Re: [W3af-users] Can't find files that contain the vulnerabilities' description for report generation

[Andres R. <and...@gm...>]

All pending tasks are done!

The vulndb can now be translated and python-sdk + w3af will allow the
user to set the language parameter in the misc settings. Setting that
parameter to, lets say, PT, will make w3af write all vulnerability
descriptions in Portuguese.

On Thu, May 3, 2018 at 9:17 PM, Amanda <ama...@un...> wrote:
> Hi Andres,
>
> I think it's a great idea to translate it through the python-sdk. I'll
> definetely contribute with the translation when the structure gets ready.
>
> Please let me know when it starts working 100%. And thanks again for
> your work with W3af, it's fantastic!
>
> Regards,
>
> Amanda
>
>
> Em 03-05-2018 13:07, Andres Riancho escreveu:
>> Amanda,
>>
>>     Sorry for the very late response, but I was unable to get to this sooner.
>>
>>     The vulndb now supports translations, which are documented here:
>>
>>         https://github.com/vulndb/data/wiki/Translations
>>
>>     The python-sdk [0] for vulndb (code that reads the DB in python)
>> was modified to be able to support translations. There are two things
>> missing to get this to work 100%:
>>         * Minor architecture decision in python-sdk to determine which
>> is the best way for the developer to specify the language to use
>>         * Minor changes to w3af to let the user choose which language
>> to use in the vulndb, and then use it.
>>
>>     And of course, the translations to different languages in vulndb/data :-)
>>
>>     If you're still interested, I can take a look at Crowdin. It
>> should be possible to translate everything following the Translations
>> wiki page, but I understand that it requires some technical knowledge
>> (git, fork, pull request).
>>
>> [0] https://github.com/vulndb/python-sdk
>>
>> Regards,
>>
>> On Fri, Mar 16, 2018 at 2:00 PM, Amanda <ama...@un...> wrote:
>>> Hello!
>>>
>>> Thanks for answering, that was exactly what I was looking for!
>>>
>>> The only tool I know for translation of this kind of software is
>>> https://crowdin.com/. I'm involved in the ZAP Proxy translation project
>>> (https://crowdin.com/project/owasp-zap/pt-br#), and I understood that,
>>> when a translation is made, it automatically updates the source code (I
>>> don't know if that's the standard procedure or
>>> if they had to configure that manually). It seems like a nice tool to
>>> translate softwares and might work for W3af.
>>>
>>> About the issue [2], I'm not sure I understood the problem correctly.
>>> Could you explain it?
>>>
>>> Thanks for the help, and for this amazing software!
>>>
>>> Amanda
>>>
>>>
>>> Em 16/03/2018 10:44, Andres Riancho escreveu:
>>>> Amanda,
>>>>
>>>>     Thanks for your email and sorry for the late response.
>>>>
>>>>     The vulnerability database data is in this repository [0] and
>>>> there have been some efforts to translate it to other languages [1][2]
>>>> but sadly I've been unable to deliver the fix for [2] which is a
>>>> blocker for translations.
>>>>
>>>>     I'm completely new to the translation space, do you know about any
>>>> tools we can use to help with the translations? If I complete [2], how
>>>> would you provide the translations? A pull request?
>>>>
>>>> [0] https://github.com/vulndb/data
>>>> [1] https://github.com/vulndb/data/issues/26
>>>> [2] https://github.com/vulndb/data/issues/30
>>>>
>>>> On Mon, Mar 5, 2018 at 4:48 PM, Amanda <ama...@sj...> wrote:
>>>>> Hello!
>>>>>
>>>>> I would like to translate the vulnerabilities' descriptions (name,
>>>>> description, long description) in the XML reports to Brazilian Portuguese.
>>>>>
>>>>> However, I couldn't find the files that contain this descriptions and
>>>>> that are used to generate the XML reports. Can someone help me?
>>>>>
>>>>> Thank you in advance.
>>>>>
>>>>>
>>>>> Amanda
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> Check out the vibrant tech community on one of the world's most
>>>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>>> _______________________________________________
>>>>> W3af-users mailing list
>>>>> W3a...@li...
>>>>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>>>
>>> --
>>> Amanda Barbosa Sobrinho
>>> Bacharelado em Ciência da Computação
>>> ACME! CyberSecurity Research Labs
>>> UNESP - São José do Rio Preto, SP
>>>
>>>
>>
>>
>



-- 
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3