[W3af-develop] Netcraft plugin

2012-06-06 Thread guerrino.dima...@gmail.com
According to your suggestions i correct this plugin. Now should be ok. guerrino p.s. sorry for the dealy please drop me a line if everything is ok netcraft.py Description: Binary data -- Live Security Virtual Conferenc

[W3af-develop] sslCertificate - beta version

2012-06-06 Thread Taras
Andres, I just have committed beta version of sslCertificate [0]: * ca.pem moved to plugins/audit/sslCertificate/ * added correct check for SSLv2 * dump cert What we have in final...we've lost: * some useful information inside dump_x509 (digests, serial number, keys) What we have got: * minus

Re: [W3af-develop] sslCertificate - beta version

2012-06-06 Thread Andres Riancho
Taras, Just applied some changes to the plugin while reviewing it (see SVN server) and also: * v.setName('Invalid SSL connection') , should be an info() * Not 100% about this one, but v.setName('Invalid SSL certificate') also seems to be an info() * Try to make the descriptions for the info/v

Re: [W3af-develop] Netcraft plugin

2012-06-06 Thread Andres Riancho
Guerrino, On Wed, Jun 6, 2012 at 6:05 AM, guerrino.dima...@gmail.com wrote: > According to your suggestions i correct this plugin. Now should be ok. I just modified the plugin and commited it to the trunk, this is what I did before commit: * Added unit-tests in test_netcraft.py , thi

Re: [W3af-develop] sslCertificate - beta version

2012-06-06 Thread Taras
Andres, > Just applied some changes to the plugin while reviewing it (see > SVN server) Thanks! > and also: > > * v.setName('Invalid SSL connection') , should be an info() > * Not 100% about this one, but v.setName('Invalid SSL certificate') > also seems to be an info() I'm not sure that I

Re: [W3af-develop] [W3af-users] does w3af can scan the new vulnerabitiy HTML5 - ClickJacking attack detection

2012-06-06 Thread Andres Riancho
Ervis, Taras has been busy these days and he won't be able to complete the CSRF detection plugin for now, so I thought that you could help out. So, the basic setup you need to have to work on this is: * Download the latest code for the CSRF branch from the SVN: "svn co https://w3af.svn.source