Re: [sqlmap-users] w3af REST API recommendations

2014-03-21 Thread Andres Riancho
Thank you so much for the comments, they are going to be very helpful when building our API :) Love to see open source projects helping themselves On Fri, Mar 21, 2014 at 9:32 AM, Bernardo Damele A. G. wrote: > Hi Andres, > > The API is indeed "up and running for a while", but we haven't yet > p

Re: [sqlmap-users] w3af REST API recommendations

2014-03-21 Thread Bernardo Damele A. G.
Hi Andres, The API is indeed "up and running for a while", but we haven't yet properly documented yet so probably not as widely used as it could be. With regards to your questions: * Technology stack: we've decided to go with a RESTful API over XML-RPC for simplicity of protocol, ease of definit

Re: [sqlmap-users] w3af REST API recommendations

2014-03-20 Thread Miroslav Stampar
Great reply :) Bye On Mar 20, 2014 4:13 PM, "Brandon Perry" wrote: > I can't comment on building the API, but I maintain C# bindings to the > sqlmap REST API and, programmatically, it works really well. > > There is no authentication, but I only ever run it on localhost anyway so > this isn't a

Re: [sqlmap-users] w3af REST API recommendations

2014-03-20 Thread Andres Riancho
Thanks for your input Brandon, very useful! On Thu, Mar 20, 2014 at 12:12 PM, Brandon Perry wrote: > I can't comment on building the API, but I maintain C# bindings to the > sqlmap REST API and, programmatically, it works really well. > > There is no authentication, but I only ever run it on loca

Re: [sqlmap-users] w3af REST API recommendations

2014-03-20 Thread Brandon Perry
I can't comment on building the API, but I maintain C# bindings to the sqlmap REST API and, programmatically, it works really well. There is no authentication, but I only ever run it on localhost anyway so this isn't a big deal to me. I have tested it under relatively heavy load (one API instance

[sqlmap-users] w3af REST API recommendations

2014-03-20 Thread Andres Riancho
List, I'm going to abuse the list a little bit, and poke your brains for a while, so be prepared :) The w3af project wants to implement its own REST API to expose the w3afCore and KnowledgeBase objects. The core allows users to configure the plugins and start the scan, and the knowledge b