w3af-svn-notify Mailing List for w3af (Page 271)
Status: Beta
Brought to you by:
andresriancho
You can subscribe to this list here.
2008 |
Jan
|
Feb
(235) |
Mar
(336) |
Apr
(280) |
May
(278) |
Jun
(159) |
Jul
(270) |
Aug
(240) |
Sep
(121) |
Oct
(110) |
Nov
(199) |
Dec
(228) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2009 |
Jan
(251) |
Feb
(206) |
Mar
(115) |
Apr
(45) |
May
(27) |
Jun
(67) |
Jul
(49) |
Aug
(38) |
Sep
(10) |
Oct
(131) |
Nov
(89) |
Dec
(38) |
2010 |
Jan
(85) |
Feb
(71) |
Mar
(45) |
Apr
(23) |
May
(12) |
Jun
|
Jul
(11) |
Aug
(7) |
Sep
(81) |
Oct
(79) |
Nov
(165) |
Dec
(62) |
2011 |
Jan
(134) |
Feb
(73) |
Mar
(34) |
Apr
(63) |
May
(147) |
Jun
(43) |
Jul
(21) |
Aug
(26) |
Sep
(43) |
Oct
(34) |
Nov
(44) |
Dec
(112) |
2012 |
Jan
(47) |
Feb
(44) |
Mar
(72) |
Apr
(209) |
May
(54) |
Jun
(279) |
Jul
(151) |
Aug
(332) |
Sep
(39) |
Oct
(268) |
Nov
(116) |
Dec
(368) |
2013 |
Jan
(73) |
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: SourceForge.net <no...@so...> - 2008-03-01 19:00:17
|
Task #145401 has been updated. Project: w3af Subproject: Plugin TODO v1.00 Summary: audit.sqli plugin avoids false positives Complete: 0% Status: Closed Authority : andresriancho Assigned to: andresriancho Description: audit.sqli plugin avoids false positives; and uses all known good techniques to speed up searches. All other plugins should look alike. copy+paste! Follow-Ups: ------------------------------------------------------- Date: 2008-03-01 16:00 By: andresriancho Comment: Done! ------------------------------------------------------- Date: 2008-02-25 08:08 By: andresriancho Comment: The only "problem" with the sqli plugin is that it doesn't verify if the error is there one or more times. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=145401&group_id=170274&group_project_id=50603 |
From: <and...@us...> - 2008-03-01 18:59:17
|
Revision: 768 http://w3af.svn.sourceforge.net/w3af/?rev=768&view=rev Author: andresriancho Date: 2008-03-01 10:59:11 -0800 (Sat, 01 Mar 2008) Log Message: ----------- Fixed simple bug in error search regex. Modified Paths: -------------- trunk/plugins/audit/ssi.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-03-01 18:52:01
|
Revision: 767 http://w3af.svn.sourceforge.net/w3af/?rev=767&view=rev Author: andresriancho Date: 2008-03-01 10:51:59 -0800 (Sat, 01 Mar 2008) Log Message: ----------- Audit plugins now use the best techniques to report information and evade false positives. Modified Paths: -------------- trunk/plugins/audit/LDAPi.py trunk/plugins/audit/localFileInclude.py trunk/plugins/audit/mxInjection.py trunk/plugins/audit/preg_replace.py trunk/plugins/audit/sqli.py trunk/plugins/audit/ssi.py trunk/plugins/audit/xpath.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <fac...@us...> - 2008-03-01 18:45:18
|
Revision: 766 http://w3af.svn.sourceforge.net/w3af/?rev=766&view=rev Author: facundobatista Date: 2008-03-01 10:45:10 -0800 (Sat, 01 Mar 2008) Log Message: ----------- Sorry, I forgot to add it, :( Added Paths: ----------- trunk/core/ui/gtkUi/logtab.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-03-01 18:10:51
|
Revision: 765 http://w3af.svn.sourceforge.net/w3af/?rev=765&view=rev Author: andresriancho Date: 2008-03-01 10:10:44 -0800 (Sat, 01 Mar 2008) Log Message: ----------- Search results are shown in a widget that is sized depending on the result size. Modified Paths: -------------- trunk/core/ui/gtkUi/httpLogTab.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-02-29 21:48:07
|
Revision: 764 http://w3af.svn.sourceforge.net/w3af/?rev=764&view=rev Author: andresriancho Date: 2008-02-29 13:48:02 -0800 (Fri, 29 Feb 2008) Log Message: ----------- HTTP Log Tab now is different; it shows request and response side by side instead of different tabs. Modified Paths: -------------- trunk/core/ui/gtkUi/httpLogTab.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-02-29 21:19:35
|
Task #146786 has been updated. Project: w3af Subproject: Package TODO Summary: screenshots on main site Complete: 0% Status: Open Authority : andresriancho Assigned to: andresriancho Description: screenshots on main site, I should have A LOT of them. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146786&group_id=170274&group_project_id=50604 |
From: <fac...@us...> - 2008-02-29 19:53:53
|
Revision: 763 http://w3af.svn.sourceforge.net/w3af/?rev=763&view=rev Author: facundobatista Date: 2008-02-29 11:53:50 -0800 (Fri, 29 Feb 2008) Log Message: ----------- Tab refactorin, very advanced, not finished. The code is usable in the start, wait until finished, clear, start sequence. Modified Paths: -------------- trunk/core/ui/gtkUi/entries.py trunk/core/ui/gtkUi/main.py trunk/core/ui/gtkUi/pluginconfig.py Removed Paths: ------------- trunk/core/ui/gtkUi/scantab.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-02-29 19:52:43
|
Task #146765 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: Tabs "refactoring" Complete: 25% Status: Open Authority : andresriancho Assigned to: facundobatista Description: First tab, "Scan config": Has the plugin configuration and the target settings. Target settings go up. Advanced settings button shouldn't say "Advanced", in order to be smaller and be in the same line with the URL and the Start Scan button. Order of this: "URL - ADV - Start Scan" Second Tab, Results: Has two tabs, one for the URLs and one for the "KB Explorer" (which I should rename to something nicer). Third Tab, Log: The message window. Fourth Tab, Exploit: Just like it looks right now; but without the log window. (or maybe the log window is there, but hidden by default ?!?!) Follow-Ups: ------------------------------------------------------- Date: 2008-02-29 16:52 By: facundobatista Comment: Initial reordering is done, a lot more is needed. The code is usable in the start, wait until finished, clear, start secuence. ------------------------------------------------------- Date: 2008-02-29 13:12 By: facundobatista Comment: Raising its priority, as the "running feedback" are broken. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146765&group_id=170274&group_project_id=55112 |
From: SourceForge.net <no...@so...> - 2008-02-29 18:43:35
|
Task #146765 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: Tabs "refactoring" Complete: 0% Status: Open Authority : andresriancho Assigned to: facundobatista Description: First tab, "Scan config": Has the plugin configuration and the target settings. Target settings go up. Advanced settings button shouldn't say "Advanced", in order to be smaller and be in the same line with the URL and the Start Scan button. Order of this: "URL - ADV - Start Scan" Second Tab, Results: Has two tabs, one for the URLs and one for the "KB Explorer" (which I should rename to something nicer). Third Tab, Log: The message window. Fourth Tab, Exploit: Just like it looks right now; but without the log window. (or maybe the log window is there, but hidden by default ?!?!) Follow-Ups: ------------------------------------------------------- Date: 2008-02-29 13:12 By: facundobatista Comment: Raising its priority, as the "running feedback" are broken. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146765&group_id=170274&group_project_id=55112 |
From: SourceForge.net <no...@so...> - 2008-02-29 17:02:53
|
Task #146782 has been updated. Project: w3af Subproject: gtkUi - Phase 3 Summary: Notebook tabs width Complete: 0% Status: Open Authority : facundobatista Assigned to: facundobatista Description: All tabs in the notebook should have the same width. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146782&group_id=170274&group_project_id=55113 |
From: SourceForge.net <no...@so...> - 2008-02-29 16:12:34
|
Task #146168 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: Pause scan Complete: 100% Status: Closed Authority : andresriancho Assigned to: facundobatista Description: Sessions were deprecated and "replaced" by a pause function. To pause the core just call w3afCore.pause( True ) , in order to continue with the work, call w3afCore.pause( False ). The pausing is NOT instantanious, the user will be able to see when the pause really "stopped" the core using the w3afCore.isRunning() method. Follow-Ups: ------------------------------------------------------- Date: 2008-02-29 13:11 By: facundobatista Comment: Done, commited in r762. This broke all other feedbacks about if the system is running, so I'm raising its priority. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146168&group_id=170274&group_project_id=55112 |
From: <fac...@us...> - 2008-02-29 16:12:01
|
Revision: 762 http://w3af.svn.sourceforge.net/w3af/?rev=762&view=rev Author: facundobatista Date: 2008-02-29 08:11:03 -0800 (Fri, 29 Feb 2008) Log Message: ----------- Task 146168. Pauses/unpauses the core. Note that this broke the other feedbacks until notebook tabs refactoring. Modified Paths: -------------- trunk/core/ui/gtkUi/main.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-02-29 14:30:28
|
Task #146773 has been updated. Project: w3af Subproject: TODO v1.10 Summary: Beep when vuln is found? Complete: 0% Status: Open Authority : andresriancho Assigned to: andresriancho Description: Beep when vuln is found? ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146773&group_id=170274&group_project_id=54341 |
From: SourceForge.net <no...@so...> - 2008-02-29 14:29:51
|
Task #145083 has been updated. Project: w3af Subproject: TODO v1.00 Summary: scan profiles - ini file Complete: 60% Status: Open Authority : andresriancho Assigned to: nobody Description: scan profiles, "fast scan", "complete scan", etc. Follow-Ups: ------------------------------------------------------- Date: 2008-02-08 22:29 By: andresriancho Comment: Must save cfg options in ini file!! ------------------------------------------------------- Date: 2007-12-31 14:47 By: andresriancho Comment: I need to do more scan profiles, but the code that handles all of it is finished. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=145083&group_id=170274&group_project_id=48542 |
From: SourceForge.net <no...@so...> - 2008-02-29 13:00:46
|
Task #146143 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: Right click on exploit plugin Complete: 100% Status: Closed Authority : facundobatista Assigned to: facundobatista Description: Configure parameters, that is "the same" class that url-settings. Follow-Ups: ------------------------------------------------------- Date: 2008-02-29 10:00 By: facundobatista Comment: Done, commited in r761. ------------------------------------------------------- Date: 2008-02-25 21:03 By: facundobatista Comment: When you make right button on an exploit plugin, a window whould appear with two options: - Configure: configure the plugin (pop up window) - Edit: same edit as in the other plugins ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146143&group_id=170274&group_project_id=55112 |
From: <fac...@us...> - 2008-02-29 12:59:46
|
Revision: 761 http://w3af.svn.sourceforge.net/w3af/?rev=761&view=rev Author: facundobatista Date: 2008-02-29 04:59:43 -0800 (Fri, 29 Feb 2008) Log Message: ----------- Right button on the exploit now lets you configure it (task 146143). Modified Paths: -------------- trunk/core/ui/gtkUi/exploittab.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-02-29 12:09:07
|
Task #146139 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: Right button on log window Complete: 100% Status: Closed Authority : andresriancho Assigned to: facundobatista Description: Remove options that are disabled. Add a find to that right click contextual menu. Follow-Ups: ------------------------------------------------------- Date: 2008-02-29 09:09 By: facundobatista Comment: Fixed and separated the functionality, commited in r760. ------------------------------------------------------- Date: 2008-02-28 23:02 By: andresriancho Comment: Functionality is finished, but: - Right button, "Find ..." doesn't work. Actually when I tested it I threw this exception: "TypeError: _build_search() takes exactly 1 argument (2 given)" which is fixed in revision 756 - Could this be more object oriented and be a superclass from which I could inherit? ------------------------------------------------------- Date: 2008-02-27 21:33 By: andresriancho Comment: The functionality is GREAT. Changed one little thing, instead of connecting self._find_next with "activate" I put "changed" (this is more "a la firefox"). The problem I see with the search as it was already implemented is that if I search for two different strings, the highlighting of the first one is still there when I search for the second one. And a rather visual problem, is that the X that closes the find is huuuuuge! =) If possible, please create a class that inherits from some gtk class; like gtk.TextView or something like that so I can use the search feature everywhere! ------------------------------------------------------- Date: 2008-02-27 16:35 By: facundobatista Comment: As of r743, most of the functionality is added. It actually needs some polish and cleanup, and the key bindings, but the rest works ok, :) ------------------------------------------------------- Date: 2008-02-27 10:03 By: facundobatista Comment: Added capture of the ctrl-F and alteration of contextual menu, commited in r742. I checked the standard programs in GTK, and the "find next" is ctrl-G, and also they have a "find previous", which is shift-ctrl-G. However it would be nice that F3 and shift-F3 also be supported. ------------------------------------------------------- Date: 2008-02-25 21:05 By: facundobatista Comment: Right button and Find, or CTRL-F, should bring a window to search. Right button and Find Next or F3 should search again. What's found whould be highlighted. Optional: Try to replicate the behaviour of Firefox (see if there's something already done about this). ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146139&group_id=170274&group_project_id=55112 |
From: <fac...@us...> - 2008-02-29 12:07:52
|
Revision: 760 http://w3af.svn.sourceforge.net/w3af/?rev=760&view=rev Author: facundobatista Date: 2008-02-29 04:07:47 -0800 (Fri, 29 Feb 2008) Log Message: ----------- Fixed small detail in the context menu, and separated the Find functionality from the Messages class. Modified Paths: -------------- trunk/core/ui/gtkUi/entries.py trunk/core/ui/gtkUi/messages.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-02-29 11:45:39
|
Task #146171 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: exploit <plugin> ; exploit * ; exploit * stopOnFirst Complete: 0% Status: Open Authority : andresriancho Assigned to: andresriancho Description: What is implemented and works perfect: exploit <pluginName> <vuln-id> What must be implemented in the near future: exploit <pluginName> exploit * exploit * stopOnFirst The "exploit <pluginName>" case should be handled like this: - User right clicks over an attack plugin, and a menu pop-ups. The menu should have: "Exploit all vulnerabilities" - When clicked, you just call exploitPluginInstance.exploit() To know how to handle the * cases please see: core/ui/consoleUi/exploit.py def _exploitAll( self, stopOnFirst = True ): If you copy+paste this code without modifications please let me know, so I create a file with it inside the framework so any modifications to that code impact all user interfaces. The * cases should be handled like this in the GUI: - In the menu were the "save session" and "resume session" buttons are (THAT SHOULD BE REMOVED BECAUSE THEY HAVE BEEN DEPRECATED) you should add a button that says "Exploit All". - When the user clicks on it a pop-up window should appear that says: "Are you sure you want to exploit all vulnerabilities using all exploits?". The options for the user are: "Yes/No" and in the window it should also be a checkbox that says: "Stop on first successfully exploited vulnerability" that is On by default. Follow-Ups: ------------------------------------------------------- Date: 2008-02-29 08:45 By: facundobatista Comment: Changing this to Andres: as we talk, he needs to make a small study to determine which use cases are more common and which are not normally executed, and then we should define the best interface to enable those use cases (then this task will come back to me). ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146171&group_id=170274&group_project_id=55112 |
From: <and...@us...> - 2008-02-29 02:14:23
|
Revision: 759 http://w3af.svn.sourceforge.net/w3af/?rev=759&view=rev Author: andresriancho Date: 2008-02-28 18:14:21 -0800 (Thu, 28 Feb 2008) Log Message: ----------- Reorganized sql injection error database. Modified Paths: -------------- trunk/plugins/audit/sqli.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-02-29 02:12:52
|
Revision: 758 http://w3af.svn.sourceforge.net/w3af/?rev=758&view=rev Author: andresriancho Date: 2008-02-28 18:12:51 -0800 (Thu, 28 Feb 2008) Log Message: ----------- Small change to start supporting sqlmap plugin in prompt.py Modified Paths: -------------- trunk/core/ui/gtkUi/prompt.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: SourceForge.net <no...@so...> - 2008-02-29 02:10:57
|
Task #146771 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: Profiles in scan configuration tab Complete: 0% Status: Open Authority : andresriancho Assigned to: facundobatista Description: They should be to the left of the plugin configuration. Profiles can be copied (not cloned) from the user interface. When starting a scan, the UI should notice a change in the profile and fire up a dialog to save the profile. This task depends on "Tabs refactoring" and in Andres creating the "Profile feature" in the core. Maybe this won't happend in a short time. ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146771&group_id=170274&group_project_id=55112 |
From: SourceForge.net <no...@so...> - 2008-02-29 02:10:01
|
Task #145514 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: render HTML responses Complete: 80% Status: Open Authority : andresriancho Assigned to: andresriancho Description: everywhere I can look at a HTML response, I should be able to render the response! Follow-Ups: ------------------------------------------------------- Date: 2008-02-25 11:43 By: facundobatista Comment: Added functionality to buttons, and a little of cleanup. Wanted to activate back/forward buttons only when corresponds, but can_go_forward() and can_go_back() always respond false. The only thing that's still missing is to automate the library directories set up, passing the Task to Andrés for this. ------------------------------------------------------- Date: 2008-02-17 20:51 By: andresriancho Comment: I have been trying to create environment variables that affect the current process; but I have failed. It seems that the solution to this problem is to create a "bash script" that calls w3af.py; where the bash script is the one that creates the environment variables, and w3af.py is really the one that performs all the work. If you know a more elegant solution, please let me know. Problems with this solution: - Windows? (may be solved by using a python scripts that runs w3af.py) - Adding a new file ------------------------------------------------------- Date: 2008-02-14 21:07 By: andresriancho Comment: I tested the latest version on a fully updated ubuntu gutsy and it only worked if runned like this: export LD_LIBRARY_PATH=/usr/lib/firefox && export MOZILLA_FIVE_HOME=/usr/lib/firefox && ./w3af -g (as you say in the code). As you say in the code, we should work on the automatic setup of the needed variables in order to be able to run w3af gtk user interface without all the other commands. ------------------------------------------------------- Date: 2008-02-14 16:23 By: facundobatista Comment: Made it work with the gtk embedded mozilla, but it proved to be very flaky (there're some bugs that causes segmentation fault in diverse systems). Repeat: now works, but I'll test "gtkhtml2"... if this works nicely, and renders the html ok, I'll stick with it. ------------------------------------------------------- Date: 2008-02-11 22:31 By: andresriancho Comment: Also test /var/lib/python-support/python2.5/gtk-2.0/gtkhtml2.so Seems to be *really* basic, but could work when gtkmozembed is not available. Also verify dependencies if using gtkhtml2. ------------------------------------------------------- Date: 2008-02-08 20:12 By: facundobatista Comment: test gtkmozembed ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=145514&group_id=170274&group_project_id=55112 |
From: SourceForge.net <no...@so...> - 2008-02-29 02:02:55
|
Task #146139 has been updated. Project: w3af Subproject: gtkUi - Phase 2 Summary: Right button on log window Complete: 90% Status: Open Authority : andresriancho Assigned to: facundobatista Description: Remove options that are disabled. Add a find to that right click contextual menu. Follow-Ups: ------------------------------------------------------- Date: 2008-02-28 23:02 By: andresriancho Comment: Functionality is finished, but: - Right button, "Find ..." doesn't work. Actually when I tested it I threw this exception: "TypeError: _build_search() takes exactly 1 argument (2 given)" which is fixed in revision 756 - Could this be more object oriented and be a superclass from which I could inherit? ------------------------------------------------------- Date: 2008-02-27 21:33 By: andresriancho Comment: The functionality is GREAT. Changed one little thing, instead of connecting self._find_next with "activate" I put "changed" (this is more "a la firefox"). The problem I see with the search as it was already implemented is that if I search for two different strings, the highlighting of the first one is still there when I search for the second one. And a rather visual problem, is that the X that closes the find is huuuuuge! =) If possible, please create a class that inherits from some gtk class; like gtk.TextView or something like that so I can use the search feature everywhere! ------------------------------------------------------- Date: 2008-02-27 16:35 By: facundobatista Comment: As of r743, most of the functionality is added. It actually needs some polish and cleanup, and the key bindings, but the rest works ok, :) ------------------------------------------------------- Date: 2008-02-27 10:03 By: facundobatista Comment: Added capture of the ctrl-F and alteration of contextual menu, commited in r742. I checked the standard programs in GTK, and the "find next" is ctrl-G, and also they have a "find previous", which is shift-ctrl-G. However it would be nice that F3 and shift-F3 also be supported. ------------------------------------------------------- Date: 2008-02-25 21:05 By: facundobatista Comment: Right button and Find, or CTRL-F, should bring a window to search. Right button and Find Next or F3 should search again. What's found whould be highlighted. Optional: Try to replicate the behaviour of Firefox (see if there's something already done about this). ------------------------------------------------------- For more info, visit: http://sourceforge.net/pm/task.php?func=detailtask&project_task_id=146139&group_id=170274&group_project_id=55112 |