Thanks Andres
Much appreciated.
Geoff Low | Software Architect I | Medidata Solutions Worldwide®
Harman House, 1 George Street, Uxbridge, UB8 1QQ
On 21 Dec 2011, at 16:03, Andres Riancho wrote:
> Geoff,
>
> Please read answers inline,
>
> On Wed, Dec 21, 2011 at 8:39 AM, Geoff Low <[email protected]> wrote:
>> Hi
>>
>> I am looking at developing an automated testing platform utilising w3af (and
>> some other tools). I am writing a tool independent specification file (so
>> any commonalities between the tools, like target, etc can be shared) which
>> is then parsed into the tool specific configuration and then executed in
>> batch mode. The specifications include what plugins to run and any plugin
>> config
>
> Ok, understood.
>
>> What is the recommended method for running w3af in a batch mode - using the
>> script_file or the profile file (in batch mode). I must say I prefer the
>> syntax of the profile file to the script file.
>
> Both provide you with almost the same power if what you want to do
> is to run a scan. The script will allow you to perform some extra
> steps line exploiting a web application vulnerability, run more than
> one scan with different configurations, etc. For your use case, I
> would recommend the profiles (which you seem to already like the best)
>
> Regards,
>
>> Thanks
>> Geoff
>>
>> Geoff Low | Software Architect I | Medidata Solutions Worldwide®
>> Harman House, 1 George Street, Uxbridge, UB8 1QQ
>>
>> ------------------------------------------------------------------------------
>> Write once. Port to many.
>> Get the SDK and tools to simplify cross-platform app development. Create
>> new or port existing apps to sell to consumers worldwide. Explore the
>> Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
>> http://p.sf.net/sfu/intel-appdev
>> _______________________________________________
>> W3af-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/w3af-users
>>
>
>
>
> --
> Andrés Riancho
> Director of Web Security at Rapid7 LLC
> Founder at Bonsai Information Security
> Project Leader at w3af
------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create
new or port existing apps to sell to consumers worldwide. Explore the
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users
