Martin,
On Mon, Sep 28, 2009 at 10:24 AM, Martin Holst Swende
<martin.ho...@gmail.com> wrote:
> Hello,
>
> First of all, thanks for a great framework, it is really nice to work
> with.
Thanks! =)
> I found a bug in the bruteforcer, which makes it impossible to set other
> user/password-lists than the ones that are pre-configured. The loaded
> values were not passed onto the bruteforce plugin.
Ooops!
> I am new to this list, and I don't know how you guys handle bugfixes,
> but since I don't yet have any 'commit-bit' set, I'll just paste the
> diff below.
>
> mar...@fujitsux:~/tools/w3af$ svn diff
> Index: core/controllers/basePlugin/baseBruteforcePlugin.py
> ===================================================================
> --- core/controllers/basePlugin/baseBruteforcePlugin.py (revision 3033)
> +++ core/controllers/basePlugin/baseBruteforcePlugin.py (working copy)
> @@ -70,6 +70,9 @@
> self._bruteforcer.setProfilingNumber( self._profilingNumber )
> self._bruteforcer.setUseSvnUsers( self._profilingNumber )
> self._bruteforcer.setLeetPasswd( self._l337_p4sswd )
> + self._bruteforcer.setUsersFile(self._usersFile);
> + self._bruteforcer.setPassFile(self._passwdFile);
> +
> self._bruteforcer.init()
>
> def _fuzzRequests(self, freq ):
Yes, you can submit patches like this, it is ok while diffs are
not huge. If they are bigger please attach the patch file to the
email. I just commited your patch to the framework, you can see the
modifications here:
http://w3af.svn.sourceforge.net/viewvc/w3af?view=rev&revision=3035
Thank you very much, and please report all the bugs you find =)
Cheers,
> Regards,
> Martin Holst Swende
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9-12, 2009. Register now!
> http://p.sf.net/sfu/devconf
> _______________________________________________
> W3af-develop mailing list
> W3af-develop@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-develop
>
--
Andrés Riancho
Founder, Bonsai - Information Security
http://www.bonsai-sec.com/
http://w3af.sf.net/
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
