On Oct 24, 2011, at 9:03 AM, Andres Riancho wrote:
> Chris,
>
> Does this happen every time you run w3af against a specific target?
>
Andres,
It seems to be repeatable on the spidynamics test site
http://zero.webappsecurity.com
> On Wed, Oct 19, 2011 at 12:26 PM, Chris Clements
> <[email protected]> wrote:
> > w3af svn 4450
> >
> > A "full audit" profile scan crashes with the error:
> >
> > Unhandled error, traceback: Traceback (most recent call last):
> > File "/pentest/web/w3af/core/controllers/w3afCore.py", line 440, in start
> > self._realStart()
> > File "/pentest/web/w3af/core/controllers/w3afCore.py", line 647, in
> > _realStart
> > self._audit()
> > File "/pentest/web/w3af/core/controllers/w3afCore.py", line 1017, in _audit
> > plugin.end()
> > File "/pentest/web/w3af/plugins/audit/ssi.py", line 150, in end
> > self._sendMutant( fr )
> > File "/pentest/web/w3af/core/controllers/basePlugin/basePlugin.py", line
> > 204, in _sendMutant
> > self._analyzeResult(mutant, res)
> > File "/pentest/web/w3af/plugins/audit/ssi.py", line 133, in _analyzeResult
> > if not ssi_error_re.search( mutant.getOriginalResponseBody()):
> > TypeError: expected string or buffer
> >
> >
> > Scan finished in 14 minutes 25 seconds.
> > Traceback (most recent call last):
> > File "/pentest/web/w3af/core/ui/gtkUi/main.py", line 652, in startScanWrap
> > self.w3af.start()
> > File "/pentest/web/w3af/core/controllers/w3afCore.py", line 440, in start
> > self._realStart()
> > File "/pentest/web/w3af/core/controllers/w3afCore.py", line 647, in
> > _realStart
> > self._audit()
> > File "/pentest/web/w3af/core/controllers/w3afCore.py", line 1017, in _audit
> > plugin.end()
> > File "/pentest/web/w3af/plugins/audit/ssi.py", line 150, in end
> > self._sendMutant( fr )
> > File "/pentest/web/w3af/core/controllers/basePlugin/basePlugin.py", line
> > 204, in _sendMutant
> > self._analyzeResult(mutant, res)
> > File "/pentest/web/w3af/plugins/audit/ssi.py", line 133, in _analyzeResult
> > if not ssi_error_re.search( mutant.getOriginalResponseBody()):
> > TypeError: expected string or buffer
> >
> >
> >
> > ------------------------------------------------------------------------------
> > All the data continuously generated in your IT infrastructure contains a
> > definitive record of customers, application performance, security
> > threats, fraudulent activity and more. Splunk takes this data and makes
> > sense of it. Business sense. IT sense. Common sense.
> > http://p.sf.net/sfu/splunk-d2d-oct
> > _______________________________________________
> > W3af-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/w3af-users
> >
>
>
>
> --
> Andrés Riancho
> Director of Web Security at Rapid7 LLC
> Founder at Bonsai Information Security
> Project Leader at w3af
>
------------------------------------------------------------------------------
The demand for IT networking professionals continues to grow, and the
demand for specialized networking skills is growing even more rapidly.
Take a complimentary Learning@Cisco Self-Assessment and learn
about Cisco certifications, training, and career opportunities.
http://p.sf.net/sfu/cisco-dev2dev
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users
