Ksaok,

On Tue, Oct 18, 2011 at 12:35 AM,  <ks...@sociofob.com> wrote:
> hello!
>
> another issue (i think)
>
> my settings:
> -------------------
> plugins
> output console,textFile
> output config console
> set verbose False
> back
> output config textFile
> set httpFileName domain.http.traffic.log
> set showCaller True
> set fileName domain.plugin.w3af.log
> set verbose True
> back
> discovery
> archiveDotOrg,bing_spider,fingerBing,fingerPKS,phishtank,ria_enumerator,sharedHosting,slash,xssedDotCom,yahooSiteExplorer,zone_h
> back
> http-settings
> set proxyPort 3128
> set proxyAddress 127.0.0.1
> set userAgent 'Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-US)
> AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.366.04'
> back
> target
> set target http://192.168.0.132/
> back
> start
> ----------------
> after results i try set another discovery plugins:
> w3af>>> plugins
> w3af/plugins>>> discovery fingerGoogle,ghdb,googleSpider
> w3af/plugins>>> back
> w3af>>> start
> No target URI configured.
> w3af>>> target
> w3af/config:target>>> view
> | target              | http://192.168.0.132/       | A comma separated
> list of URLs
> w3af/config:target>>> back
> w3af>>> start
> No target URI configured.
> w3af>>>
>
>
> is it ok?

I would say it's NOT ok, I would say it's a bug. It's a low severity
bug so it's most likely going to be fixed in more than 3 months time
(we still have other bugs to fix first).

> (may be also reset proxy settings after finish? )

This is a feature actually, I thought that someone scanning twice
would like to re-use those settings.

> cheers.
>
>
>
>
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure contains a
> definitive record of customers, application performance, security
> threats, fraudulent activity and more. Splunk takes this data and makes
> sense of it. Business sense. IT sense. Common sense.
> http://p.sf.net/sfu/splunk-d2d-oct
> _______________________________________________
> W3af-develop mailing list
> W3af-develop@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-develop
>



-- 
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to