Hey Chris,

The bug has been fixed. Feel free to update your working copy to r4469
and give it a try.

Thanks,

Javier Andalia

On Mon, Oct 24, 2011 at 12:05 PM, Chris Clements
<[email protected]> wrote:
> On Oct 24, 2011, at 9:03 AM, Andres Riancho wrote:
>
> Chris,
>
> Does this happen every time you run w3af against a specific target?
>
>
> Andres,
> It seems to be repeatable on the spidynamics test site
> http://zero.webappsecurity.com
>
> On Wed, Oct 19, 2011 at 12:26 PM, Chris Clements
> <[email protected]> wrote:
>> w3af svn 4450
>>
>> A "full audit" profile scan crashes with the error:
>>
>> Unhandled error, traceback: Traceback (most recent call last):
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 440, in start
>>    self._realStart()
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 647, in
>> _realStart
>>    self._audit()
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 1017, in
>> _audit
>>    plugin.end()
>>  File "/pentest/web/w3af/plugins/audit/ssi.py", line 150, in end
>>    self._sendMutant( fr )
>>  File "/pentest/web/w3af/core/controllers/basePlugin/basePlugin.py", line
>> 204, in _sendMutant
>>    self._analyzeResult(mutant, res)
>>  File "/pentest/web/w3af/plugins/audit/ssi.py", line 133, in
>> _analyzeResult
>>    if not ssi_error_re.search( mutant.getOriginalResponseBody()):
>> TypeError: expected string or buffer
>>
>>
>> Scan finished in 14 minutes 25 seconds.
>> Traceback (most recent call last):
>>  File "/pentest/web/w3af/core/ui/gtkUi/main.py", line 652, in
>> startScanWrap
>>    self.w3af.start()
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 440, in start
>>    self._realStart()
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 647, in
>> _realStart
>>    self._audit()
>>  File "/pentest/web/w3af/core/controllers/w3afCore.py", line 1017, in
>> _audit
>>    plugin.end()
>>  File "/pentest/web/w3af/plugins/audit/ssi.py", line 150, in end
>>    self._sendMutant( fr )
>>  File "/pentest/web/w3af/core/controllers/basePlugin/basePlugin.py", line
>> 204, in _sendMutant
>>    self._analyzeResult(mutant, res)
>>  File "/pentest/web/w3af/plugins/audit/ssi.py", line 133, in
>> _analyzeResult
>>    if not ssi_error_re.search( mutant.getOriginalResponseBody()):
>> TypeError: expected string or buffer
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> All the data continuously generated in your IT infrastructure contains a
>> definitive record of customers, application performance, security
>> threats, fraudulent activity and more. Splunk takes this data and makes
>> sense of it. Business sense. IT sense. Common sense.
>> http://p.sf.net/sfu/splunk-d2d-oct
>> _______________________________________________
>> W3af-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>
>
>
>
> --
> Andrés Riancho
> Director of Web Security at Rapid7 LLC
> Founder at Bonsai Information Security
> Project Leader at w3af
>
> ------------------------------------------------------------------------------
> The demand for IT networking professionals continues to grow, and the
> demand for specialized networking skills is growing even more rapidly.
> Take a complimentary Learning@Cisco Self-Assessment and learn
> about Cisco certifications, training, and career opportunities.
> http://p.sf.net/sfu/cisco-dev2dev
> _______________________________________________
> W3af-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
>

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to