Geoff,
Please read answers inline,
On Wed, Dec 21, 2011 at 8:39 AM, Geoff Low <[email protected]> wrote:
> Hi
>
> I am looking at developing an automated testing platform utilising w3af (and
> some other tools). I am writing a tool independent specification file (so
> any commonalities between the tools, like target, etc can be shared) which
> is then parsed into the tool specific configuration and then executed in
> batch mode. The specifications include what plugins to run and any plugin
> config
Ok, understood.
> What is the recommended method for running w3af in a batch mode - using the
> script_file or the profile file (in batch mode). I must say I prefer the
> syntax of the profile file to the script file.
Both provide you with almost the same power if what you want to do
is to run a scan. The script will allow you to perform some extra
steps line exploiting a web application vulnerability, run more than
one scan with different configurations, etc. For your use case, I
would recommend the profiles (which you seem to already like the best)
Regards,
> Thanks
> Geoff
>
> Geoff Low | Software Architect I | Medidata Solutions Worldwide®
> Harman House, 1 George Street, Uxbridge, UB8 1QQ
>
> ------------------------------------------------------------------------------
> Write once. Port to many.
> Get the SDK and tools to simplify cross-platform app development. Create
> new or port existing apps to sell to consumers worldwide. Explore the
> Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
> http://p.sf.net/sfu/intel-appdev
> _______________________________________________
> W3af-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/w3af-users
>
--
Andrés Riancho
Director of Web Security at Rapid7 LLC
Founder at Bonsai Information Security
Project Leader at w3af
------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create
new or port existing apps to sell to consumers worldwide. Explore the
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users
