I think i've managed to visit just 2 webpages , from a lot of tries......on
different websites.
Some of the erors i get from w3af are:
Failed to send the data to the browser: [Errno 32] Broken pipe
Failed to send the data to the browser: [Errno 104] Connection reset by peer
I also get an error about an SSL cert which is valid only for
w3af.sourceforge.net as firefox reports. this is what i get logged from w3af:
Local proxy daemon handling request: localhost.localdomain - "GET
http://xxxxxxxxxxxx/favicon.ico HTTP/1.1" 403 -
Failed to send the data to the browser: [Errno 32] Broken pipe
[spiderMan] Handling request: GET http://xxxxxxxxxxxx/favicon.ico
http://xxxxxxxxxxxx/favicon.ico | Method: GET
keepalive: removed one connection, len(self._hostmap["xxxxxxxxxxxx"]): 4
keepalive: replacing bad connection with a new one
Cached DNS response for domain: xxxxxxxxxxxx
keepalive: removed one connection, len(self._hostmap["xxxxxxxxxxxx"]): 4
GET http://xxxxxxxxxxxx/favicon.ico returned HTTP code "200" - id: 403
No grep for: http://xxxxxxxxxxxx/favicon.ico, the plugin sent grepResult=False.
Local proxy daemon handling request: localhost.localdomain - "GET
http://xxxxxxxxxxxx/favicon.ico HTTP/1.1" 200 -
Local proxy daemon handling request: localhost.localdomain - "CONNECT
api.del.icio.us:443 HTTP/1.1" 200 -
SSL 'self.connection' connection state=before/accept initialization
Catched SSL.Error in do_CONNECT(): [('SSL routines', 'SSL3_READ_BYTES', 'tlsv1
alert unknown ca'), ('SSL routines', 'SSL3_READ_BYTES', 'ssl handshake
failure')]
Closing browser-proxy and proxy-site connections.
________________________________
From: Adi Mutu <[email protected]>
To: Andres Riancho <[email protected]>
Cc: "[email protected]" <[email protected]>
Sent: Tuesday, December 13, 2011 9:22 PM
Subject: Re: [W3af-users] spiderman exit?
Now it doesn't work at all.
In chrome i get "Webpage is not available", allthough I see in the log section
of w3af that some GET's are being made.
In firefox i get "Content Encoding Error . The page you are trying to view
cannot be shown because it uses an invalid or unsupported form of compression."
Does it work for you?
How should spiderman and webspider work togeher? First manual spidering and
then it continues automatically? Or both at the same time?
________________________________
From: Andres Riancho <[email protected]>
To: Adi Mutu <[email protected]>
Cc: "[email protected]" <[email protected]>
Sent: Tuesday, December 13, 2011 1:17 PM
Subject: Re: [W3af-users] spiderman exit?
Adi,
doh! This happens when you read too fast... hmmmm.... if your
browser proxy is set properly, it should work... have you tried to
request the "terminate page" more than once?
Regards,
On Tue, Dec 13, 2011 at 8:16 AM, Andres Riancho
<[email protected]> wrote:
> Adi,
>
> Got spiderman as your proxy server?
>
> On Tue, Dec 13, 2011 at 6:10 AM, Adi Mutu <[email protected]> wrote:
>>
>>
Hi,
>>
>> I have enabled only the spiderman and sqli plugins, set the proxy to my
>> browser as indicated, crawled a few pages and then i navigate
>> to “http://127.7.7.7/spiderMan?terminate"; but spiderman doesn't stop and
>> ssqli plugin is not started. what am i doing wrong?
>>
>> Also is it possible to export the crawled pages from a computer and import
>> them to another and continue with the scan there?
>>
>> Thanks,
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Systems Optimization Self Assessment
>> Improve efficiency and utilization of IT resources. Drive out cost and
>> improve service delivery. Take 5 minutes to use this Systems Optimization
>> Self Assessment. http://www.accelacomm.com/jaw/sdnl/114/51450054/
>> _______________________________________________
>> W3af-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>
>
>
>
> --
> Andrés Riancho
> Director of Web Security at Rapid7 LLC
> Founder at Bonsai Information Security
> Project Leader at w3af
--
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af
------------------------------------------------------------------------------
Systems Optimization Self Assessment
Improve efficiency and utilization of IT resources. Drive out cost and
improve service delivery. Take 5 minutes to use this Systems Optimization
Self Assessment. http://www.accelacomm.com/jaw/sdnl/114/51450054/
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users------------------------------------------------------------------------------
Systems Optimization Self Assessment
Improve efficiency and utilization of IT resources. Drive out cost and
improve service delivery. Take 5 minutes to use this Systems Optimization
Self Assessment. http://www.accelacomm.com/jaw/sdnl/114/51450054/
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users
