Abhishek, On Tue, Apr 21, 2009 at 2:43 AM, Abhishek Baheti <[email protected]> wrote: > Thanks Andres > But all my search resulted in > > Unable to connect to Search Server
Oh, that sucks! I just confirmed it and its simply a sourceforge bug/error. > Hence I asked the question, I thought there would be some problem searching > engine hence the question. > But thank you very much for the response To specify authentication "credentials" to w3af, you have two ways: - Use the proxy tool and a browser to get a valid cookie, and then add that cookie to the scanning process by configuring the http-settings, cookieJarFile parameter. - Use the discovery.spiderMan plugin. This plugin acts as a proxy, and lets you navigate the target site and authenticate to it. After closing spiderMan, the authentication credencials will be used through the whole w3af scan. > Really appreciate it > AB > > ________________________________ > From: Andres Riancho <[email protected]> > To: Abhishek Baheti <[email protected]> > Cc: [email protected] > Sent: Monday, April 20, 2009 9:04:26 PM > Subject: Re: [W3af-users] New to W3AF - How to Specify Login Information > > Abhishek, > > On Mon, Apr 20, 2009 at 6:48 PM, Abhishek Baheti > <[email protected]> wrote: >> Hello >> I am new to W3AF and have installed it with all the required plugins but >> not >> sure how should I be specifying the Login information for my web site.. It >> does try bruteforce attack on my Login Page and fails but I would like it >> to >> go in and test all the other web pages. >> Can someone please point me how to do it or where can I find documentation >> to do it. >> All help much appreciated > > Please search the mailing list archives, this question was answered before. > > Thanks! > >> Thank you >> AB >> NB: I have it installed on windows and the site is over ssl. >> >> >> >> ------------------------------------------------------------------------------ >> Stay on top of everything new and different, both inside and >> around Java (TM) technology - register by April 22, and save >> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. >> 300 plus technical and hands-on sessions. Register today. >> Use priority code J9JMT32.. http://p.sf.net/sfu/p >> _______________________________________________ >> W3af-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/w3af-users >> >> > > > > -- > Andrés Riancho > http://www.bonsai-sec.com/ > http://w3af.sourceforge.net/ > > -- Andrés Riancho http://www.bonsai-sec.com/ http://w3af.sourceforge.net/ ------------------------------------------------------------------------------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ W3af-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/w3af-users
