Thanku so much for that andrews . now i am able to generate file , but i have having small problem,
i am getting this error at the end of the txt file which got generated . [Mon Jun 24 17:19:43 2013 - console] termios error: (25, 'Inappropriate ioctl for device') any solution for this kind of error !! On Monday 24 June 2013 04:58 PM, Andres Riancho wrote: > On Mon, Jun 24, 2013 at 8:08 AM, saleem <asaleemud...@cdac.in> wrote: >> thanks for the response andrews. >> >> >> Why do you suspect of permissions issue? >> >> >> I suspect permission issue because when i run the code as root user in the >> terminal it is generating the output file. >> >> if i run the same code in the browser it is not generating the output files >> . > Can be because of other things, like the www-data user not having an > environment variable set, or something like that. > > Try this: > > sudo -s -H > <enter your root password> > su www-data > cd to-python-install > python w3af_console ... > >> Are you trying "su www-data" and then running the exact same command? >> >> >> i have given www-data:www-data permission to my code as well . >> still it is not working. >> >> i will try to explain once again : >> >> i have a w3af script for w3af crawl - >> http-settings >> set timeout 60 >> back >> plugins >> crawl web_spider >> crawl config web_spider >> set only_forward False >> set follow_regex .*http:/localhost.* >> set ignore_regex (?i)(logout|disconnect|signout|exit)+ >> back >> output text_file >> output config text_file >> set output_file /var/www/wsafe1/scanreports/crawl_localhost_222222222.txt >> set verbose False >> back >> back >> target >> set target http://localhost:80 >> back >> start >> exit >> >> >> i have called this script in my php code i.e : >> >> <? >> >> $w3af_script="/var/www/wsafe1/crawl_localhost_222222222.w3af"; >> echo "Start of code ::*****"; >> >> if(is_readable($w3af_script)) >> { >> >> echo "\n"."ready to execute the script in the terminal"; >> >> `python /var/www/wsafe1/tools/w3af/w3af_console -s $w3af_script`; >> >> } >> >> >> if(is_readable("/var/www/wsafe1/scanreports/crawl_localhost_222222222.txt")) >> { >> echo "-----OOOOOOOOOOOoutput file got generated "; >> >> } >> else >> echo "-----FFFFailed to generate the outpt file "; >> >> >> ?> >> >> >> >> now problem is , i am not getting the file generated if i run the code from >> the browser or by normal user. >> >> root user is able to generate the files using the same code . >> >> >> please help me out !!!!! >> >> >> >> >> On Monday 24 June 2013 04:14 PM, Andres Riancho wrote: >>> Saleem, >>> >>> On Mon, Jun 24, 2013 at 1:11 AM, saleem <asaleemud...@cdac.in> wrote: >>>> ok thanku for responding andres . >>>> >>>> fine i will tell u in detail what i have done . >>>> >>>> Earlier i had older version of w3af(r4473) in which my script was working >>>> fine >>>> currently i am using >>>> w3af - Web Application Attack and Audit Framework >>>> Version: 1.5 >>>> Revision: 790bb82add >>> First of all, it was a great idea to update. >>> >>>> w3af script i have written (attachment) : >>>> screenshot 1 >>>> PHP script i have written was (attachment): >>>> screenshot 2 >>> I wouldn't run w3af in the request/response process. I'm unsure about >>> how to do it for PHP, but in python there is Celery which allows you >>> to queue work, process results, etc. >>> >>>> now i have given permission to that php script as well as w3af , using >>>> chmod command i have given 777 permissions. >>> Why do you suspect of permissions issue? >>> >>>> problem is when i am executing it in terminal i am getting the output , >>>> if >>>> the same i am executing in the browser i am not getting the output i.e >>>> output files are not getting generated . >>> Are you trying "su www-data" and then running the exact same command? >>> >>>> please help me out and sorry for my english. >>>> >>>> >>>> >>>> >>>> On Monday 24 June 2013 12:35 AM, Andres Riancho wrote: >>>>> Saleem, >>>>> >>>>> On Fri, Jun 21, 2013 at 12:31 PM, saleem <asaleemud...@cdac.in> wrote: >>>>>> Hi all , >>>>>> >>>>>> I have written a script which uses w3af script in the background, and >>>>>> trying >>>>>> to execute that script through browser , but i am not getting any >>>>>> output >>>>>> if >>>>>> i do the same in the terminal i am getting the output . >>>>>> >>>>>> please help me out !!! >>>>> It's almost impossible to answer this question without more detail. >>>>> Also, why do you think this is a w3af problem and not just you setting >>>>> incorrect permissions to the filesystem files? More than glad to help >>>>> if you send details, >>>>> >>>>> Regards, >>>>> >>>>>> Thanks & Regards , >>>>>> saleem >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ------------------------------------------------------------------------------------------------------------------------------- >>>>>> >>>>>> This e-mail is for the sole use of the intended recipient(s) and may >>>>>> contain confidential and privileged information. If you are not the >>>>>> intended recipient, please contact the sender by reply e-mail and >>>>>> destroy >>>>>> all copies and the original message. Any unauthorized review, use, >>>>>> disclosure, dissemination, forwarding, printing or copying of this >>>>>> email >>>>>> is strictly prohibited and appropriate legal action will be taken. >>>>>> >>>>>> >>>>>> ------------------------------------------------------------------------------------------------------------------------------- >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ------------------------------------------------------------------------------ >>>>>> This SF.net email is sponsored by Windows: >>>>>> >>>>>> Build for Windows Store. >>>>>> >>>>>> http://p.sf.net/sfu/windows-dev2dev >>>>>> _______________________________________________ >>>>>> W3af-develop mailing list >>>>>> W3af-develop@lists.sourceforge.net >>>>>> https://lists.sourceforge.net/lists/listinfo/w3af-develop >>>>> >>>>> >>>>> -- >>>>> Andrés Riancho >>>>> Project Leader at w3af - http://w3af.org/ >>>>> Web Application Attack and Audit Framework >>>>> Twitter: @w3af >>>>> GPG: 0x93C344F3 >>>>> >>>>> >>>> >>>> ------------------------------------------------------------------------------------------------------------------------------- >>>> >>>> This e-mail is for the sole use of the intended recipient(s) and may >>>> contain confidential and privileged information. If you are not the >>>> intended recipient, please contact the sender by reply e-mail and destroy >>>> all copies and the original message. Any unauthorized review, use, >>>> disclosure, dissemination, forwarding, printing or copying of this email >>>> is strictly prohibited and appropriate legal action will be taken. >>>> >>>> ------------------------------------------------------------------------------------------------------------------------------- >>>> >>> >>> -- >>> Andrés Riancho >>> Project Leader at w3af - http://w3af.org/ >>> Web Application Attack and Audit Framework >>> Twitter: @w3af >>> GPG: 0x93C344F3 >>> >>> >> >> ------------------------------------------------------------------------------------------------------------------------------- >> >> This e-mail is for the sole use of the intended recipient(s) and may >> contain confidential and privileged information. If you are not the >> intended recipient, please contact the sender by reply e-mail and destroy >> all copies and the original message. Any unauthorized review, use, >> disclosure, dissemination, forwarding, printing or copying of this email >> is strictly prohibited and appropriate legal action will be taken. >> ------------------------------------------------------------------------------------------------------------------------------- >> > > > -- > Andrés Riancho > Project Leader at w3af - http://w3af.org/ > Web Application Attack and Audit Framework > Twitter: @w3af > GPG: 0x93C344F3 > > ------------------------------------------------------------------------------------------------------------------------------- This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ------------------------------------------------------------------------------------------------------------------------------- ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop
