Andres Riancho wrote:
>> In fact, next wednesday I am doing a 15 minutes w3af demo to the first
>> OWASP meeting in Denmark, but I have a bit of a problem.
>>     
>
> I'm glad you are going to give a w3af talk/demo! If you want to, I can
> review your slides/speed/demo procedure/whatever =)
>
>   
Thanks for the offer.
I don't have any slides. I only have 15 minutes so I will just show the 
GUI and explain the different tabs, tools (manual request, fuzzy 
request, etc.), plugin categories and some of the more "interesting" 
plugins in each category and my own ideas for new plugins.

I have chosen to focus on the following plugins:
localFileInclude and remoteFileInclude as they are the ones present in 
my demo web application
webSpider as the more obvious discovery plugin
spiderMan as my web application is Ajax based
userDir, urlFuzzer and googleSpider as I find them interesting and 
haven't seen other software use these techniques.
creditCards because it is obvious
ssn because in Denmark it seems government offices think ssn's are top 
secret and known only to the owner. In fact, if you know a persons  ssn 
you can change that persons address, have new passports and drivers 
licenses issued and sent to that new address and then change back the 
address and noone would know.

Anything missing ?

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to