Re: [W3af-develop] Legal - Is is possible to distribute a VM with Windows inside?

2012-07-16 Thread Andres Riancho
Steve, On Mon, Jul 16, 2012 at 12:21 AM, Steven Pinkham wrote: > Andres Riancho wrote: >> List, >> >> Some w3af plugins are designed specifically for a Windows server >> (frontpage checks for example) and I would like to have a Windows VM >> with a vulnerable frontpage installed for testing.

Re: [W3af-develop] Legal - Is is possible to distribute a VM with Windows inside?

2012-07-16 Thread Andres Riancho
Steve, On Mon, Jul 16, 2012 at 8:32 AM, Andres Riancho wrote: > Steve, > > On Mon, Jul 16, 2012 at 12:21 AM, Steven Pinkham > wrote: >> Andres Riancho wrote: >>> List, >>> >>> Some w3af plugins are designed specifically for a Windows server >>> (frontpage checks for example) and I would like

Re: [W3af-develop] Legal - Is is possible to distribute a VM with Windows inside?

2012-07-16 Thread Steven Pinkham
Andres Riancho wrote: > > And this seems to be the only windows VM in the whole vmware marketplace: > https://solutionexchange.vmware.com/store/products/windows-7-rc-bagvapp > > Which would be a good option. I'm assuming that vmware wouldn't allow > an illegal VM to be in their marketplace, so it

Re: [W3af-develop] Legal - Is is possible to distribute a VM with Windows inside?

2012-07-16 Thread Andres Riancho
Steve, On Mon, Jul 16, 2012 at 8:53 AM, Steven Pinkham wrote: > Andres Riancho wrote: >> >> And this seems to be the only windows VM in the whole vmware marketplace: >> https://solutionexchange.vmware.com/store/products/windows-7-rc-bagvapp >> >> Which would be a good option. I'm assuming that vm

Re: [W3af-develop] XSS ideas

2012-07-16 Thread Andres Riancho
@Martin: Any comments on the code? @Taras: Where do we stand on this? Are we ready to merge to trunk? I'm very unhappy about this result [0] (which I know is my fault because of implementing such a basic XSS test in the first place) and I would love to see those numbers change and us move to the To

Re: [W3af-develop] XSS ideas

2012-07-16 Thread Martin Holst Swende
Hi! I've looked at it, but not tested it. I think the approach probably have a few drawbacks, but would like to do some testing to compare it with my variant and have tangible metrics to base opinions on... Not much time for that atm though... Skickat från min iPhone 16 jul 2012 kl. 15:53 skrev