[W3af-develop] Issues faced with w3af

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Hello Team,

I am facing multiple issues with w3af installation and usage. I will list
down the issues. Please help me through this

1) I used the binary release from sourceforge page to install w3af in
windows. Is there documentation on installation for windows?

2) I see that the docker image in the hub is updated 6 years back. Can you
push the latest image?

3) Using the existing docker image, I am not able to see the crawl.open_api
to use w3af to scan APIs.

4) When i follow the existing installation for linux (using AWS), i get the
below error,
ERROR: Command errored out with exit status 1:
     command: /usr/bin/python2 -c 'import sys, setuptools, tokenize;
sys.argv[0] = '"'"'/tmp/pip-install-nSr2ry/lz4/setup.py'"'"';
__file__='"'"'/tmp/pip-install-nSr2ry/lz4/setup.py'"'"';f=getattr(tokenize,
'"'"'open'"'"', open)(__file__);code=f.read().replace('"'"'\r\n'"'"',
'"'"'\n'"'"');f.close();exec(compile(code, __file__, '"'"'exec'"'"'))'
egg_info --egg-base /tmp/pip-pip-egg-info-YLOY_u
         cwd: /tmp/pip-install-nSr2ry/lz4/
    Complete output (106 lines):

/tmp/easy_install-38pu2k/pytest-runner-5.3.1/temp/easy_install-4V3n1Y/setuptools_scm-6.0.1/src
    <pkg_resources.WorkingSet object at 0x7f95a3f41e10>
    Traceback (most recent call last):
      File "<string>", line 1, in <module>
      File "/tmp/pip-install-nSr2ry/lz4/setup.py", line 169, in <module>
        'Programming Language :: Python :: 3.6',
      File "/usr/lib/python2.7/site-packages/setuptools/__init__.py", line
144, in setup
        _install_setup_requires(attrs)
      File "/usr/lib/python2.7/site-packages/setuptools/__init__.py", line
139, in _install_setup_requires
        dist.fetch_build_eggs(dist.setup_requires)
      File "/usr/lib/python2.7/site-packages/setuptools/dist.py", line 719,
in fetch_build_eggs
        replace_conflicting=True,
      File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py",
line 782, in resolve
        replace_conflicting=replace_conflicting
      File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py",
line 1065, in best_match
        return self.obtain(req, installer)
      File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py",
line 1077, in obtain
        return installer(requirement)
      File "/usr/lib/python2.7/site-packages/setuptools/dist.py", line 786,
in fetch_build_egg
        return cmd.easy_install(req)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
678, in easy_install
        return self.install_item(spec, dist.location, tmpdir, deps)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
704, in install_item
        dists = self.install_eggs(spec, download, tmpdir)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
889, in install_eggs
        return self.build_and_install(setup_script, setup_base)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
1157, in build_and_install
        self.run_setup(setup_script, setup_base, args)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
1143, in run_setup
        run_setup(setup_script, args)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
253, in run_setup
        raise
      File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
        self.gen.throw(type, value, traceback)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
195, in setup_context
        yield
      File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
        self.gen.throw(type, value, traceback)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
166, in save_modules
        saved_exc.resume()
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
141, in resume
        six.reraise(type, exc, self._tb)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
154, in save_modules
        yield saved
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
195, in setup_context
        yield
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
250, in run_setup
        _execfile(setup_script, ns)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
45, in _execfile
        exec(code, globals, locals)
      File "/tmp/easy_install-38pu2k/pytest-runner-5.3.1/setup.py", line
21, in <module>
        pass
      File "/usr/lib/python2.7/site-packages/setuptools/__init__.py", line
144, in setup
        _install_setup_requires(attrs)
      File "/usr/lib/python2.7/site-packages/setuptools/__init__.py", line
139, in _install_setup_requires
        dist.fetch_build_eggs(dist.setup_requires)
      File "/usr/lib/python2.7/site-packages/setuptools/dist.py", line 719,
in fetch_build_eggs
        replace_conflicting=True,
      File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py",
line 782, in resolve
        replace_conflicting=replace_conflicting
      File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py",
line 1065, in best_match
        return self.obtain(req, installer)
      File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py",
line 1077, in obtain
        return installer(requirement)
      File "/usr/lib/python2.7/site-packages/setuptools/dist.py", line 786,
in fetch_build_egg
        return cmd.easy_install(req)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
678, in easy_install
        return self.install_item(spec, dist.location, tmpdir, deps)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
704, in install_item
        dists = self.install_eggs(spec, download, tmpdir)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
889, in install_eggs
        return self.build_and_install(setup_script, setup_base)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
1157, in build_and_install
        self.run_setup(setup_script, setup_base, args)
      File
"/usr/lib/python2.7/site-packages/setuptools/command/easy_install.py", line
1143, in run_setup
        run_setup(setup_script, args)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
253, in run_setup
        raise
      File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
        self.gen.throw(type, value, traceback)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
195, in setup_context
        yield
      File "/usr/lib64/python2.7/contextlib.py", line 35, in __exit__
        self.gen.throw(type, value, traceback)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
166, in save_modules
        saved_exc.resume()
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
141, in resume
        six.reraise(type, exc, self._tb)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
154, in save_modules
        yield saved
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
195, in setup_context
        yield
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
250, in run_setup
        _execfile(setup_script, ns)
      File "/usr/lib/python2.7/site-packages/setuptools/sandbox.py", line
45, in _execfile
        exec(code, globals, locals)
      File
"/tmp/easy_install-38pu2k/pytest-runner-5.3.1/temp/easy_install-4V3n1Y/setuptools_scm-6.0.1/setup.py",
line 52, in <module>

      File
"/tmp/easy_install-38pu2k/pytest-runner-5.3.1/temp/easy_install-4V3n1Y/setuptools_scm-6.0.1/setup.py",
line 29, in scm_config

      File
"/tmp/easy_install-38pu2k/pytest-runner-5.3.1/temp/easy_install-4V3n1Y/setuptools_scm-6.0.1/src/setuptools_scm/__init__.py",
line 8, in <module>
      File
"/tmp/easy_install-38pu2k/pytest-runner-5.3.1/temp/easy_install-4V3n1Y/setuptools_scm-6.0.1/src/setuptools_scm/config.py",
line 6, in <module>
      File
"/tmp/easy_install-38pu2k/pytest-runner-5.3.1/temp/easy_install-4V3n1Y/setuptools_scm-6.0.1/src/setuptools_scm/utils.py",
line 41
        print(*k)
              ^
    SyntaxError: invalid syntax
    ----------------------------------------
ERROR: Command errored out with exit status 1: python setup.py egg_info
Check the logs for full command output.
can someone help me on this please.

5) While trying the REST APIs, when i use the below command
 curl -i --globoff -k --no-ssl  -H "Content-Type: application/json" -H
"User-Agent: python-requests/2.6.1 CPython/2.7.6 Linux/3.13.0-49-generic"
-X POST -d {"target_urls":
"http://juiceshoptest123456.herokuapp.com/","scan_profile":
"[crawl.web_spider]"} -u admin:secret https://127.0.0.1:5000/scans

i get the below error
HTTP/1.1 500 Internal Server Error
Server: Cowboy
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Feature-Policy: payment 'self'
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Date: Thu, 05 Aug 2021 09:46:17 GMT
Transfer-Encoding: chunked
Via: 1.1 vegur

<html>
  <head>
    <meta charset='utf-8'>
    <title>SyntaxError: Unexpected token t in JSON at position 1</title>
    <style>* {
  margin: 0;
  padding: 0;
  outline: 0;
}

body {
  padding: 80px 100px;
  font: 13px "Helvetica Neue", "Lucida Grande", "Arial";
  background: #ECE9E9 -webkit-gradient(linear, 0% 0%, 0% 100%, from(#fff),
to(#ECE9E9));
  background: #ECE9E9 -moz-linear-gradient(top, #fff, #ECE9E9);
  background-repeat: no-repeat;
  color: #555;
  -webkit-font-smoothing: antialiased;
}
h1, h2 {
  font-size: 22px;
  color: #343434;
}
h1 em, h2 em {
  padding: 0 5px;
  font-weight: normal;
}
h1 {
  font-size: 60px;
}
h2 {
  margin-top: 10px;
}
ul li {
  list-style: none;
}
#stacktrace {
  margin-left: 60px;
}
</style>
  </head>
  <body>
    <div id="wrapper">
      <h1>OWASP Juice Shop (Express ^4.17.1)</h1>
      <h2><em>500</em> SyntaxError: Unexpected token t in JSON at position
1</h2>
      <ul id="stacktrace"><li> &nbsp; &nbsp;at JSON.parse
(&lt;anonymous&gt;)</li><li> &nbsp; &nbsp;at jsonParser
(/app/build/server.js:236:33)</li><li> &nbsp; &nbsp;at Layer.handle [as
handle_request]
(/app/node_modules/express/lib/router/layer.js:95:5)</li><li> &nbsp;
&nbsp;at trim_prefix
(/app/node_modules/express/lib/router/index.js:317:13)</li><li> &nbsp;
&nbsp;at /app/node_modules/express/lib/router/index.js:284:7</li><li>
&nbsp; &nbsp;at Function.process_params
(/app/node_modules/express/lib/router/index.js:335:12)</li><li> &nbsp;
&nbsp;at next
(/app/node_modules/express/lib/router/index.js:275:10)</li><li> &nbsp;
&nbsp;at /app/node_modules/body-parser/lib/read.js:130:5</li><li> &nbsp;
&nbsp;at invokeCallback
(/app/node_modules/raw-body/index.js:224:16)</li><li> &nbsp; &nbsp;at done
(/app/node_modules/raw-body/index.js:213:7)</li><li> &nbsp; &nbsp;at
IncomingMessage.onEnd (/app/node_modules/raw-body/index.js:273:7)</li><li>
&nbsp; &nbsp;at IncomingMessage.emit (node:events:381:22)</li><li> &nbsp;
&nbsp;at endReadableNT (node:internal/streams/readable:1307:12)</li><li>
&nbsp; &nbsp;at processTicksAndRejections
(node:internal/process/task_queues:81:21)</li></ul>
    </div>
  </body>
</html>
curl: (6) Could not resolve host: [crawl.web_spider]}
curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
protocol

please help

Thanks in advance

-- 
k.bhuvaneshwari