w3af-users

[W3af-users] using spider_man with W3AF and Docker

[Vojtěch P. <kr...@gm...>]

Greetings,
I need to use spider_man plugin for my testing. I am running W3AF within
Docker on Windows server 2012.
I run something like
docker run -p 44444:44444: ... andresriancho/w3af
But I can't get the proxy to work properly. I tried every possible
combination. In W3AF's config, I used container localhost and container
IP address. In my browser, I used host's localhost and also IP address
of the docker machine. Nothing works. Does the port need to be exposed
in the docker file to get this working?
Could you please help me? I can not continue without using spider_man.
Thanks,
Vojta

Re: [W3af-users] using spider_man with W3AF and Docker

[Andres R. <and...@gm...>]

Vojta,

    Please read answers inline:

On Wed, Dec 9, 2015 at 12:46 PM, Vojtěch Polášek <kr...@gm...> wrote:
> Greetings,
> I need to use spider_man plugin for my testing. I am running W3AF within
> Docker on Windows server 2012.

    Awesome!

> I run something like
> docker run -p 44444:44444: ... andresriancho/w3af

    That sounds like the right way to run the program to get the port
to be exposed.

> But I can't get the proxy to work properly. I tried every possible
> combination. In W3AF's config, I used container localhost and container
> IP address. In my browser, I used host's localhost and also IP address
> of the docker machine. Nothing works. Does the port need to be exposed
> in the docker file to get this working?

    I never tried it myself, but once you start the scan, and if
-p44444:44444 is used, you should be able to connect from your windows
host to 127.0.0.1:44444

> Could you please help me? I can not continue without using spider_man.
> Thanks,
> Vojta
>
> ------------------------------------------------------------------------------
> _______________________________________________
> W3af-users mailing list
> W3a...@li...
> https://lists.sourceforge.net/lists/listinfo/w3af-users



-- 
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3

Re: [W3af-users] using spider_man with W3AF and Docker

[Vojtěch P. <kr...@gm...>]

Hi,
Thanks for replies. One more question: which address to configure for
spider_man? I think that I should use the address of the ethernet
interface of the container, not the localhost, right?
Thanks,
Vojta

Dne 10.12.2015 v 13:47 Andres Riancho napsal(a):
> Vojta,
>
>     Please read answers inline:
>
> On Wed, Dec 9, 2015 at 12:46 PM, Vojtěch Polášek <kr...@gm...> wrote:
>> Greetings,
>> I need to use spider_man plugin for my testing. I am running W3AF within
>> Docker on Windows server 2012.
>     Awesome!
>
>> I run something like
>> docker run -p 44444:44444: ... andresriancho/w3af
>     That sounds like the right way to run the program to get the port
> to be exposed.
>
>> But I can't get the proxy to work properly. I tried every possible
>> combination. In W3AF's config, I used container localhost and container
>> IP address. In my browser, I used host's localhost and also IP address
>> of the docker machine. Nothing works. Does the port need to be exposed
>> in the docker file to get this working?
>     I never tried it myself, but once you start the scan, and if
> -p44444:44444 is used, you should be able to connect from your windows
> host to 127.0.0.1:44444
>
>> Could you please help me? I can not continue without using spider_man.
>> Thanks,
>> Vojta
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> W3af-users mailing list
>> W3a...@li...
>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
>