Thread: [W3af-svn-notify] SF.net SVN: w3af:[1866] trunk (Page 2)
Status: Beta
Brought to you by:
andresriancho
From: <and...@us...> - 2008-10-12 18:21:31
|
Revision: 1866 http://w3af.svn.sourceforge.net/w3af/?rev=1866&view=rev Author: andresriancho Date: 2008-10-12 18:21:21 +0000 (Sun, 12 Oct 2008) Log Message: ----------- Starting to create the scripts to test for all types of javascript. Modified Paths: -------------- trunk/w3af.e4q trunk/w3af.e4t Added Paths: ----------- trunk/scripts/script-simple_xss.w3af Removed Paths: ------------- trunk/scripts/script-xssWithLogging.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-10-13 00:27:18
|
Revision: 1869 http://w3af.svn.sourceforge.net/w3af/?rev=1869&view=rev Author: andresriancho Date: 2008-10-13 00:27:14 +0000 (Mon, 13 Oct 2008) Log Message: ----------- The XSS detection was rewritten. I still need to test the stored XSS detection, but it should have any problems. Modified Paths: -------------- trunk/plugins/audit/xss.py trunk/profiles/OWASP_TOP10.pw3af trunk/profiles/fast_scan.pw3af trunk/profiles/full_audit.pw3af trunk/profiles/full_audit_manual_disc.pw3af trunk/w3af.e4p This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-10-17 03:37:33
|
Revision: 1881 http://w3af.svn.sourceforge.net/w3af/?rev=1881&view=rev Author: andresriancho Date: 2008-10-17 03:36:33 +0000 (Fri, 17 Oct 2008) Log Message: ----------- Added a new technique to the OS commanding plugin. From now on, I'll work with the idea of using several techniques to discover one type of vulnerability. No more silver bullets for me... I rather use the bazooka. Modified Paths: -------------- trunk/core/controllers/basePlugin/basePlugin.py trunk/plugins/audit/osCommanding.py trunk/scripts/script-osCommanding.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-10-26 12:20:16
|
Revision: 1901 http://w3af.svn.sourceforge.net/w3af/?rev=1901&view=rev Author: andresriancho Date: 2008-10-26 12:15:54 +0000 (Sun, 26 Oct 2008) Log Message: ----------- Fixed bug reported by Santiago Lopez Galanes, and added a simple comment to the privateIP plugin. Modified Paths: -------------- trunk/core/ui/gtkUi/kbtree.py trunk/plugins/grep/privateIP.py trunk/w3af.e4p trunk/w3af.e4q trunk/w3af.e4t This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-10-26 16:11:34
|
Revision: 1902 http://w3af.svn.sourceforge.net/w3af/?rev=1902&view=rev Author: andresriancho Date: 2008-10-26 16:11:29 +0000 (Sun, 26 Oct 2008) Log Message: ----------- Updated to the latest version of xdot, which works 10 times faster (Thanks Jose.R.Fonseca!). Changed the dependency tree of w3af in the documentation. Modified Paths: -------------- trunk/extlib/xdot/xdot.py trunk/readme/w3afUsersGuide.html trunk/readme/w3afUsersGuide.odt trunk/readme/w3afUsersGuide.pdf Added Paths: ----------- trunk/readme/w3afUsersGuide_html_m51b850c5.png Removed Paths: ------------- trunk/extlib/xdot/dot_parser.py trunk/extlib/xdot/pydot.py trunk/readme/w3afUsersGuide_html_440f522d.png This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-10-29 02:29:32
|
Revision: 1912 http://w3af.svn.sourceforge.net/w3af/?rev=1912&view=rev Author: andresriancho Date: 2008-10-29 02:29:28 +0000 (Wed, 29 Oct 2008) Log Message: ----------- Old files added to the project definition. Modified Paths: -------------- trunk/w3af.e4p trunk/w3af.e4q trunk/w3af.e4t This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-10-29 02:31:30
|
Revision: 1913 http://w3af.svn.sourceforge.net/w3af/?rev=1913&view=rev Author: andresriancho Date: 2008-10-29 02:31:26 +0000 (Wed, 29 Oct 2008) Log Message: ----------- Added a new check at the core startup, in order to verify if the home directory is writable or not. Modified the name of some functions, in order to comply with PEP8. Modified Paths: -------------- trunk/core/controllers/misc/homeDir.py trunk/core/controllers/w3afCore.py trunk/core/data/url/handlers/localCache.py trunk/core/data/url/handlers/logHandler.py trunk/core/data/url/xUrllib.py trunk/core/ui/gtkUi/clusterGraph.py trunk/core/ui/gtkUi/main.py trunk/core/ui/gtkUi/pluginconfig.py trunk/plugins/output/gtkOutput.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-10-29 14:38:39
|
Revision: 1924 http://w3af.svn.sourceforge.net/w3af/?rev=1924&view=rev Author: andresriancho Date: 2008-10-29 14:38:29 +0000 (Wed, 29 Oct 2008) Log Message: ----------- More test scripts, and fixing a couple of bugs. Modified Paths: -------------- trunk/plugins/grep/directoryIndexing.py trunk/plugins/grep/domXss.py Added Paths: ----------- trunk/scripts/script-directory_indexing.w3af Removed Paths: ------------- trunk/scripts/script-directoryIndexing.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-01 11:29:47
|
Revision: 1940 http://w3af.svn.sourceforge.net/w3af/?rev=1940&view=rev Author: andresriancho Date: 2008-11-01 11:29:44 +0000 (Sat, 01 Nov 2008) Log Message: ----------- Modified the code in a way that now I can check for w3af_core variables. Modified Paths: -------------- trunk/core/ui/consoleUi/menu.py trunk/scripts/script-html_textarea.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-08 17:44:37
|
Revision: 1976 http://w3af.svn.sourceforge.net/w3af/?rev=1976&view=rev Author: andresriancho Date: 2008-11-08 17:44:36 +0000 (Sat, 08 Nov 2008) Log Message: ----------- Added test page for password profiling, fixed bug in html password profiling plugin, prettyfied the code. Modified Paths: -------------- extras/testEnv/webroot/grep/password_profiling/index.html trunk/plugins/grep/passwordProfiling.py trunk/plugins/grep/passwordProfilingPlugins/html.py trunk/plugins/grep/passwordProfilingPlugins/pdf.py Added Paths: ----------- extras/testEnv/webroot/grep/password_profiling/ trunk/scripts/script-password_profiling.w3af Removed Paths: ------------- trunk/scripts/script-passwordProfiling.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-15 01:02:45
|
Revision: 2015 http://w3af.svn.sourceforge.net/w3af/?rev=2015&view=rev Author: andresriancho Date: 2008-11-15 01:02:34 +0000 (Sat, 15 Nov 2008) Log Message: ----------- Modified the way in which blind SQL injection detection is done. Now we also use time delays. Modified Paths: -------------- trunk/core/controllers/sql_tools/blind_sqli_response_diff.py trunk/core/controllers/sql_tools/blind_sqli_time_delay.py trunk/plugins/attack/mysqlWebShell.py trunk/plugins/attack/sqlmap.py trunk/plugins/audit/blindSqli.py trunk/plugins/audit/sqli.py trunk/scripts/script-bsqlDetection.w3af trunk/w3af.e4p trunk/w3af.e4q trunk/w3af.e4t Added Paths: ----------- trunk/core/data/constants/dbms.py This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-15 20:03:34
|
Revision: 2024 http://w3af.svn.sourceforge.net/w3af/?rev=2024&view=rev Author: andresriancho Date: 2008-11-15 20:03:24 +0000 (Sat, 15 Nov 2008) Log Message: ----------- Huge change to make the fileUpload plugin work again. I can't believe that this wasn't working! It's my fault, I never use ./w3af_console -t ... With all these changes I'm doing, the testing should be a lot faster and I could do it before commiting. Modified Paths: -------------- trunk/core/controllers/basePlugin/basePlugin.py trunk/core/data/dc/form.py trunk/core/data/fuzzer/fuzzer.py trunk/core/data/request/fuzzableRequest.py trunk/core/data/request/httpPostDataRequest.py trunk/core/data/url/handlers/MultipartPostHandler.py trunk/plugins/audit/fileUpload.py Added Paths: ----------- trunk/scripts/script-file_upload.w3af Removed Paths: ------------- trunk/scripts/script-fileUpload.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-15 22:02:08
|
Revision: 2030 http://w3af.svn.sourceforge.net/w3af/?rev=2030&view=rev Author: andresriancho Date: 2008-11-15 22:02:04 +0000 (Sat, 15 Nov 2008) Log Message: ----------- Pretty code. Modified Paths: -------------- trunk/plugins/audit/frontpage.py trunk/scripts/script-dotNetErrors.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-15 22:19:14
|
Revision: 2031 http://w3af.svn.sourceforge.net/w3af/?rev=2031&view=rev Author: andresriancho Date: 2008-11-15 22:19:11 +0000 (Sat, 15 Nov 2008) Log Message: ----------- Pretty code and tested scripts. Modified Paths: -------------- trunk/plugins/audit/generic.py trunk/scripts/script-generic-noMatch.w3af trunk/scripts/script-generic.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-15 22:38:23
|
Revision: 2033 http://w3af.svn.sourceforge.net/w3af/?rev=2033&view=rev Author: andresriancho Date: 2008-11-15 22:38:19 +0000 (Sat, 15 Nov 2008) Log Message: ----------- Pretty code, new test. Modified Paths: -------------- trunk/plugins/audit/globalRedirect.py Added Paths: ----------- trunk/scripts/script-global_redirect.w3af Removed Paths: ------------- trunk/scripts/script-globalRedirect.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-15 23:05:30
|
Revision: 2034 http://w3af.svn.sourceforge.net/w3af/?rev=2034&view=rev Author: andresriancho Date: 2008-11-15 23:05:26 +0000 (Sat, 15 Nov 2008) Log Message: ----------- Made the htaccessMethods plugin more performant. Pretty code. Renamed and tested the script. Modified Paths: -------------- trunk/plugins/audit/htaccessMethods.py Added Paths: ----------- trunk/scripts/script-htaccess_methods.w3af Removed Paths: ------------- trunk/scripts/script-htaccessMethods.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-18 00:27:07
|
Revision: 2043 http://w3af.svn.sourceforge.net/w3af/?rev=2043&view=rev Author: andresriancho Date: 2008-11-18 00:27:04 +0000 (Tue, 18 Nov 2008) Log Message: ----------- Preety plugin code. New w3af script test with correct assert statements. Renamed script to comply with new naming rules. Modified Paths: -------------- trunk/plugins/audit/osCommanding.py Added Paths: ----------- trunk/scripts/script-os_commanding.w3af Removed Paths: ------------- trunk/scripts/script-osCommanding.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-18 00:36:22
|
Revision: 2045 http://w3af.svn.sourceforge.net/w3af/?rev=2045&view=rev Author: andresriancho Date: 2008-11-18 00:36:20 +0000 (Tue, 18 Nov 2008) Log Message: ----------- Pretty code, nice script. Modified Paths: -------------- trunk/plugins/audit/phishingVector.py trunk/scripts/script-phishing_vector.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-18 00:43:50
|
Revision: 2046 http://w3af.svn.sourceforge.net/w3af/?rev=2046&view=rev Author: andresriancho Date: 2008-11-18 00:43:40 +0000 (Tue, 18 Nov 2008) Log Message: ----------- Almost without changes. Modified Paths: -------------- trunk/plugins/audit/preg_replace.py trunk/scripts/script-preg_replace.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-18 01:46:23
|
Revision: 2047 http://w3af.svn.sourceforge.net/w3af/?rev=2047&view=rev Author: andresriancho Date: 2008-11-18 01:46:20 +0000 (Tue, 18 Nov 2008) Log Message: ----------- Complete rewrite of the plugin. Adding test scripts for both techniques. Modified Paths: -------------- trunk/plugins/audit/remoteFileInclude.py Added Paths: ----------- trunk/scripts/script-remote_file_include_local_ws.w3af trunk/scripts/script-remote_file_include_w3af_site.w3af Removed Paths: ------------- trunk/scripts/script-remoteFileInclude.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-18 16:12:51
|
Revision: 2051 http://w3af.svn.sourceforge.net/w3af/?rev=2051&view=rev Author: andresriancho Date: 2008-11-18 16:12:47 +0000 (Tue, 18 Nov 2008) Log Message: ----------- Pretty plugin code. Modified w3af script to work with new test site. The test site still needs some work to be complete. Renamed sql+sqlmap to sqlmap. The idea is that we have one script to test one plugin. Modified Paths: -------------- trunk/plugins/audit/sqli.py Added Paths: ----------- trunk/scripts/script-sqli.w3af trunk/scripts/script-sqlmap.w3af Removed Paths: ------------- trunk/scripts/script-sqli_+_sqlmap.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-19 01:59:56
|
Revision: 2053 http://w3af.svn.sourceforge.net/w3af/?rev=2053&view=rev Author: andresriancho Date: 2008-11-19 01:59:46 +0000 (Wed, 19 Nov 2008) Log Message: ----------- Pretty code, updated w3af test script. Modified Paths: -------------- trunk/plugins/audit/xst.py trunk/scripts/script-xst.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-19 02:42:59
|
Revision: 2058 http://w3af.svn.sourceforge.net/w3af/?rev=2058&view=rev Author: andresriancho Date: 2008-11-19 02:42:56 +0000 (Wed, 19 Nov 2008) Log Message: ----------- Updating to reflect some files being added to the project. Modified Paths: -------------- trunk/w3af.e4p trunk/w3af.e4q trunk/w3af.e4t This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-19 13:06:21
|
Revision: 2061 http://w3af.svn.sourceforge.net/w3af/?rev=2061&view=rev Author: andresriancho Date: 2008-11-19 13:06:17 +0000 (Wed, 19 Nov 2008) Log Message: ----------- Starting with the discovery plugins. This is going to be a hard task! Pretty code, test script, removed some false positives in the plugin when the page is dynamic. Modified Paths: -------------- trunk/plugins/discovery/afd.py trunk/scripts/script-afd.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <and...@us...> - 2008-11-19 13:56:07
|
Revision: 2063 http://w3af.svn.sourceforge.net/w3af/?rev=2063&view=rev Author: andresriancho Date: 2008-11-19 13:55:57 +0000 (Wed, 19 Nov 2008) Log Message: ----------- Pretty code, new test scripts. Modified Paths: -------------- trunk/plugins/discovery/allowedMethods.py Added Paths: ----------- trunk/scripts/script-allowed_methods.w3af trunk/scripts/script-allowed_methods_dav.w3af Removed Paths: ------------- trunk/scripts/script-allowedMethods.w3af This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |