Hi, Javier!
Sorry for delay :(
I'm running a scan against the same target and after 60 minutes and over
20K requests, still no error. Maybe you're using a specific profile
configuration that leads to this error? Can you please share it?
Sure, see attachment.
Furthermore may be we need to discuss right single way to fix unicode
problems. For example, all dump* methods should return a string.
Comments?
What do you exactly have in mind?
Unicode errors can appear in those cases:
1. dump* methods where we need to convert everything to string
2. decoding case. Should we use try..catch block in this case for
various encodings or simply write like:
...
foo = some_str.decode(self._encoding)
...
--
Taras
http://oxdef.info
[profile]
description = Pentest
name = Pentest
[target]
target = http://slovari.yandex.ru/
[misc-settings]
fuzzCookie = False
fuzzFileContent = True
fuzzFileName = True
fuzzFCExt = txt
fuzzableHeaders =
autoDependencies = True
maxDiscoveryTime = 5
maxThreads = 0
interface = lo
localAddress = 127.0.0.1
demo = False
nonTargets =
exportFuzzableRequests =
fuzzFormComboValues = t
msf_location = /opt/metasploit3/bin/
fuzzURLParts = True
[http-settings]
timeout = 10
headersFile =
basicAuthUser =
basicAuthPass =
basicAuthDomain =
ntlmAuthUser =
ntlmAuthPass =
ntlmAuthURL =
cookieJarFile =
ignoreSessCookies = False
proxyPort = 8080
proxyAddress =
userAgent = Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
maxFileSize = 400000
maxRetrys = 2
always404 =
never404 =
404string =
urlParameter =
[output.console]
verbose = False
[output.textFile]
verbose = False
fileName = output.txt
httpFileName = output-http.txt
[audit.xpath]
[audit.xss]
checkStored = True
numberOfChecks = 3
[audit.osCommanding]
[audit.blindSqli]
equAlgorithm = setIntersection
equalLimit = 0.9
[audit.sqli]
[audit.globalRedirect]
[audit.eval]
useTimeDelay = True
useEcho = True
[audit.responseSplitting]
[discovery.webSpider]
onlyForward = False
followRegex = .*
ignoreRegex =
[grep.pathDisclosure]
[grep.metaTags]
search404 = False
[grep.privateIP]
[grep.error500]
[grep.domXss]
simpleGrep = False
smartGrep = True
[grep.strangeHeaders]
------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
