It seems that your target application is doing something odd such as closing connections with a WAF, or there is a lot of network delay, etc. Are you sure you're using the latest w3af version from our SVN? With our latest version you should be able to run w3af --version and get something like this:
dz0@dz0-laptop:~/workspace/w3af$ ./w3af_console --version w3af - Web Application Attack and Audit Framework Version: 1.2 Revision: 4923 Author: Andres Riancho and the w3af team. On Sun, Apr 22, 2012 at 10:41 PM, You Know My Name, My name is Bond, James Bond <[email protected]> wrote: > Hi Andres, > > The following is the crash report that I am getting every time that I am > starting to run W3af Version 1.1 on Linux, Ubuntu distribution: > > Traceback (most recent call last): > File "/usr/share/w3af/core/ui/gtkUi/main.py", line 590, in startScanWrap > self.w3af.start() > File "/usr/share/w3af/core/controllers/w3afCore.py", line 417, in start > self._realStart() > File "/usr/share/w3af/core/controllers/w3afCore.py", line 602, in _realStart > self._end( e ) > File "/usr/share/w3af/core/controllers/w3afCore.py", line 676, in _end > tm.join( joinAll=True ) > File "/usr/share/w3af/core/controllers/threads/threadManager.py", line 119, > in join > self._threadPool.wait( ownerObj, joinAll ) > File "/usr/share/w3af/core/controllers/threads/threadpool.py", line 260, in > wait > self.poll(block=True, ownerObj=ownerObj, joinAll=joinAll) > File "/usr/share/w3af/core/controllers/threads/threadpool.py", line 245, in > poll > raise result > w3afException: w3afMustStopException found by _send_404, someone else will > handle it. > > Any help will be greatly appreciated. > > Sincerely > > James > > ________________________________ > From: Andres Riancho <[email protected]> > To: "You Know My Name, My name is Bond, James Bond" <[email protected]> > Cc: "[email protected]" <[email protected]> > Sent: Sunday, April 22, 2012 6:15 AM > Subject: Re: [W3af-users] W3af stoops after scanning 21.60% or crashes > > Sorry but I didn't read your email just the subject, which w3af > version are you using? Which OS? > > On Sat, Apr 21, 2012 at 10:02 PM, You Know My Name, My name is Bond, > James Bond <[email protected]> wrote: >> Dear Andrés, >> >> I am writing this email to you requesting your assistant in helping me in >> troubleshooting problems with W3af. Your kindness and response to my email >> will be immensely appreciated. >> >> I have been using W3af for the past two weeks very extensively. I am very >> excited about the program and I can see how the program can stand up to >> its >> promises. But, unfortunately, I have not been able to complete even a >> single >> operation with the W3af due to crashing and or to program suspending >> operation. >> >> Initially I have used W3af on Linux, Ubuntu distribution, which I have >> downloaded directly from the Ubuntu package archives. Unfortunately, the >> program kept on crashing shortly after starting. I was thinking that >> perhaps >> I have misused or misconfigured the W3af, which now I do not believe is >> the >> case. I have read the w3af User Guide, Document version: 2.0 many times >> and >> watched videos on YouTube and on W3af website. >> >> Just before giving up on the program I decided to install W3af on Window >> 7. >> The program runs without crashing, but it seems to stop all the time when >> reaching 21.60%. I have left the program running for 3 days assuming that >> the warning, which is clearly stating in the w3af User Guide -- it is >> going >> to take long time and perhaps days -- might be relevant to my case. >> >> On a positive note, W3af managed to discover with only 21.60% numerous >> "MD5" >> hash and to detect other vulnerabilities. However, by conducting several >> deferent scans I have gotten different results. In a way of example W3af >> found deferent number of hashs on the same website. >> >> I could not manage to decode any of the MD5s using the tools provided in >> W3af. Those Hashs are: >> >> D41d8cd98f00b204e9800998ecf8427e >> >> 6fa5720fad59de166d01936dc0982d61 >> >> faa166cdbdb7d5ea61dae46bbf4db088" >> >> SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 >> >> aptchaKey=1ae0fcc6e08bb30eeeed7bb7fc00da80 >> >> I am taking this opportunity and thanking you in advance for taking your >> time to read this email and eagerly waiting for your prompt reply. >> Sincerely >> >> James >> >> >> ------------------------------------------------------------------------------ >> For Developers, A Lot Can Happen In A Second. >> Boundary is the first to Know...and Tell You. >> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE! >> http://p.sf.net/sfu/Boundary-d2dvs2 >> _______________________________________________ >> W3af-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/w3af-users >> > > > > -- > Andrés Riancho > Project Leader at w3af - http://w3af.org/ > Web Application Attack and Audit Framework > > -- Andrés Riancho Project Leader at w3af - http://w3af.org/ Web Application Attack and Audit Framework ------------------------------------------------------------------------------ For Developers, A Lot Can Happen In A Second. Boundary is the first to Know...and Tell You. Monitor Your Applications in Ultra-Fine Resolution. Try it FREE! http://p.sf.net/sfu/Boundary-d2dvs2 _______________________________________________ W3af-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/w3af-users
