Amigo Andres, Thanks for your support to correct. Here is what I got this time:
10/25/10 14:47:32] Auto-enabling plugin: grep.error500 [10/25/10 14:47:36] The target URL: http://staging.stouffers-rewards.ca is unreachable because of an unhandled exception. [10/25/10 14:47:36] Error description: "addinfourl instance has no attribute 'code'". See debug output for more information. [10/25/10 14:47:36] Traceback for this error: Traceback (most recent call last): File "C:\Program Files\w3af\w3af\core\controllers\w3afCore.py", line 461, in _realStart response = self.uriOpener.GET( url, useCache=True ) File "C:\Program Files\w3af\w3af\core\data\url\xUrllib.py", line 290, in GET return self._send( req , useCache=useCache, grepResult=grepResult) File "C:\Program Files\w3af\w3af\core\data\url\xUrllib.py", line 521, in _send msg += str(res.code) + '" - id: ' + str(res.id) AttributeError: addinfourl instance has no attribute 'code' [10/25/10 14:47:36] No URLs found by discovery. [10/25/10 14:47:36] Finished scanning process. -----Original Message----- From: Andres Riancho [mailto:[email protected]] Sent: Monday, October 25, 2010 1:10 PM To: Koh,Edmond,GLENDALE,Regional GLOBE Office AMS Cc: [email protected] Subject: Re: [W3af-users] Using NTLM authentication in the W3AF GUI Ed, On Mon, Oct 25, 2010 at 3:47 PM, Koh,Edmond,GLENDALE,Regional GLOBE Office AMS <[email protected]> wrote: > Andres, > > I downloaded the Revision 3631 - urlOpenerSettings.py and updated my local > system but I'm getting an error below: > Traceback (most recent call last): > File "C:\Program Files\w3af\w3af\core\ui\gtkUi\confpanel.py", line 233, in > _savePanel > helpers.coreWrap(plugin.setOptions, self.options) > File "C:\Program Files\w3af\w3af\core\ui\gtkUi\helpers.py", line 248, in > __call__ > return func(*args, **kwargs) > File "C:\Program Files\w3af\w3af\core\data\url\urlOpenerSettings.py", line > 492, in setOptions > optionsMap['ntlmAuthPass']) > File "C:\Program Files\w3af\w3af\core\data\url\urlOpenerSettings.py", line > 274, in setNtlmAuth > if url.startswith('http://') or url.startswith('https://'): > AttributeError: option instance has no attribute 'startswith' Sorry to use you like a ginea pig :( Please "svn up" and try again. Lets hope this is the last time. > > > Ed Koh | Information Security | Regional GLOBE Office AMS | Phone: +(1) 818 > 549 6520 | Mobile: +(1) 818 967 9813 | Fax: +(1) 818 549 5036 | Intranet: AMS > Information Security > > -----Original Message----- > From: Andres Riancho [mailto:[email protected]] > Sent: Friday, October 22, 2010 3:06 PM > To: Koh,Edmond,GLENDALE,Regional GLOBE Office AMS > Cc: [email protected] > Subject: Re: [W3af-users] Using NTLM authentication in the W3AF GUI > > Koh, > > Please "svn up" and check again. I was unable to test it because I > don't have an NTLM auth setup here, but I think it should work. > > Regards, > > On Fri, Oct 22, 2010 at 4:59 PM, Andres Riancho > <[email protected]> wrote: >> Koh, >> >> I just identified the bug, please give me some minutes to see if I >> can find a quick solution. >> >> On Tue, Oct 19, 2010 at 11:47 AM, Koh,Edmond,GLENDALE,Regional GLOBE >> Office AMS <[email protected]> wrote: >>> Hi Andres, >>> >>> Yes, however, there is some bug, maybe with my installation. It doesn't >>> save the NTLM credentials, it blanks it out. It asks me to input the HTTP >>> basic authentication which I do, but that doesn't work with NTLM. Also, it >>> wants the domain filled in on the HTTP authentication tab. Thanks. >>> >>> >>> -----Original Message----- >>> From: Andres Riancho [mailto:[email protected]] >>> Sent: Tuesday, October 19, 2010 5:35 AM >>> To: Koh,Edmond,GLENDALE,Regional GLOBE Office AMS >>> Cc: [email protected] >>> Subject: Re: [W3af-users] Using NTLM authentication in the W3AF GUI >>> >>> Koh, >>> >>> On Mon, Oct 18, 2010 at 8:04 PM, Koh, Edmond, GLENDALE, Regional GLOBE >>> Office AMS <[email protected]> wrote: >>>> Hello, >>>> >>>> Does anyone have instructions on the above? >>>> >>>> I have a website to audit that uses NTLM authentication. Thanks. >>> >>> Have you tried to use the HTTP Config / NTLM Authentication >>> section of w3af's configuration to setup the credentials and then >>> perform a scan? >>> >>> Regards, >>> >>>> ------------------------------------------------------------------------------ >>>> Download new Adobe(R) Flash(R) Builder(TM) 4 >>>> The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly >>>> Flex(R) Builder(TM)) enable the development of rich applications that run >>>> across multiple browsers and platforms. Download your free trials today! >>>> http://p.sf.net/sfu/adobe-dev2dev >>>> _______________________________________________ >>>> W3af-users mailing list >>>> [email protected] >>>> https://lists.sourceforge.net/lists/listinfo/w3af-users >>>> >>>> >>> >>> >>> >>> -- >>> Andrés Riancho >>> Founder, Bonsai - Information Security >>> http://www.bonsai-sec.com/ >>> http://w3af.sf.net/ >>> >> >> >> >> -- >> Andrés Riancho >> Founder, Bonsai - Information Security >> http://www.bonsai-sec.com/ >> http://w3af.sf.net/ >> > > > > -- > Andrés Riancho > Founder, Bonsai - Information Security > http://www.bonsai-sec.com/ > http://w3af.sf.net/ > -- Andrés Riancho Founder, Bonsai - Information Security http://www.bonsai-sec.com/ http://w3af.sf.net/ ------------------------------------------------------------------------------ Nokia and AT&T present the 2010 Calling All Innovators-North America contest Create new apps & games for the Nokia N8 for consumers in U.S. and Canada $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store http://p.sf.net/sfu/nokia-dev2dev _______________________________________________ W3af-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/w3af-users
