Hi all I've been using w3af from the OWASP Live-CD several times to do audits on some webapps. However I'm always struggeling with some problems or errors.
This time I did an update first: Updated to revision 3021. The following plugins were enabled: (using a w3af script) discovery webSpider audit xss, sqli, xst, xsrf, responseSplitting After several hours discovery phase (37% -- remaining time ~9hrs seemed to long to wait) I wanted to quit discovery and start audit -- hitting Ctrl+C just once. The Ctrl-C "Feature" is in the documentation, but with this update it doesn't seem to work. These were the last lines in the output file: [ Thu Aug 27 15:14:46 2009 - debug ] keepalive: The connection manager has 113 active connections. [ Thu Aug 27 15:14:46 2009 - debug ] The user stopped the core. [ Thu Aug 27 15:14:47 2009 - debug ] Cleared urllib2 local cache. [ Thu Aug 27 15:14:47 2009 - debug ] Enabling _dnsCache() [ Thu Aug 27 15:14:47 2009 - debug ] Calling join on all daemon threads ... lines with URLs removed ... [ Thu Aug 27 15:14:48 2009 - information ] The user interrupted the discovery phase, continuing with audit. [ Thu Aug 27 15:14:48 2009 - error ] This happened to me several times, since I was too impatient too wait 15hrs for the discovery to finish. Thanks for any help and bugfixes :-) Cheers, Tom ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ W3af-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/w3af-users
