w3af-svn-notify Mailing List for w3af (Page 3)
Status: Beta
Brought to you by:
andresriancho
You can subscribe to this list here.
| 2008 |
Jan
|
Feb
(235) |
Mar
(336) |
Apr
(280) |
May
(278) |
Jun
(159) |
Jul
(270) |
Aug
(240) |
Sep
(121) |
Oct
(110) |
Nov
(199) |
Dec
(228) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2009 |
Jan
(251) |
Feb
(206) |
Mar
(115) |
Apr
(45) |
May
(27) |
Jun
(67) |
Jul
(49) |
Aug
(38) |
Sep
(10) |
Oct
(131) |
Nov
(89) |
Dec
(38) |
| 2010 |
Jan
(85) |
Feb
(71) |
Mar
(45) |
Apr
(23) |
May
(12) |
Jun
|
Jul
(11) |
Aug
(7) |
Sep
(81) |
Oct
(79) |
Nov
(165) |
Dec
(62) |
| 2011 |
Jan
(134) |
Feb
(73) |
Mar
(34) |
Apr
(63) |
May
(147) |
Jun
(43) |
Jul
(21) |
Aug
(26) |
Sep
(43) |
Oct
(34) |
Nov
(44) |
Dec
(112) |
| 2012 |
Jan
(47) |
Feb
(44) |
Mar
(72) |
Apr
(209) |
May
(54) |
Jun
(279) |
Jul
(151) |
Aug
(332) |
Sep
(39) |
Oct
(268) |
Nov
(116) |
Dec
(368) |
| 2013 |
Jan
(73) |
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <and...@us...> - 2013-01-03 19:29:36
|
Revision: 6605
http://w3af.svn.sourceforge.net/w3af/?rev=6605&view=rev
Author: andresriancho
Date: 2013-01-03 19:29:14 +0000 (Thu, 03 Jan 2013)
Log Message:
-----------
Tested shelve vs sqlite speed; recorded results for future reference
Modified Paths:
--------------
branches/threading2/core/data/db/temp_shelve.py
Added Paths:
-----------
branches/threading2/core/data/db/tests/shelve_vs_sqlite3.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-03 18:50:48
|
Revision: 6604
http://w3af.svn.sourceforge.net/w3af/?rev=6604&view=rev
Author: andresriancho
Date: 2013-01-03 18:50:40 +0000 (Thu, 03 Jan 2013)
Log Message:
-----------
Minor improvements
Modified Paths:
--------------
branches/threading2/plugins/audit/ssl_certificate.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-03 18:40:06
|
Revision: 6603
http://w3af.svn.sourceforge.net/w3af/?rev=6603&view=rev
Author: andresriancho
Date: 2013-01-03 18:39:59 +0000 (Thu, 03 Jan 2013)
Log Message:
-----------
Making sure the SSL cert is analyzed only once per domain
Modified Paths:
--------------
branches/threading2/plugins/audit/ssl_certificate.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-03 18:15:51
|
Revision: 6602
http://w3af.svn.sourceforge.net/w3af/?rev=6602&view=rev
Author: andresriancho
Date: 2013-01-03 18:15:44 +0000 (Thu, 03 Jan 2013)
Log Message:
-----------
Setting experimental queue max sizes and lowering thread count
Modified Paths:
--------------
branches/threading2/core/controllers/core_helpers/consumers/base_consumer.py
branches/threading2/core/controllers/threads/threadpool.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-03 18:09:33
|
Revision: 6601
http://w3af.svn.sourceforge.net/w3af/?rev=6601&view=rev
Author: andresriancho
Date: 2013-01-03 18:09:23 +0000 (Thu, 03 Jan 2013)
Log Message:
-----------
Adding minor perf improvement to get the original response before calling each audit plugin
Modified Paths:
--------------
branches/threading2/core/controllers/core_helpers/consumers/audit.py
branches/threading2/core/controllers/plugins/audit_plugin.py
branches/threading2/plugins/audit/blind_sqli.py
branches/threading2/plugins/audit/buffer_overflow.py
branches/threading2/plugins/audit/cors_origin.py
branches/threading2/plugins/audit/csrf.py
branches/threading2/plugins/audit/dav.py
branches/threading2/plugins/audit/eval.py
branches/threading2/plugins/audit/file_upload.py
branches/threading2/plugins/audit/format_string.py
branches/threading2/plugins/audit/frontpage.py
branches/threading2/plugins/audit/generic.py
branches/threading2/plugins/audit/global_redirect.py
branches/threading2/plugins/audit/htaccess_methods.py
branches/threading2/plugins/audit/ldapi.py
branches/threading2/plugins/audit/lfi.py
branches/threading2/plugins/audit/mx_injection.py
branches/threading2/plugins/audit/os_commanding.py
branches/threading2/plugins/audit/phishing_vector.py
branches/threading2/plugins/audit/preg_replace.py
branches/threading2/plugins/audit/redos.py
branches/threading2/plugins/audit/response_splitting.py
branches/threading2/plugins/audit/rfi.py
branches/threading2/plugins/audit/sqli.py
branches/threading2/plugins/audit/ssi.py
branches/threading2/plugins/audit/ssl_certificate.py
branches/threading2/plugins/audit/un_ssl.py
branches/threading2/plugins/audit/xpath.py
branches/threading2/plugins/audit/xss.py
branches/threading2/plugins/audit/xst.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-03 17:37:52
|
Revision: 6600
http://w3af.svn.sourceforge.net/w3af/?rev=6600&view=rev
Author: andresriancho
Date: 2013-01-03 17:37:45 +0000 (Thu, 03 Jan 2013)
Log Message:
-----------
Adding test to prove that closing the db twice doesn't break anything.
Modified Paths:
--------------
branches/threading2/core/data/db/tests/test_db.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-03 17:35:57
|
Revision: 6599
http://w3af.svn.sourceforge.net/w3af/?rev=6599&view=rev
Author: andresriancho
Date: 2013-01-03 17:35:51 +0000 (Thu, 03 Jan 2013)
Log Message:
-----------
Cosmetic
Modified Paths:
--------------
branches/threading2/core/data/db/tests/test_disk_list.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 23:07:29
|
Revision: 6598
http://w3af.svn.sourceforge.net/w3af/?rev=6598&view=rev
Author: andresriancho
Date: 2013-01-02 23:07:23 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Adding one more test for generic plugin: do not report vulnerability if it was found by a different plugin.
Modified Paths:
--------------
branches/threading2/plugins/tests/audit/test_generic.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 23:06:40
|
Revision: 6597
http://w3af.svn.sourceforge.net/w3af/?rev=6597&view=rev
Author: andresriancho
Date: 2013-01-02 23:06:34 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Audit plugins now show vulnerabilities in the console just after finding and storing them in the KB; instead of waiting until the plugin end()
Modified Paths:
--------------
branches/threading2/core/controllers/output_manager.py
branches/threading2/core/controllers/plugins/audit_plugin.py
branches/threading2/plugins/audit/blind_sqli.py
branches/threading2/plugins/audit/buffer_overflow.py
branches/threading2/plugins/audit/cors_origin.py
branches/threading2/plugins/audit/csrf.py
branches/threading2/plugins/audit/dav.py
branches/threading2/plugins/audit/eval.py
branches/threading2/plugins/audit/file_upload.py
branches/threading2/plugins/audit/format_string.py
branches/threading2/plugins/audit/frontpage.py
branches/threading2/plugins/audit/generic.py
branches/threading2/plugins/audit/global_redirect.py
branches/threading2/plugins/audit/htaccess_methods.py
branches/threading2/plugins/audit/ldapi.py
branches/threading2/plugins/audit/lfi.py
branches/threading2/plugins/audit/mx_injection.py
branches/threading2/plugins/audit/os_commanding.py
branches/threading2/plugins/audit/phishing_vector.py
branches/threading2/plugins/audit/preg_replace.py
branches/threading2/plugins/audit/redos.py
branches/threading2/plugins/audit/response_splitting.py
branches/threading2/plugins/audit/rfi.py
branches/threading2/plugins/audit/sqli.py
branches/threading2/plugins/audit/ssi.py
branches/threading2/plugins/audit/ssl_certificate.py
branches/threading2/plugins/audit/xpath.py
branches/threading2/plugins/audit/xss.py
branches/threading2/profiles/OWASP_TOP10.pw3af
branches/threading2/profiles/full_audit.pw3af
branches/threading2/profiles/full_audit_spider_man.pw3af
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 22:58:31
|
Revision: 6596
http://w3af.svn.sourceforge.net/w3af/?rev=6596&view=rev
Author: andresriancho
Date: 2013-01-02 22:58:24 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Cosmetic
Modified Paths:
--------------
branches/threading2/core/ui/gui/reqResViewer.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 22:13:47
|
Revision: 6595
http://w3af.svn.sourceforge.net/w3af/?rev=6595&view=rev
Author: andresriancho
Date: 2013-01-02 22:13:41 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Added unittest for _audit_return_vulns_in_caller
Added Paths:
-----------
branches/threading2/core/controllers/plugins/tests/test_audit_plugin.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 22:13:15
|
Revision: 6594
http://w3af.svn.sourceforge.net/w3af/?rev=6594&view=rev
Author: andresriancho
Date: 2013-01-02 22:13:09 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
A more generic variable name
Modified Paths:
--------------
branches/threading2/core/controllers/plugins/audit_plugin.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 21:58:10
|
Revision: 6593
http://w3af.svn.sourceforge.net/w3af/?rev=6593&view=rev
Author: andresriancho
Date: 2013-01-02 21:58:04 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Cosmetic PEP8 changes
Modified Paths:
--------------
branches/threading2/core/data/url/HTTPResponse.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 21:57:13
|
Revision: 6592
http://w3af.svn.sourceforge.net/w3af/?rev=6592&view=rev
Author: andresriancho
Date: 2013-01-02 21:57:06 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Enhancing plugin to detect when there is a redirect. I found a case where the http was doing a 301 to http and the https was doing a 302 to an internal path, so both bodies were the same but there was no vulnerability
Modified Paths:
--------------
branches/threading2/plugins/audit/un_ssl.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 18:42:08
|
Revision: 6591
http://w3af.svn.sourceforge.net/w3af/?rev=6591&view=rev
Author: andresriancho
Date: 2013-01-02 18:42:02 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Cosmetic
Modified Paths:
--------------
branches/threading2/plugins/grep/lang.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 18:41:19
|
Revision: 6590
http://w3af.svn.sourceforge.net/w3af/?rev=6590&view=rev
Author: andresriancho
Date: 2013-01-02 18:41:12 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Fixing bugs like "An exception was found while running grep.lang on "https://domain/tiendas/node/3739/lightbox2 | Method: GET". The exception was: "'NoneType' object has no attribute 'lower'" at lang.py:93. The scan will continue but some vulnerabilities might not be identified."
Modified Paths:
--------------
branches/threading2/core/data/url/HTTPResponse.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 18:23:01
|
Revision: 6589
http://w3af.svn.sourceforge.net/w3af/?rev=6589&view=rev
Author: andresriancho
Date: 2013-01-02 18:22:55 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Fixing (?) encoding bug
Modified Paths:
--------------
branches/threading2/core/data/parsers/encode_decode.py
branches/threading2/core/data/parsers/tests/test_encode_decode.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 18:22:30
|
Revision: 6588
http://w3af.svn.sourceforge.net/w3af/?rev=6588&view=rev
Author: andresriancho
Date: 2013-01-02 18:22:23 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Better error handling
Modified Paths:
--------------
branches/threading2/core/data/db/temp_shelve.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 18:21:17
|
Revision: 6587
http://w3af.svn.sourceforge.net/w3af/?rev=6587&view=rev
Author: andresriancho
Date: 2013-01-02 18:21:11 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Removing deprecated feature
Modified Paths:
--------------
branches/threading2/w3af_console
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 17:02:24
|
Revision: 6586
http://w3af.svn.sourceforge.net/w3af/?rev=6586&view=rev
Author: andresriancho
Date: 2013-01-02 17:02:17 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Raising correct exception type (need to stop using w3afException for everything)
Modified Paths:
--------------
branches/threading2/core/controllers/core_helpers/fingerprint_404.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 17:01:27
|
Revision: 6585
http://w3af.svn.sourceforge.net/w3af/?rev=6585&view=rev
Author: andresriancho
Date: 2013-01-02 17:01:20 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Raising user stop request
Modified Paths:
--------------
branches/threading2/core/controllers/core_helpers/strategy.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 17:00:44
|
Revision: 6584
http://w3af.svn.sourceforge.net/w3af/?rev=6584&view=rev
Author: andresriancho
Date: 2013-01-02 17:00:37 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Avoid code duplication.
Modified Paths:
--------------
branches/threading2/core/data/db/temp_shelve.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 16:27:05
|
Revision: 6583
http://w3af.svn.sourceforge.net/w3af/?rev=6583&view=rev
Author: andresriancho
Date: 2013-01-02 16:26:58 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Fixing unittest for encoding URLs
Modified Paths:
--------------
branches/threading2/core/data/parsers/tests/test_encode_decode.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2013-01-02 15:30:36
|
Revision: 6582
http://w3af.svn.sourceforge.net/w3af/?rev=6582&view=rev
Author: andresriancho
Date: 2013-01-02 15:30:26 +0000 (Wed, 02 Jan 2013)
Log Message:
-----------
Modifications to allow w3af to run on a server without gtk installed.
Modified Paths:
--------------
branches/threading2/core/controllers/easy_contribution/sourceforge.py
branches/threading2/core/controllers/exception_handling/helpers.py
branches/threading2/core/ui/gui/main.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2012-12-31 22:59:40
|
Revision: 6578
http://w3af.svn.sourceforge.net/w3af/?rev=6578&view=rev
Author: andresriancho
Date: 2012-12-31 22:59:34 +0000 (Mon, 31 Dec 2012)
Log Message:
-----------
Updated strings in unittest after changing vulnerability name/description
Modified Paths:
--------------
branches/threading2/core/ui/console/tests/test_scan_run.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|