Steven,

On Wed, Jun 9, 2010 at 2:41 PM, Steve Pinkham <[email protected]> wrote:
> Andres,
> Are you maintaining the version that is in CVS, or is there later code
> in another location?

    The test environment available at [0] should be the latest version
of the test scripts. On the other hand, "moth" virtual machine is a
working implementation of the test environment (mysql, correct
directory permissions, apache and php set to be vulnerable).

[0] http://w3af.svn.sourceforge.net/viewvc/w3af/extras/testEnv/

> I've found lots of problems due to renames and moves and such in the CVS
> version, and don't want to spend a lot of time creating patches if there
> is a later fixed version already.

    Could you please report these issues in a more detailed way? Thanks!

> Thanks,
>
> Steve
> On 06/08/2010 07:52 AM, Andres Riancho wrote:
>> Steve,
>>
>>     The license is GPLv2, and of course you can use it @ your training.
>> Please note that moth does NOT include a w3af installation. Thanks!
>>
>> --
>> Andres Riancho
>>
>>> El jun 7, 2010 6:13 p.m., "Steve Pinkham" <[email protected]
>>> <mailto:[email protected]>> escribió:
>>>
>>> I was wondering what the license was for the w3af test environment.  I
>>> assume it is the same license as w3af(GPL), but that isn't explicitly
>>> stated.
>>>
>>> I'm interested at the moment as I'd like to include it as part of the
>>> next version of the Web Security Dojo training VM.  The test environment
>>> includes a number of vulnerability types that are missing from "modern"
>>> vulnerable web targets.  Those would be interesting to have included,
>>> especially as w3af is also installed.
>>>
>>> Thanks,
>>>
>>> Steve
>>> --
>>>  | Steven Pinkham, Security Researcher    |
>>>  | http://www.mavensecurity.com           |
>>>  | GPG public key ID CD31CAFB             |
>>
>> --0016e64696e8385a150488836cda--€
>
>
> --
>  | Steven Pinkham, Security Researcher    |
>  | http://www.mavensecurity.com           |
>  | GPG public key ID CD31CAFB             |
>



-- 
Andrés Riancho
Founder, Bonsai - Information Security
http://www.bonsai-sec.com/
http://w3af.sf.net/

------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to