Re: [W3af-users] using spider_man with W3AF and Docker

[Vojtěch Polášek]

Hi,
Thanks for replies. One more question: which address to configure for
spider_man? I think that I should use the address of the ethernet
interface of the container, not the localhost, right?
Thanks,
Vojta

Dne 10.12.2015 v 13:47 Andres Riancho napsal(a):
> Vojta,
>
> Please read answers inline:
>
> On Wed, Dec 9, 2015 at 12:46 PM, Vojtěch Polášek  wrote:
>> Greetings,
>> I need to use spider_man plugin for my testing. I am running W3AF within
>> Docker on Windows server 2012.
> Awesome!
>
>> I run something like
>> docker run -p 4:4: ... andresriancho/w3af
> That sounds like the right way to run the program to get the port
> to be exposed.
>
>> But I can't get the proxy to work properly. I tried every possible
>> combination. In W3AF's config, I used container localhost and container
>> IP address. In my browser, I used host's localhost and also IP address
>> of the docker machine. Nothing works. Does the port need to be exposed
>> in the docker file to get this working?
> I never tried it myself, but once you start the scan, and if
> -p4:4 is used, you should be able to connect from your windows
> host to 127.0.0.1:4
>
>> Could you please help me? I can not continue without using spider_man.
>> Thanks,
>> Vojta
>>
>> --
>> ___
>> W3af-users mailing list
>> W3af-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
>


--
___
W3af-users mailing list
W3af-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-users

Re: [W3af-users] using spider_man with W3AF and Docker

[Andres Riancho]

Vojta,

Please read answers inline:

On Wed, Dec 9, 2015 at 12:46 PM, Vojtěch Polášek  wrote:
> Greetings,
> I need to use spider_man plugin for my testing. I am running W3AF within
> Docker on Windows server 2012.

Awesome!

> I run something like
> docker run -p 4:4: ... andresriancho/w3af

That sounds like the right way to run the program to get the port
to be exposed.

> But I can't get the proxy to work properly. I tried every possible
> combination. In W3AF's config, I used container localhost and container
> IP address. In my browser, I used host's localhost and also IP address
> of the docker machine. Nothing works. Does the port need to be exposed
> in the docker file to get this working?

I never tried it myself, but once you start the scan, and if
-p4:4 is used, you should be able to connect from your windows
host to 127.0.0.1:4

> Could you please help me? I can not continue without using spider_man.
> Thanks,
> Vojta
>
> --
> ___
> W3af-users mailing list
> W3af-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-users



-- 
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3

--
___
W3af-users mailing list
W3af-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-users

[W3af-users] using spider_man with W3AF and Docker

[Vojtěch Polášek]

Greetings,
I need to use spider_man plugin for my testing. I am running W3AF within
Docker on Windows server 2012.
I run something like
docker run -p 4:4: ... andresriancho/w3af
But I can't get the proxy to work properly. I tried every possible
combination. In W3AF's config, I used container localhost and container
IP address. In my browser, I used host's localhost and also IP address
of the docker machine. Nothing works. Does the port need to be exposed
in the docker file to get this working?
Could you please help me? I can not continue without using spider_man.
Thanks,
Vojta

--
___
W3af-users mailing list
W3af-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-users