-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Roman,

        Please read inline,

On 08/08/2012 06:03 PM, Roman Zavolly wrote:
> Hello Andres,
> 
> 
> 
> Per different searches I can see that you respond to peoples
> queries about W3AF but I’m sure its still pretty distracting so
> hopefully I won’t take a lot of your time.  I’ve downloaded the
> latest [non-dev] w3af 1.1 from here: 
> http://sourceforge.net/projects/w3af/files/w3af/w3af%201.1/

Ok,

> The user guide 
> <http://w3af.sourceforge.net/documentation/user/w3afUsersGuide.pdf>
>
> 
dictates to run setup from within several directories.  After extracting
> the tar ball it looks like v.1.1 is missing the following:

Looks like that, but actually it is the PDF which is outdated.
Updating now,

> 
> 
> w3af/extlib/*pygoogle*
> 
> w3af/extlib/*nltk*
> 
> 
> 
> Here is a complete list of the directories that I have in the
> extracted /w3af/ directory:
> 
> 
> 
> /[root@w3af opt]# ll/
> 
> /total 39108/
> 
> /drwxr-xr-x 11 1000 1000     4096 Nov 10  2011 w3af/
> 
> /-rw-r--r--  1 root root 39994121 Aug  3 16:40 w3af-1.1.tar.bz2/
> 
> /[root@w3af opt]# cd w3af/
> 
> /[root@w3af w3af]# ll/
> 
> /total 52/
> 
> /drwxr-xr-x  6 1000 1000  4096 Nov 10  2011 core/
> 
> /drwxr-xr-x 11 1000 1000  4096 Nov 10  2011 extlib/
> 
> /drwxr-xr-x  5 1000 1000  4096 Nov 10  2011 locales/
> 
> /drwxr-xr-x 11 1000 1000  4096 Nov 10  2011 plugins/
> 
> /drwxr-xr-x  3 1000 1000  4096 Nov 10  2011 profiles/
> 
> /drwxr-xr-x  6 1000 1000  4096 Nov 10  2011 readme/
> 
> /drwxr-xr-x  3 1000 1000 12288 Nov 10  2011 scripts/
> 
> /drwxr-xr-x  3 1000 1000  4096 Nov 10  2011 tools/
> 
> /-rwxr-xr-x  1 1000 1000  4121 Nov 10  2011 w3af_console/
> 
> /-rwxr-xr-x  1 1000 1000  2834 Nov 10  2011 w3af_gui/
> 
> /[root@w3af w3af]# ll extlib//
> 
> /total 136/
> 
> /-rw-r--r--  1 1000 1000 102097 Nov 10  2011 bitvector.py/
> 
> /drwxr-xr-x  3 1000 1000   4096 Nov 10  2011 cluster/
> 
> /drwxr-xr-x  4 1000 1000   4096 Aug  3 16:47 fpconst-0.7.2/
> 
> /-rw-r--r--  1 1000 1000      0 Nov 10  2011 __init__.py/
> 
> /drwxr-xr-x  3 1000 1000   4096 Nov 10  2011 ntlm/
> 
> /drwxr-xr-x  5 1000 1000   4096 Aug  3 16:54 pyPdf/
> 
> /drwxr-xr-x 11 1000 1000   4096 Aug  3 16:59 SOAPpy/
> 
> /drwxr-xr-x  3 1000 1000   4096 Nov 10  2011 socksipy/
> 
> /drwxr-xr-x  3 1000 1000   4096 Nov 10  2011 xdot/
> 
> /drwxr-xr-x  3 1000 1000   4096 Nov 10  2011 yaml/
> 
> 
> 
> The actual problem that I’m having is that when I try to run the
> console I get the following error:
> 
> * *
> 
> *[root@w3af w3af]# ./w3af_console *

Try with "python w3af_console", this was fixed in the SVN trunk,

> *  File "./w3af_console", line 108*
> 
> *    rev = 0 if (a == 'HEAD') else -1*
> 
> *             ^*
> 
> *SyntaxError: invalid syntax*
> 
> 
> 
> I’m running:
> 
> / /
> 
> /[root@w3af w3af]# cat /etc/*release/
> 
> /Enterprise Linux Enterprise Linux Server release 5.8 (Carthage)/
> 
> /Oracle Linux Server release 5.8/
> 
> /Red Hat Enterprise Linux Server release 5.8 (Tikanga) /
> 
> / /
> 
> /[root@w3af w3af]# yum list python/
> 
> /Loaded plugins: priorities, security/
> 
> /3 packages excluded due to repository priority protections/
> 
> /Installed Packages/
> 
> /python.x86_64
>  2.4.3-46.el5_8.2            /
> 
> 
> 
> 
> 
> Although the guide said that Python 2.5 is the prerequisite,
> according to this thread 
> <http://comments.gmane.org/gmane.comp.security.w3af.user/1149> you
> said that the minimum version of Python should be 2.6/2.7.

w3af (from SVN trunk, which I recommend you use instead of the version
you downloaded and can be obtained by running svn co
https://w3af.svn.sourceforge.net/svnroot/w3af/trunk w3af) works well
with Python 2.7 and 2.6

> There is a link 
> <http://www.geekymedia.com/tech-articles/rhel5-centos5-rpms-for-python-2-5-and-2-6/>
>
> 
in the same thread that I can use to try and install later version of
> Python.  However, should the two directories I mentioned above be 
> missing from the 1.1 package?  Is my Python version trully the
> culprit here or is it the missing directories that I need to have
> in place and run the setup from to start up the console?
> 
> 
> 
> Many thanks in advance for you time and attention!
> 
> 
> 
> Roman Zavolly
> 
> Systems Engineer
> 
> Enservio.com
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
>
> 
Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and 
> threat landscape has changed and how IT managers can respond.
> Discussions will include endpoint security, mobile security and the
> latest in malware threats.
> http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> 
> 
> 
> _______________________________________________ W3af-users mailing
> list [email protected] 
> https://lists.sourceforge.net/lists/listinfo/w3af-users
> 


- -- 
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAlAi5HoACgkQLgy+VpPDRPON+gCgjKyIea3TCr8RGaNHi1uZYVyx
QD8AoJOyIIEXXH1VNZt+dtJY16s3qCht
=Dd2u
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
W3af-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/w3af-users

Reply via email to