Hi,
I have been getting below error while using "spider_man" proxy plugin in
w3af to scan the application, which is running using the HTTPS protocol.
* Error: *
File "/home/w3af/core/controllers/daemons/proxy.py", line 337, in do_CONNECT
httpsServer.process_request(conWrap, self.client_address)
File "/usr/lib64/python2.6/SocketServer.py", line 309, in process_request
self.finish_request(request, client_address)
File "/usr/lib64/python2.6/SocketServer.py", line 322, in finish_request
self.RequestHandlerClass(request, client_address, self)
File "/home/w3af/plugins/crawl/spider_man.py", line 183, in __init__
w3afProxyHandler.__init__(self, request, client_address, server)
File "/usr/lib64/python2.6/SocketServer.py", line 617, in __init__
self.handle()
File "/usr/lib64/python2.6/BaseHTTPServer.py", line 329, in handle
self.handle_one_request()
File "/home/w3af/core/controllers/daemons/proxy.py", line 73, in
handle_one_request
self.do_ALL()
File "/home/w3af/plugins/crawl/spider_man.py", line 193, in do_ALL
path = URL(self.path)
File "/home/w3af/core/data/parsers/url.py", line 196, in __init__
raise ValueError, 'Invalid URL "%s"' % (data,)
ValueError: Invalid URL "/application/index.jsp"
However, when I used the application running on HTTP protocol for scanning
through proxy there were no errors.
Please let me know whether W3af spider_man proxy plugin works for HTTPS
protocols? If so, can you please let me know the details of how to
configure w3af for the same.
Technical Details of the Local Machine:
OS: CentOS release 6.4 (Final)
Technical Details of W3af:
Version: 1.5
Revision: 319d65d0c5
Thanks,
Sandeep
------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
W3af-users mailing list
W3af-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-users
