孙松柏,

    You should set http://host.tld/foo/bar/ as target, and then in
discovery.webspider set "onlyForward" to true

On Tue, Nov 15, 2011 at 8:44 AM, 孙松柏 <[email protected]> wrote:
>
> Does anyone know how to scan a website under a aimd site like
> http://xx.xx.com/DVWA/ not the whole site : http://xx.xx.com.using W3af
> and there is a problem i face using W3af
> - http://172.16.108.131/yazd10/vodka/viewThread.jsp | Method: GET |
> Parameters: (forum="2", thread="3")
> The "passwordProfiling" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> The "passwordProfiling" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> The "passwordProfiling" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> The "passwordProfiling" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> The "passwordProfiling" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> The "httpAuthDetect" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> The "httpAuthDetect" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> The "httpAuthDetect" plugin took more than 5 seconds to run. For a plugin
> that should only perform pattern matching, this is too much, please review
> its source code.
> can some one answer this problem
>
>
>
>
> --
> FIT1-213
> Department of Computer Science
> Tsinghua University, Beijing, 100084
> http://about.me/anakin/bio
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> W3af-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
>



-- 
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to