On Mon, Jun 24, 2013 at 8:08 AM, saleem <asaleemud...@cdac.in> wrote: > thanks for the response andrews. > > > Why do you suspect of permissions issue? > > > I suspect permission issue because when i run the code as root user in the > terminal it is generating the output file. > > if i run the same code in the browser it is not generating the output files > .
Can be because of other things, like the www-data user not having an environment variable set, or something like that. Try this: sudo -s -H <enter your root password> su www-data cd to-python-install python w3af_console ... > > Are you trying "su www-data" and then running the exact same command? > > > i have given www-data:www-data permission to my code as well . > still it is not working. > > i will try to explain once again : > > i have a w3af script for w3af crawl - > http-settings > set timeout 60 > back > plugins > crawl web_spider > crawl config web_spider > set only_forward False > set follow_regex .*http:/localhost.* > set ignore_regex (?i)(logout|disconnect|signout|exit)+ > back > output text_file > output config text_file > set output_file /var/www/wsafe1/scanreports/crawl_localhost_222222222.txt > set verbose False > back > back > target > set target http://localhost:80 > back > start > exit > > > i have called this script in my php code i.e : > > <? > > $w3af_script="/var/www/wsafe1/crawl_localhost_222222222.w3af"; > echo "Start of code ::*****"; > > if(is_readable($w3af_script)) > { > > echo "\n"."ready to execute the script in the terminal"; > > `python /var/www/wsafe1/tools/w3af/w3af_console -s $w3af_script`; > > } > > > if(is_readable("/var/www/wsafe1/scanreports/crawl_localhost_222222222.txt")) > { > echo "-----OOOOOOOOOOOoutput file got generated "; > > } > else > echo "-----FFFFailed to generate the outpt file "; > > > ?> > > > > now problem is , i am not getting the file generated if i run the code from > the browser or by normal user. > > root user is able to generate the files using the same code . > > > please help me out !!!!! > > > > > On Monday 24 June 2013 04:14 PM, Andres Riancho wrote: >> >> Saleem, >> >> On Mon, Jun 24, 2013 at 1:11 AM, saleem <asaleemud...@cdac.in> wrote: >>> >>> ok thanku for responding andres . >>> >>> fine i will tell u in detail what i have done . >>> >>> Earlier i had older version of w3af(r4473) in which my script was working >>> fine >>> currently i am using >>> w3af - Web Application Attack and Audit Framework >>> Version: 1.5 >>> Revision: 790bb82add >> >> First of all, it was a great idea to update. >> >>> w3af script i have written (attachment) : >>> screenshot 1 >>> PHP script i have written was (attachment): >>> screenshot 2 >> >> I wouldn't run w3af in the request/response process. I'm unsure about >> how to do it for PHP, but in python there is Celery which allows you >> to queue work, process results, etc. >> >>> now i have given permission to that php script as well as w3af , using >>> chmod command i have given 777 permissions. >> >> Why do you suspect of permissions issue? >> >>> problem is when i am executing it in terminal i am getting the output , >>> if >>> the same i am executing in the browser i am not getting the output i.e >>> output files are not getting generated . >> >> Are you trying "su www-data" and then running the exact same command? >> >>> please help me out and sorry for my english. >>> >>> >>> >>> >>> On Monday 24 June 2013 12:35 AM, Andres Riancho wrote: >>>> >>>> Saleem, >>>> >>>> On Fri, Jun 21, 2013 at 12:31 PM, saleem <asaleemud...@cdac.in> wrote: >>>>> >>>>> Hi all , >>>>> >>>>> I have written a script which uses w3af script in the background, and >>>>> trying >>>>> to execute that script through browser , but i am not getting any >>>>> output >>>>> if >>>>> i do the same in the terminal i am getting the output . >>>>> >>>>> please help me out !!! >>>> >>>> It's almost impossible to answer this question without more detail. >>>> Also, why do you think this is a w3af problem and not just you setting >>>> incorrect permissions to the filesystem files? More than glad to help >>>> if you send details, >>>> >>>> Regards, >>>> >>>>> Thanks & Regards , >>>>> saleem >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------------------------------------------------------------------------------- >>>>> >>>>> This e-mail is for the sole use of the intended recipient(s) and may >>>>> contain confidential and privileged information. If you are not the >>>>> intended recipient, please contact the sender by reply e-mail and >>>>> destroy >>>>> all copies and the original message. Any unauthorized review, use, >>>>> disclosure, dissemination, forwarding, printing or copying of this >>>>> email >>>>> is strictly prohibited and appropriate legal action will be taken. >>>>> >>>>> >>>>> ------------------------------------------------------------------------------------------------------------------------------- >>>>> >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------------------------------ >>>>> This SF.net email is sponsored by Windows: >>>>> >>>>> Build for Windows Store. >>>>> >>>>> http://p.sf.net/sfu/windows-dev2dev >>>>> _______________________________________________ >>>>> W3af-develop mailing list >>>>> W3af-develop@lists.sourceforge.net >>>>> https://lists.sourceforge.net/lists/listinfo/w3af-develop >>>> >>>> >>>> >>>> -- >>>> Andrés Riancho >>>> Project Leader at w3af - http://w3af.org/ >>>> Web Application Attack and Audit Framework >>>> Twitter: @w3af >>>> GPG: 0x93C344F3 >>>> >>>> >>> >>> >>> ------------------------------------------------------------------------------------------------------------------------------- >>> >>> This e-mail is for the sole use of the intended recipient(s) and may >>> contain confidential and privileged information. If you are not the >>> intended recipient, please contact the sender by reply e-mail and destroy >>> all copies and the original message. Any unauthorized review, use, >>> disclosure, dissemination, forwarding, printing or copying of this email >>> is strictly prohibited and appropriate legal action will be taken. >>> >>> ------------------------------------------------------------------------------------------------------------------------------- >>> >> >> >> -- >> Andrés Riancho >> Project Leader at w3af - http://w3af.org/ >> Web Application Attack and Audit Framework >> Twitter: @w3af >> GPG: 0x93C344F3 >> >> > > > ------------------------------------------------------------------------------------------------------------------------------- > > This e-mail is for the sole use of the intended recipient(s) and may > contain confidential and privileged information. If you are not the > intended recipient, please contact the sender by reply e-mail and destroy > all copies and the original message. Any unauthorized review, use, > disclosure, dissemination, forwarding, printing or copying of this email > is strictly prohibited and appropriate legal action will be taken. > ------------------------------------------------------------------------------------------------------------------------------- > -- Andrés Riancho Project Leader at w3af - http://w3af.org/ Web Application Attack and Audit Framework Twitter: @w3af GPG: 0x93C344F3 ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop
