Chris,

    If you've got any web server where you can upload it, please do so
and then send me the link. If not, any file sharing service will do.
Where is no private information there.

Regards,

On Mon, Oct 17, 2011 at 4:16 PM, Chris Clements <[email protected]> wrote:
> The resulting bz file is ~40MB.  This is too large for my email limit.  What
> is the best way to get it to you?
> Chris
>
> On Oct 17, 2011, at 2:03 PM, Andres Riancho wrote:
>
> Chris,
>
> The bug your're reporting is already fixed in our SVN.
>
> This seems like the auto-update bug once again :S It seems you
> have the latest version, but... you actually don't. This is something
> related to the auto-update bug. Could you please send me your w3af
> installation directory in a bz2 file? I need ALL the files, including
> the ".svn" directories. Sending me that information will allow us to
> debug the auto-update bug.
>
> For fixing your installation, please use "svn co" to download the
> latest version from the SVN manually.
>
> Regards,
>
> On Mon, Oct 17, 2011 at 12:07 PM, Chris Clements
> <[email protected]> wrote:
>> >From w3af_console rev. 4445:
>>
>> The thread: <WorkerThread(Thread-14, started daemon 139755663562496)>
>> raised an exception while running the request: <bound method
>> webSpider._verify_reference of <plugins.discovery.webSpider.webSpider
>> instance at 0x39ecb00>>
>> Exception: The "url" parameter of setURL @ fuzzableRequest must be of
>> urlParser.url_object type.
>> Finished grep_worker for response: < httpResponse | 404 |
>> http://demo.testfire.net/bank/XMDws.asmx  | id:245 >
>> Adding relative reference "http://demo.testfire.net/bank/ws.asmx"; to the
>> resp.
>> Traceback: Traceback (most recent call last):
>>  File "/pentest/web/w3af/core/controllers/threads/threadpool.py", line
>> 108, in run
>>    self.resultQueue.put( (request, request.callable(*request.args,
>> **request.kwds)) )
>>  File "/pentest/web/w3af/plugins/discovery/webSpider.py", line 330, in
>> _verify_reference
>>    fuzzable_request_list = self._createFuzzableRequests( resp,
>> request=original_request )
>>  File
>> "/pentest/web/w3af/core/controllers/basePlugin/baseDiscoveryPlugin.py", line
>> 63, in _createFuzzableRequests
>>    return createFuzzableRequests( httpResponse, request, add_self )
>>  File "/pentest/web/w3af/core/data/request/frFactory.py", line 116, in
>> createFuzzableRequests
>>    wspdr.setURL( remoteMethod.getLocation() )
>>  File "/pentest/web/w3af/core/data/request/fuzzableRequest.py", line 367,
>> in setURL
>>    raise ValueError( msg )
>> ValueError: The "url" parameter of setURL @ fuzzableRequest must be of
>> urlParser.url_object type.
>>
>>
>> Unhandled error, traceback: Traceback (most recent call last):
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 441, in start
>>    self._realStart()
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 542, in
>> _realStart
>>    self._fuzzableRequestList = self._discover_and_bruteforce()
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 352, in
>> _discover_and_bruteforce
>>    discovered_fr_list = self._discover( tmp_list )
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 774, in
>> _discover
>>    result = self._discoverWorker( toWalk )
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 846, in
>> _discoverWorker
>>    pluginResult = plugin.discover_wrapper( fr )
>>  File
>> "/pentest/web/w3af/core/controllers/basePlugin/baseDiscoveryPlugin.py", line
>> 48, in discover_wrapper
>>    return self.discover( fuzzable_request_copy )
>>  File "/pentest/web/w3af/plugins/discovery/webSpider.py", line 202, in
>> discover
>>    self._tm.join( self )
>>  File "/pentest/web/w3af/core/controllers/threads/threadManager.py", line
>> 120, in join
>>    self._threadPool.wait( ownerObj, joinAll )
>>  File "/pentest/web/w3af/core/controllers/threads/threadpool.py", line
>> 271, in wait
>>    self.poll(block=True, ownerObj=ownerObj, joinAll=joinAll)
>>  File "/pentest/web/w3af/core/controllers/threads/threadpool.py", line
>> 108, in run
>>    self.resultQueue.put( (request, request.callable(*request.args,
>> **request.kwds)) )
>>  File "/pentest/web/w3af/plugins/discovery/webSpider.py", line 330, in
>> _verify_reference
>>    fuzzable_request_list = self._createFuzzableRequests( resp,
>> request=original_request )
>>  File
>> "/pentest/web/w3af/core/controllers/basePlugin/baseDiscoveryPlugin.py", line
>> 63, in _createFuzzableRequests
>>    return createFuzzableRequests( httpResponse, request, add_self )
>>  File "/pentest/web/w3af/core/data/request/frFactory.py", line 116, in
>> createFuzzableRequests
>>    wspdr.setURL( remoteMethod.getLocation() )
>>  File "/pentest/web/w3af/core/data/request/fuzzableRequest.py", line 367,
>> in setURL
>>    raise ValueError( msg )
>> ValueError: The "url" parameter of setURL @ fuzzableRequest must be of
>> urlParser.url_object type.
>>
>>
>> Scan finished in 11 seconds.
>> Exception in thread Thread-28:
>> Traceback (most recent call last):
>>  File "/usr/lib/python2.6/threading.py", line 532, in __bootstrap_inner
>>    self.run()
>>  File "/usr/lib/python2.6/threading.py", line 484, in run
>>    self.__target(*self.__args, **self.__kwargs)
>>  File "/pentest/web/w3af/core/ui/consoleUi/rootMenu.py", line 119, in
>> _real_start
>>    raise e
>> ValueError: The "url" parameter of setURL @ fuzzableRequest must be of
>> urlParser.url_object type.
>>
>> ------------------------------------------------------------------------------
>> All the data continuously generated in your IT infrastructure contains a
>> definitive record of customers, application performance, security
>> threats, fraudulent activity and more. Splunk takes this data and makes
>> sense of it. Business sense. IT sense. Common sense.
>> http://p.sf.net/sfu/splunk-d2d-oct
>> _______________________________________________
>> W3af-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>
>
>
>
> --
> Andrés Riancho
> Director of Web Security at Rapid7 LLC
> Founder at Bonsai Information Security
> Project Leader at w3af
>



-- 
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to