Hello! 

Sorry for late answer.

>     Hmmm, do we realllly need to add another dependency to the
> project? What would SQLachemy give us in the long term if we compare
> it to an ad-hoc persistence model like the one that is implemented
> right now?
SQLachemy is of course powerful SQL lib .
But at the moment I don't think we really need SQLachemy and another
dependency. Because we don't have heavy usage of SQL in W3AF. 

> >  - marks for req/res entries
> 
>     This refers to the "B" column I'm seeing in the History tab?
Yes, it is.

> I'm also seeing something interesting, the "Info" tab, which is there but
> can't be written. Is the idea of the tab to be able to add comments to
> a request/response? 
This tab for vulnerability information. When you run some audit plugin
information from him (e.g. XSS info) is showed in this tab.
Hmm, comments is good idea also :)

> Something like tagging?
Tagging of req/res items we can see in WebScarab. As I think it useful
to view it in history table. You can rapidly find req with xss or some
req/res which you have tagged.

>     One thing that we need to fix, is that when port 8080 is already
> in use, and you try to start the proxy, a little window pops-up saying
> just that, and there is no option to actually change the port, or do
> anything else, so if port 8080 is already in use, it is impossible to
> start the proxy. Added bug:
> 
>     
> https://sourceforge.net/tracker/?func=detail&aid=2876614&group_id=170274&atid=853652

Can I take it? :)

>   I think that a BIG feature that we're missing is to save all the
> requests and responses in a place where afterwards the user is able to
> read them using w3af, or just a simple python script.
Yes-yes! What about existing plugins to output? Can we use them for this
purpose?


>  Just finished
> adding all my tasks to this list:
> 
> https://sourceforge.net/pm/task.php?group_project_id=59979&group_id=170274&func=browse
Great! What about jointing branches? Will we develop it in my branch?

> > By the way I'm in vacations now for 2 weeks, so I can write more code in
> > w3af :)
> 
>     Nice, but you could also go to the beach and chase some girls... ;)
There is no beach in Moscow and we have bad weather now :(

>    If you're staying at home, lets talk and work together in order to
> get more things done =)
It's good idea. What about this weekend? I simply must finish one
pentest report :( Very strange vacations I have this year...


-- 
Taras - OSCP, OSWP
----
"Software is like sex: it's better when it's free." - Linus Torvalds

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to