[TOOL] w3af - Web Application Attack and Audit Framework
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: [TOOL] w3af - Web Application Attack and Audit Framework
- From: "Andres Riancho" <andres.riancho@xxxxxxxxx>
- Date: Thu, 18 Oct 2007 20:40:26 -0300
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=0YAkuQfvYp481D/gBL9Ir7eEG3/zNQ+4R/sT+Tix2l8=; b=MgpTkXEOWGKFTalLXFe4EHUg6SawuMCf6NR4e3Erl3D9hUYjQ3nh2zHJ4aEePhd/pRJcfcf3xgrr/bM1SoKFQgen8DuBhNEuU19hYXelpjkkuQ8HgYUWq50evJ1YoCRMuncDD2skgTz9+jZsKz6da0c2ggsNGdbSUaM7HQtsuJ8=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=oMzt3Klp/ccDr27d1rR3eZBEzKOGJ6EkTPytMOguRy3L1MaFMm2hbiJTCQeLAkPssU9YYfnEG/G/izHzDbMUpoBXG9BnvRXwZoxuk44RrmVCSmrATCm31EhO7UV35StpnepqHMfGmZKdS+Kgr6qOdB1nTXSlvAwVcHb3tL1QYw4=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
List,
I'm glad to release the fifth beta of w3af. For those that still
don't know, w3af is a fully automated auditing and exploiting
framework for the web. More info can be found at
http://w3af.sourceforge.net/ .
They are really *a lot* of changes from beta4 to make an detailed
list, but a small summary will give you an idea of the new features I
have been working on:
- Virtual daemon, a way to use Metasploit framework
payloads/shellcodes while exploiting web applications.
- w3afAgent, a reverse VPN that allows you to route packets
through the compromised server
- Good samaritan, a module that allows you to exploit blind sql
injections much faster
- 20+ new plugins
- A lot of bug fixes
- A much more stable core.
The users guide can be found here:
- http://w3af.sourceforge.net/documentation/user/w3afUsersGuide.pdf
I also uploaded the presentation materials of my talk at the T2
conference in Finland ( http://www.t2.fi/ ). The PDF file is a nice
introduction to the interesting features implemented in the framework
and can be found here:
- http://w3af.sourceforge.net/documentation/user/w3af-T2.pdf
Cheers,
--
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework