Viktor, On Wed, Jan 21, 2009 at 9:46 AM, Viktor Gazdag <woodsp...@gmail.com> wrote: > 2009/1/21 Andres Riancho <andres.rian...@gmail.com> >> >> Sasha, >> >> On Wed, Jan 21, 2009 at 6:41 AM, Alexander Berezhnoy >> <alexander.berezh...@gmail.com> wrote: >> > Hi Andres! >> > >> > 2009/1/21 Andres Riancho <andres.rian...@gmail.com>: >> >> List, >> >> >> >> I've created a task in the TODO list for v1.0 some time ago, that >> >> basically says [0]: >> >> >> >> """I should separate discovery plugins into two different types: >> >> >> >> - The ones that find new URLs >> >> - The ones that find things about the site""" >> >> >> >> A clear example of a plugin that finds new URLs is the webSpider, >> >> and a clear example of a plugin that "finds things about the site" is >> >> the hmap plugin, which fingerprints the remote webserver. I've been >> >> thinking, and I'm pretty sure that w3af is going to have a plugin >> >> family called "crawl" for the plugins that "look like webSpider", >> >> but... I'm not sure how to call the other plugin family. Anybody has >> >> ideas? Please share =) >> > >> > Would not be reasonable then, to join the "grep" plugins with the >> > second new type ("The ones that find things about the site") >> >> No, because grep is passive and this new type is completely active. >> They do the work in different ways. >> >> > I'm agree with Steve that finding URL's and crawling them could be an >> > other task for the split. >> >> What about what I said about plugins that are run more than once, with >> different input, and always return the same result? >> >> > I think, we need to publish a complete plugin list and discuss their >> > classification. Probably, the same plugin could be dedicated to the >> > several groups. >> >> I disagree with the fact of having a plugin in more than one category. >> It would be a mess for the final user, and a mess in the core >> implementation. > > Active and passive discovery/reconnaissance or active and passive grope or > url harvest?
I'm sorry, but I fail to understand you. Could you rewrite that? Thanks! >> >> > Sasha. >> > >> > /////// >> > >> >> >> >> [0] >> >> https://sourceforge.net/pm/task.php?func=detailtask&project_task_id=147178&group_id=170274&group_project_id=48542 >> >> >> >> Cheers, >> >> -- >> >> Andres Riancho >> >> http://w3af.sourceforge.net/ >> >> Web Application Attack and Audit Framework >> >> >> >> >> >> ------------------------------------------------------------------------------ >> >> This SF.net email is sponsored by: >> >> SourcForge Community >> >> SourceForge wants to tell your story. >> >> http://p.sf.net/sfu/sf-spreadtheword >> >> _______________________________________________ >> >> W3af-develop mailing list >> >> W3af-develop@lists.sourceforge.net >> >> https://lists.sourceforge.net/lists/listinfo/w3af-develop >> >> >> > >> > >> > >> > -- >> > Alexander (Sasha) Berezhnoy >> > http://sandals-on-my-head.blogspot.com >> > >> >> >> >> -- >> Andres Riancho >> http://w3af.sourceforge.net/ >> Web Application Attack and Audit Framework >> >> >> ------------------------------------------------------------------------------ >> This SF.net email is sponsored by: >> SourcForge Community >> SourceForge wants to tell your story. >> http://p.sf.net/sfu/sf-spreadtheword >> _______________________________________________ >> W3af-develop mailing list >> W3af-develop@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/w3af-develop > > > ------------------------------------------------------------------------------ > This SF.net email is sponsored by: > SourcForge Community > SourceForge wants to tell your story. > http://p.sf.net/sfu/sf-spreadtheword > _______________________________________________ > W3af-develop mailing list > W3af-develop@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/w3af-develop > > -- Andres Riancho http://w3af.sourceforge.net/ Web Application Attack and Audit Framework ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop