Ryan, On Wed, May 27, 2009 at 5:07 PM, Ryan Dewhurst <ryandewhu...@gmail.com> wrote: > Hello, > I have developed a python script that can detect the version of a > wordpress installation. I think it would fit well within w3af,
Yes, it seems that it's something good to have in the framework. I have like a ton of questions about how it works, could you please send the script (as it is) to this mailing list for us to read it? > the > only problem being is that I have been unable to find a plugin > development manual to be able to implement my script. There is no development manual :( For the type of feature that you want to add, the correct thing is to use a discovery plugin. discovery plugins are simple, they follow these rules: - the entry point is the discover method - the discover method takes a fuzzable request object as a parameter, and returns a list of fuzzable requests (fuzzable requests are representations of GET/POST requests, which represent links, and forms) - the discover method is called several times in the same scan, with the different links that (for example) the webSpider finds. I think that the best thing you can do is to read one or two discovery plugins (my recommendations are discovery.crossDomain and discovery.userDir), and start building your own plugin based on one of those. > Is there a dev manual out there? No > Does any one have some tips/advice on writting a plugin? Yes, see above, > Does any one want me to send them the script for them to develop the plugin? You should develop the plugin yourself, is fun and good for the project =) Cheers, > Thank you, > Ryan > > ------------------------------------------------------------------------------ > Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT > is a gathering of tech-side developers & brand creativity professionals. Meet > the minds behind Google Creative Lab, Visual Complexity, Processing, & > iPhoneDevCamp as they present alongside digital heavyweights like Barbarian > Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com > _______________________________________________ > W3af-develop mailing list > W3af-develop@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/w3af-develop > -- Andrés Riancho Founder, Bonsai - Information Security http://www.bonsai-sec.com/ http://w3af.sf.net/ ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp as they present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop
