However, I couldn't find the files that contain this descriptions and
>>> that are used to generate the XML reports. Can someone help me?
>>>
>>> Thank you in advance.
>>>
>>>
>>> Amanda
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>> _______________________________________________
>>> W3af-users mailing list
>>> W3a...@li...
>>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>
>>
>
> --
> Amanda Barbosa Sobrinho
> Bacharelado em Ciência da Computação
> ACME! CyberSecurity Research Labs
> UNESP - São José do Rio Preto, SP
>
>



-- 
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3