Steve,
On Wed, Nov 3, 2010 at 3:45 PM, Steve Pinkham <steve.pink...@gmail.com>wrote:
> I notice sprint 4 is to include a new release of Moth.
> I would be happy to assist in that goal.
>
Excellent! This is great news :)
>
> I'm not sure what you have in mind,
I'm not sure either :)
I know that I want to release a new version of moth with the updated list of
vulnerable scripts and possibly a new version of ubuntu... but I don't know
more than that.
> but there are currently repeatable
> build scripts in the Web Security Dojo git repo that currently match the
> Moth w3af test environment bug for bug at the moment.
Could you please send me the link to those build scripts?
> I'd be happy to
> help fix the bugs and adopt it to your needs and/or script additional
> targets for the environment.
I think we don't have many bugs in moth (at least I couldn't find none in
the Trac, maybe I should search the mailing list!). A new ticket was created
in order to start documenting the ideas we have and the progress [0].
[0] https://sourceforge.net/apps/trac/w3af/ticket/160261
> vmbuilder plus install scripts should give
> a mostly automated, repeatable build process for continued updates and
> improvements.
>
> https://help.ubuntu.com/10.04/serverguide/C/jeos-and-vmbuilder.html
>
>
I don't have experience with vmbuilder, I'll need to read that document in a
near future to check if it will work for us. Have you built the dojo VM
using it? Which are the Top5 good things about it? And the worse 5? How much
time does it take to learn?
> Let me know how I can help.
>
> Steve
> --
> | Steven Pinkham, Security Consultant |
> | http://www.mavensecurity.com |
> | GPG public key ID CD31CAFB |
>
>
>
> ------------------------------------------------------------------------------
> Achieve Improved Network Security with IP and DNS Reputation.
> Defend against bad network traffic, including botnets, malware,
> phishing sites, and compromised hosts - saving your company time,
> money, and embarrassment. Learn More!
> http://p.sf.net/sfu/hpdev2dev-nov
> _______________________________________________
> W3af-develop mailing list
> W3af-develop@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-develop
>
>
--
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af
------------------------------------------------------------------------------
Achieve Improved Network Security with IP and DNS Reputation.
Defend against bad network traffic, including botnets, malware,
phishing sites, and compromised hosts - saving your company time,
money, and embarrassment. Learn More!
http://p.sf.net/sfu/hpdev2dev-nov
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
