Johannes,

On Mon, Jan 9, 2012 at 12:08 PM, Johannes Weberhofer
<jweberho...@weberhofer.at> wrote:
> Hi!
>
> I'm currently packaging w3af for usage in opensuse.

Before we dig into netcat, something that might be helpful for your
task is the debian package generation scripts [0].

[0] http://sourceforge.net/apps/trac/w3af/browser/extras/debian

>  I have recognized, there is a binary version of gnu netcat packaged in 
> w3af/plugins/attack/payloads/code/netcat . This binary seem not to be used at 
> all; can it be deleted?

Interesting! That was used by [1] but when it was deprecated in favor
of different methods we forgot to remove it. Just removed it from the
trunk.

[1] 
http://sourceforge.net/apps/trac/w3af/browser/trunk/plugins/attack/payloads/payloads/netcat_interactive_shell.py?rev=3568

>
> Additionaly, I have recognized, that there are all .svn directories packaged 
> in the tar file - those might be dropped in the future, too.

We need those for the auto-update process which will bring you a
completely different set of issues for packaging ;) w3af's auto-update
is actually a wrapper around "svn up", so when you call ./w3af_console
or ./w3af_gui at the beginning of each day, w3af will internally run
an "svn up" and collect all the latest changes from the SVN server.

Not sure how we decided it would work, but I think that if you remove
all the ".svn" the auto-update will simply not run and w3af will
start. You can choose to do that for your suse package. The other way
of controlling the auto-update is using the ~/.w3af/startup.conf file,
which indicates if w3af should update or not, check frequency, last
check date, etc.

Regards,

> Best regards,
> Johannes
>
> --
> Johannes Weberhofer
> Weberhofer GmbH, Austria, Vienna
>
> ------------------------------------------------------------------------------
> Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
> infrastructure or vast IT resources to deliver seamless, secure access to
> virtual desktops. With this all-in-one solution, easily deploy virtual
> desktops for less than the cost of PCs and save 60% on VDI infrastructure
> costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
> _______________________________________________
> W3af-develop mailing list
> W3af-develop@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/w3af-develop



-- 
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af

------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop

Reply via email to