Johannes, On Wed, Feb 8, 2012 at 1:03 PM, Johannes Weberhofer <jweberho...@weberhofer.at> wrote: > For openSUSE distribution I have - so added the following packages to the > repositories > > python-python-termstyle > python-nose-exclude > python-cluster > python-rednose > python-SocksiPy > python-pybloomfiltermmap > python-pymock
Nice! > w3af for openSUSE is still under development - especially because most tests > fails under Python 2.7, even though it seems to work correctly. You can have > a look at the packaging files under https://build.opensuse.org/package/files? > package=w3af&project=home%3Aweberho%3Atools A couple of comments about the files: - w3af.spec: Version should be 1.2 - Requires: tcpdump (isn't that a scapy dependency?) - rm -f plugins/attack/payloads/code/netcat I think I already removed this file from the trunk - plugins/attack/payloads/webshell/webshell.pl doesn't need exec permissions as it will only be executed in a server we compromise - dos2unix readme/GPL just run that on my local box and commited to the SVN - rm core/data/timeAnalysis.py , removed empty file from trunk - core/ui/userInterface.dtd , removed empty file from trunk - w3af-import-pypdf.diff , just commited a change so w3af's code uses the library in extlib or the one provided by the system > There are some patches which I suggest to be included: > > w3af.fsf-address.diff : Corrects the FSF foundation's address Applied but some failed, let me know if there is some more work to do here. > w3af-import-pypdf.diff: Fixes a include issue > > And there is a new icon for the desktop: > w3af.png > > Can be applied when It's definitely working under Python 2.7 > w3af-pyton27.diff > > > In case someone likes to try it, the related repositories ( > http://download.opensuse.org/repositories/devel:/languages:/python/ and > http://download.opensuse.org/repositories/home:/weberho:/tools/ ) must be > included. All required packages > should install automatically.... Is there something else I can do for you to help your packaging efforts? I know that py2.7 support is a must, anything else before that? > Have fun! > Johannes > > > Am 08.02.12 16:30, schrieb Andres Riancho: >> Taras, >> >> Please read inline, >> >> On Wed, Feb 8, 2012 at 11:27 AM, Taras<ox...@oxdef.info> wrote: >>> Hi, all! >>> >>> Let's take a look on common case - installation of w3af on Debian >>> (current stable 6.0 Squeeze) or even Ubuntu. >>> >>> 1. svn export trunk version of w3af >>> 2. ./w3af_console ...see absent dependencies >>> 3. Ok, sudo aptitude install python-nltk python-soappy python-pyopenssl >>> python-lxml python-svn python-scapy >>> 4. Try ./w3af_console again. See absent nltk module and there is no such >>> module in Debian repository which is the most big repository among Linux >>> distros. Same case with pybloomfiltermmap. >> >> Ok, >> >>> What I want to say is do we plan to reduce hard dependencies for w3af >>> and make possible to use w3af on every Linux distro without installing a >>> really big number of dependencies? >> >> No, we don't really have a plan for that. >> >>> Especially those dependencies which >>> can't be installed on distro native way (apt/yum/...). >> >> Maybe the solution is to invest in creating an deb package for the >> missing dependencies? >> >>> Yes, I know that >>> there are a lot of really useful Python 3rd party modules but >>> I have a lot of life examples when people said "Hmm, I don't want to >>> install such big number dependencies and especially not from official >>> repository to run this scanner". >>> >>> What do you think about it? >> >> We're always going to have people that think that *something* is >> wrong, sadly, that group is much bigger than the group that sees and >> issue and tries to fix it. >> >> This problem, IMHO, is not in out Top50 priorities. We've got a >> ton of things to work on before thinking about some guys that complain >> about the installation process because "not everything is in APT". I >> would hate to see an installation process that's difficult and doesn't >> work, but in our case it has improved a lot and works (almost in every >> linux distribution I've heard). >> >> Some bad things I see in our installation process is that our code >> is focused on guiding the users of Debian based distributions; which I >> see as incomplete and useless for people running the installation in >> RedHat/Fedora based distributions. Maybe there is an effort to be made >> there? (detect distribution and show dependencies and commands >> accordingly) >> >> In the future I see the amount of dependencies slowly growing once >> again, for example, we'll need *some library* to support javascript >> web applications, and that library will have other dependencies too. >> >> Also, one question, what do you mean by "hard dependencies" ? Do >> you want to move some to "optional" ? >> >> Regards, >> >>> -- >>> Taras >>> http://oxdef.info >>> >>> ------------------------------------------------------------------------------ >>> Keep Your Developer Skills Current with LearnDevNow! >>> The most comprehensive online learning library for Microsoft developers >>> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, >>> Metro Style Apps, more. Free future releases when you subscribe now! >>> http://p.sf.net/sfu/learndevnow-d2d >>> _______________________________________________ >>> W3af-develop mailing list >>> W3af-develop@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/w3af-develop >> >> >> > > -- > Johannes Weberhofer > Weberhofer GmbH, Austria, Vienna > > ------------------------------------------------------------------------------ > Keep Your Developer Skills Current with LearnDevNow! > The most comprehensive online learning library for Microsoft developers > is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, > Metro Style Apps, more. Free future releases when you subscribe now! > http://p.sf.net/sfu/learndevnow-d2d > _______________________________________________ > W3af-develop mailing list > W3af-develop@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/w3af-develop -- Andrés Riancho Director of Web Security at Rapid7 LLC Founder at Bonsai Information Security Project Leader at w3af ------------------------------------------------------------------------------ Virtualization & Cloud Management Using Capacity Planning Cloud computing makes use of virtualization - but cloud computing also focuses on allowing computing to be delivered as a service. http://www.accelacomm.com/jaw/sfnl/114/51521223/ _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop
