w3af-svn-notify Mailing List for w3af (Page 255)
Status: Beta
Brought to you by:
andresriancho
You can subscribe to this list here.
2008 |
Jan
|
Feb
(235) |
Mar
(336) |
Apr
(280) |
May
(278) |
Jun
(159) |
Jul
(270) |
Aug
(240) |
Sep
(121) |
Oct
(110) |
Nov
(199) |
Dec
(228) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2009 |
Jan
(251) |
Feb
(206) |
Mar
(115) |
Apr
(45) |
May
(27) |
Jun
(67) |
Jul
(49) |
Aug
(38) |
Sep
(10) |
Oct
(131) |
Nov
(89) |
Dec
(38) |
2010 |
Jan
(85) |
Feb
(71) |
Mar
(45) |
Apr
(23) |
May
(12) |
Jun
|
Jul
(11) |
Aug
(7) |
Sep
(81) |
Oct
(79) |
Nov
(165) |
Dec
(62) |
2011 |
Jan
(134) |
Feb
(73) |
Mar
(34) |
Apr
(63) |
May
(147) |
Jun
(43) |
Jul
(21) |
Aug
(26) |
Sep
(43) |
Oct
(34) |
Nov
(44) |
Dec
(112) |
2012 |
Jan
(47) |
Feb
(44) |
Mar
(72) |
Apr
(209) |
May
(54) |
Jun
(279) |
Jul
(151) |
Aug
(332) |
Sep
(39) |
Oct
(268) |
Nov
(116) |
Dec
(368) |
2013 |
Jan
(73) |
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: SourceForge.net <no...@so...> - 2008-04-05 19:08:46
|
Task #146771 has been updated. Project: w3af Subproject: gtkUi - Phase 3 Summary: Profiles in scan configuration tab Complete: 95% Status: Open Authority : andresriancho Assigned to: andresriancho Description: They should be to the left of the plugin configuration. Profiles can be copied (not cloned) from the user interface. When starting a scan, the UI should notice a change in the profile and fire up a dialog to save the profile. This task depends on "Tabs refactoring" and in Andres creating the "Profile feature" in the core. Maybe this won't happend in a short time. Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 16:08 By: facundobatista Comment: Done regarding GUI stuff. But from the Core, there're two problems: 1. Get the already in place fast_scan profile. Select it. Enable all plugins. Save the profile. Exit and enter w3af again. Select fast_scan- All plugins are selected, :). Unselect them all. Save. Exit and enter w3af. Select fast_scan. See? 2. Enter w3af. On "empty default" profile, enable all "grep" plugins. Save it to a new profile. See? ------------------------------------------------------- Date: 2008-04-05 11:40 By: facundobatista Comment: Now in saveProfile and in saveAsProfile, first save the status to the Core (exactly as I did before the startScan), but the core crashes when saving: Traceback (most recent call last): File "/home/facundo/devel/reps/w3af/core/ui/gtkUi/main.py", line 172, in <lambda> ('Save', gtk.STOCK_SAVE, '_Save', None, 'Save this configuration', lambda w: self.profileAction("save")), File "/home/facundo/devel/reps/w3af/core/ui/gtkUi/main.py", line 531, in profileAction method() File "/home/facundo/devel/reps/w3af/core/ui/gtkUi/profiles.py", line 302, in saveProfile self.w3af.saveCurrentToProfile( profileName ) File "/home/facundo/devel/reps/w3af/core/controllers/w3afCore.py", line 905, in saveCurrentToProfile newProfile.setPluginOptions( pType, pName, self.getPluginOptions( pType, pName ) ) File "/home/facundo/devel/reps/w3af/core/data/profile/profile.py", line 155, in setPluginOptions for option in options.keys(): AttributeError: 'NoneType' object has no attribute 'keys' Also I'm asking for a description. ------------------------------------------------------- Date: 2008-04-04 21:42 By: andresriancho Comment: Ok, the core features needed for profiles is done. PLEASE read the FIXME comments in profiles.py; we have some problems there that should be fixed by you. Core features done in r917. ------------------------------------------------------- Date: 2008-04-03 20:02 By: facundobatista Comment: Transform the "copyProfile" method to something like "saveCurrentConfigurationAsNewProfile" (but, with a shorter name, :p ). ------------------------------------------------------- Date: 2008-03-24 23:24 By: facundobatista Comment: All is done except calling some core methods that still to be implemented: - Save the profile - Save the actual state in a new profile - Delete a profile Bug #1924832 is open regarding this. When that's closed, this task could be reassigned to me. ------------------------------------------------------- Date: 2008-03-22 05:19 By: facundobatista Comment: Closer.... ------------------------------------------------------- Date: 2008-03-22 03:27 By: facundobatista Comment: Major structural changes are done, now I need to deal with the profile actions. ------------------------------------------------------- Date: 2008-03-10 21:47 By: facundobatista Comment: As talked with Andres, you will not be able to change Profile if you didn't save it before. ------------------------------------------------------- Date: 2008-03-10 13:21 By: facundobatista Comment: Advanced a little. Lack of support from the core makes it impossible to continue. Andres, I'm assigning this to you, as we need to talk about this: or more support from the core is added, or profiles should be re-designed. ------------------------------------------------------- Date: 2008-03-02 14:20 By: andresriancho Comment: Loading of profiles based on ini files already work in the consoleUi. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146771&group_id=170274&group_project_id=55113 |
From: SourceForge.net <no...@so...> - 2008-04-05 19:08:17
|
Task #147536 has been updated. Project: w3af Subproject: documentation Summary: Howto - Perform a fast scan Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: This should be a step by step guide on how to find the low hanging fruits. This is done by using two simple discovery plugins: webSpider, yahooSiteExplorer and if the site has a lot of javascript the documentation should recommend the usage of spiderMan; and finally the documentation should encourage the user to enable all grep plugins (document that they don't affect the run time because they don't send requests!) and all audit plugins, in order to FIND those vulns. Objective: Let the user know how to perform a fast scan. User interface: consoleUi (./w3af) ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147536&group_id=170274&group_project_id=56046 |
From: <fac...@us...> - 2008-04-05 18:52:03
|
Revision: 924 http://w3af.svn.sourceforge.net/w3af/?rev=924&view=rev Author: facundobatista Date: 2008-04-05 11:52:00 -0700 (Sat, 05 Apr 2008) Log Message: ----------- Two details. Modified Paths: -------------- trunk/core/ui/gtkUi/profiles.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-04-05 18:50:55
|
Task #147529 has been updated. Project: w3af Subproject: documentation Summary: Howto - Exploit sql injections Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: This should be a step by step guide on how to exploit the [blind]sql injections that are found by the audit plugins. Objective: Let the user know about the usage of sqlmap and it's options. User interface: consoleUi (./w3af) ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147529&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 18:50:47
|
Task #147531 has been updated. Project: w3af Subproject: documentation Summary: Howto - Find XSS vulnerabilities Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: This should be a step by step guide on how to find XSS vulnerabilities. Objective: Let the user know about the usage of audit.xss and it's options. User interface: consoleUi (./w3af) ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147531&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 18:50:41
|
Task #147532 has been updated. Project: w3af Subproject: documentation Summary: Howto - map the remote HTTP infrastructure Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: This should be a step by step guide on how to: - identify reverse proxies - identify transparent proxies - identify web application firewalls - identify active filters - identify the remote http server (hmap) - identify HTTP load balancers (halberd) Objective: Let the user know how the framework can be used to map the remote HTTP infrastructure. User interface: consoleUi (./w3af) ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147532&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 18:50:30
|
Task #147533 has been updated. Project: w3af Subproject: documentation Summary: Howto - Find subdomains Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: This should be a step by step guide on how to find subdomains and other domains that are hosted on the same host. Objective: Let the user know about the existence and usage of discovery.findvhost. User interface: consoleUi (./w3af) Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 10:48 By: andresriancho Comment: discovery.sharedHosting is also important and should be mentioned here. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147533&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 18:49:50
|
Task #147530 has been updated. Project: w3af Subproject: documentation Summary: Howto - find [blind] sql injections Complete: 0% Status: Open Authority : andresriancho Assigned to: pbhola Description: This should be a step by step guide on how to find [blind] sql injections on a web application. Objective: Let the user know how to use bSqli and sqli User interface: consoleUi (./w3af) ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147530&group_id=170274&group_project_id=56046 |
From: <fac...@us...> - 2008-04-05 18:47:03
|
Revision: 923 http://w3af.svn.sourceforge.net/w3af/?rev=923&view=rev Author: facundobatista Date: 2008-04-05 11:46:58 -0700 (Sat, 05 Apr 2008) Log Message: ----------- All profile stuff finished. Modified Paths: -------------- trunk/core/ui/gtkUi/main.py trunk/core/ui/gtkUi/profiles.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-04-05 18:42:44
|
Task #147535 has been updated. Project: w3af Subproject: documentation Summary: Howto - Analyze sites with javascript Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: This should be a step by step guide on how to analyze web applications that heavily rely on javascript. This is mostly a "you should use discovery.spiderMan" howto. Objective: Let the user know about the existence and usage of discovery.spiderMan. User interface: consoleUi (./w3af) See scripts: scripts/script-spiderMan.w3af Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 14:41 By: andresriancho Comment: Make some references about web2.0, and that spiderMan can also handle them. Test this and take some screenshots if necessary. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147535&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 18:42:30
|
Task #147541 has been updated. Project: w3af Subproject: documentation Summary: Create a HOWTO skeleton, so others can fill in the blanks Complete: 0% Status: Open Authority : andresriancho Assigned to: pbhola Description: Create a HOWTO skeleton, so others can fill in the blanks. Please create a HOWTO skeleton, so others can work based on it. After creating the first version, please send it to the dev list so it can be reviewed. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147541&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 18:42:07
|
Task #147537 has been updated. Project: w3af Subproject: documentation Summary: Update installation procedure Complete: 0% Status: Open Authority : andresriancho Assigned to: blombo Description: Update installation procedure, keep in mind that for windows we will have an w3af-setup.exe with all the dependencies included. Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 15:42 By: andresriancho Comment: Martin(blombo) is going to start with Mac install. ------------------------------------------------------- Date: 2008-04-05 13:35 By: andresriancho Comment: Windows install: Don't do it until we have the installer. All the other ones: Go ahead, a good starting point is the documentation I wrote some time ago. Keep in mind that utidy isn't a dependency anymore; and that most dependencies are inside the extlib directory. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147537&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 18:39:18
|
Task #147541 has been updated. Project: w3af Subproject: documentation Summary: Create a HOWTO skeleton, so others can fill in the blanks Complete: 0% Status: Open Authority : andresriancho Assigned to: pbhola Description: Create a HOWTO skeleton, so others can fill in the blanks. Please create a HOWTO skeleton, so others can work based on it. After creating the first version, please send it to the dev list so it can be reviewed. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147541&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 17:41:02
|
Task #147535 has been updated. Project: w3af Subproject: documentation Summary: Howto - Analyze sites with javascript Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: This should be a step by step guide on how to analyze web applications that heavily rely on javascript. This is mostly a "you should use discovery.spiderMan" howto. Objective: Let the user know about the existence and usage of discovery.spiderMan. User interface: consoleUi (./w3af) See scripts: scripts/script-spiderMan.w3af Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 14:41 By: andresriancho Comment: Make some references about web2.0, and that spiderMan can also handle them. Test this and take some screenshots if necessary. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147535&group_id=170274&group_project_id=56046 |
From: <and...@us...> - 2008-04-05 16:39:07
|
Revision: 922 http://w3af.svn.sourceforge.net/w3af/?rev=922&view=rev Author: andresriancho Date: 2008-04-05 09:39:00 -0700 (Sat, 05 Apr 2008) Log Message: ----------- Added an error signature to errorPages. Modified Paths: -------------- trunk/plugins/grep/errorPages.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-04-05 16:36:58
|
Task #147539 has been updated. Project: w3af Subproject: documentation Summary: interact/endInteraction Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: The documentation of the exploit section commands is outdated. We should modify the existing ! ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147539&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 16:35:31
|
Task #147537 has been updated. Project: w3af Subproject: documentation Summary: Update installation procedure Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: Update installation procedure, keep in mind that for windows we will have an w3af-setup.exe with all the dependencies included. Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 13:35 By: andresriancho Comment: Windows install: Don't do it until we have the installer. All the other ones: Go ahead, a good starting point is the documentation I wrote some time ago. Keep in mind that utidy isn't a dependency anymore; and that most dependencies are inside the extlib directory. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147537&group_id=170274&group_project_id=56046 |
From: SourceForge.net <no...@so...> - 2008-04-05 16:28:51
|
Task #147538 has been updated. Project: w3af Subproject: gtkUi - Phase 3 Summary: target-less profiles in gtkUi Complete: 100% Status: Closed Authority : andresriancho Assigned to: nobody Description: I should be able to create a profile that has no target. Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 13:28 By: facundobatista Comment: Done in r921. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147538&group_id=170274&group_project_id=55113 |
From: <fac...@us...> - 2008-04-05 16:28:20
|
Revision: 921 http://w3af.svn.sourceforge.net/w3af/?rev=921&view=rev Author: facundobatista Date: 2008-04-05 09:28:02 -0700 (Sat, 05 Apr 2008) Log Message: ----------- You can save the plugin with an invalid target. Modified Paths: -------------- trunk/core/ui/gtkUi/main.py trunk/core/ui/gtkUi/profiles.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-04-05 15:57:42
|
Task #146144 has been updated. Project: w3af Subproject: gtkUi - Phase 3 Summary: help menu items Complete: 100% Status: Closed Authority : facundobatista Assigned to: facundobatista Description: help menu items Follow-Ups: ------------------------------------------------------- Date: 2008-04-03 20:46 By: facundobatista Comment: - help: mostrar el readme/w3afUsersGuide.xhtml en un navegador. - about: show the splash, a text with the result of w3afCore.getVersion(), and a button to go to w3af.sf.net. ------------------------------------------------------- Date: 2008-03-29 15:55 By: facundobatista Comment: About: What information want to be shown? In which format? Help: In which format it should appear? Which doc? ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146144&group_id=170274&group_project_id=55113 |
From: <fac...@us...> - 2008-04-05 15:52:31
|
Revision: 920 http://w3af.svn.sourceforge.net/w3af/?rev=920&view=rev Author: facundobatista Date: 2008-04-05 08:52:25 -0700 (Sat, 05 Apr 2008) Log Message: ----------- We now have Help and About dialogs. Modified Paths: -------------- trunk/core/ui/gtkUi/main.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-04-05 15:16:16
|
Task #147538 has been updated. Project: w3af Subproject: gtkUi - Phase 3 Summary: target-less profiles in gtkUi Complete: 0% Status: Open Authority : andresriancho Assigned to: nobody Description: I should be able to create a profile that has no target. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147538&group_id=170274&group_project_id=55113 |
From: <and...@us...> - 2008-04-05 15:14:32
|
Revision: 919 http://w3af.svn.sourceforge.net/w3af/?rev=919&view=rev Author: andresriancho Date: 2008-04-05 08:14:27 -0700 (Sat, 05 Apr 2008) Log Message: ----------- Fixed a small bug in the gtkOutput plugin, and also a bug in the profile handling of the w3afCore . Modified Paths: -------------- trunk/core/controllers/w3afCore.py trunk/plugins/output/gtkOutput.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-04-05 14:40:23
|
Task #146771 has been updated. Project: w3af Subproject: gtkUi - Phase 3 Summary: Profiles in scan configuration tab Complete: 95% Status: Open Authority : andresriancho Assigned to: andresriancho Description: They should be to the left of the plugin configuration. Profiles can be copied (not cloned) from the user interface. When starting a scan, the UI should notice a change in the profile and fire up a dialog to save the profile. This task depends on "Tabs refactoring" and in Andres creating the "Profile feature" in the core. Maybe this won't happend in a short time. Follow-Ups: ------------------------------------------------------- Date: 2008-04-05 11:40 By: facundobatista Comment: Now in saveProfile and in saveAsProfile, first save the status to the Core (exactly as I did before the startScan), but the core crashes when saving: Traceback (most recent call last): File "/home/facundo/devel/reps/w3af/core/ui/gtkUi/main.py", line 172, in <lambda> ('Save', gtk.STOCK_SAVE, '_Save', None, 'Save this configuration', lambda w: self.profileAction("save")), File "/home/facundo/devel/reps/w3af/core/ui/gtkUi/main.py", line 531, in profileAction method() File "/home/facundo/devel/reps/w3af/core/ui/gtkUi/profiles.py", line 302, in saveProfile self.w3af.saveCurrentToProfile( profileName ) File "/home/facundo/devel/reps/w3af/core/controllers/w3afCore.py", line 905, in saveCurrentToProfile newProfile.setPluginOptions( pType, pName, self.getPluginOptions( pType, pName ) ) File "/home/facundo/devel/reps/w3af/core/data/profile/profile.py", line 155, in setPluginOptions for option in options.keys(): AttributeError: 'NoneType' object has no attribute 'keys' Also I'm asking for a description. ------------------------------------------------------- Date: 2008-04-04 21:42 By: andresriancho Comment: Ok, the core features needed for profiles is done. PLEASE read the FIXME comments in profiles.py; we have some problems there that should be fixed by you. Core features done in r917. ------------------------------------------------------- Date: 2008-04-03 20:02 By: facundobatista Comment: Transform the "copyProfile" method to something like "saveCurrentConfigurationAsNewProfile" (but, with a shorter name, :p ). ------------------------------------------------------- Date: 2008-03-24 23:24 By: facundobatista Comment: All is done except calling some core methods that still to be implemented: - Save the profile - Save the actual state in a new profile - Delete a profile Bug #1924832 is open regarding this. When that's closed, this task could be reassigned to me. ------------------------------------------------------- Date: 2008-03-22 05:19 By: facundobatista Comment: Closer.... ------------------------------------------------------- Date: 2008-03-22 03:27 By: facundobatista Comment: Major structural changes are done, now I need to deal with the profile actions. ------------------------------------------------------- Date: 2008-03-10 21:47 By: facundobatista Comment: As talked with Andres, you will not be able to change Profile if you didn't save it before. ------------------------------------------------------- Date: 2008-03-10 13:21 By: facundobatista Comment: Advanced a little. Lack of support from the core makes it impossible to continue. Andres, I'm assigning this to you, as we need to talk about this: or more support from the core is added, or profiles should be re-designed. ------------------------------------------------------- Date: 2008-03-02 14:20 By: andresriancho Comment: Loading of profiles based on ini files already work in the consoleUi. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146771&group_id=170274&group_project_id=55113 |
From: <fac...@us...> - 2008-04-05 14:38:43
|
Revision: 918 http://w3af.svn.sourceforge.net/w3af/?rev=918&view=rev Author: facundobatista Date: 2008-04-05 07:38:36 -0700 (Sat, 05 Apr 2008) Log Message: ----------- Now in saveProfile and in saveAsProfile, first save the status to the Core (exactly as I did before the startScan), but the core crashes when saving. Also I'm asking for a description. Modified Paths: -------------- trunk/core/ui/gtkUi/entries.py trunk/core/ui/gtkUi/main.py trunk/core/ui/gtkUi/profiles.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |