Re: [W3af-develop] [Idea] References in vuln object

2013-02-06 Thread Andres Riancho
List, It's been a long time but I've translated this thread into a Github issue that you might be interested in reading: https://github.com/andresriancho/w3af/issues/53 There's a company (still can't mention them because I haven't talked about how they want to handle this) that's

Re: [W3af-develop] [Idea] References in vuln object

2012-04-13 Thread Taras
Andres, > Ah! Now I understand your point. But if in the future we want to be > able to generate a full-blown report out of the data that w3af > produces we'll need to have the vulnerability description and fix > recommendations within our framework. > > I would do both things: > * v.addRefer

Re: [W3af-develop] [Idea] References in vuln object

2012-04-11 Thread Andres Riancho
Taras, On Sun, Apr 8, 2012 at 5:16 AM, Taras wrote: > Andres, > > please read inline > I have proposal to add references to KB vuln object. For example for XSS we can add references to: * CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scr

Re: [W3af-develop] [Idea] References in vuln object

2012-04-08 Thread Taras
Andres, please read inline >>> I have proposal to add references to KB vuln object. For example for XSS >>> we can add references to: >>> >>> * CWE-79: Improper Neutralization of Input During Web Page Generation >>> ('Cross-site Scripting') >>> * OWASP: https://www.owasp.org/index.php/Cross-site_S

Re: [W3af-develop] [Idea] References in vuln object

2012-04-04 Thread Andres Riancho
Taras, On Fri, Mar 23, 2012 at 4:29 PM, Andres Riancho wrote: > Taras, > > On Tue, Mar 20, 2012 at 5:07 PM, Taras wrote: >> Hi, all! >> >> I have proposal to add references to KB vuln object. For example for XSS >> we can add references to: >> >> * CWE-79: Improper Neutralization of Input During

Re: [W3af-develop] [Idea] References in vuln object

2012-03-23 Thread Andres Riancho
Taras, On Tue, Mar 20, 2012 at 5:07 PM, Taras wrote: > Hi, all! > > I have proposal to add references to KB vuln object. For example for XSS > we can add references to: > > * CWE-79: Improper Neutralization of Input During Web Page Generation > ('Cross-site Scripting') > * OWASP: https://www.owas

[W3af-develop] [Idea] References in vuln object

2012-03-20 Thread Taras
Hi, all! I have proposal to add references to KB vuln object. For example for XSS we can add references to: * CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') * OWASP: https://www.owasp.org/index.php/Cross-site_Scripting_(XSS) in xss.py it will looks