full-disclosure - [TOOL] w3af - Web Application Attack and Audit Framework

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <cdfaf8b20710181639g297ebc03xd2f55d344fbae376@mail.gmail.com>
Date: Thu, 18 Oct 2007 20:39:27 -0300
From: "Andres Riancho" <andres.riancho@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: [TOOL] w3af - Web Application Attack and Audit
	Framework

List,

    I'm glad to release the fifth beta of w3af. For those that still
don't know, w3af is a fully automated auditing and exploiting
framework for the web. More info can be found at
http://w3af.sourceforge.net/ .

    They are really *a lot* of changes from beta4 to make an detailed
list, but a small summary will give you an idea of the new features I
have been working on:

    - Virtual daemon, a way to use Metasploit framework
payloads/shellcodes while exploiting web applications.
    - w3afAgent, a reverse VPN that allows you to route packets
through the compromised server
    - Good samaritan, a module that allows you to exploit blind sql
injections much faster
    - 20+ new plugins
    - A lot of bug fixes
    - A much more stable core.

    The users guide can be found here:
        - http://w3af.sourceforge.net/documentation/user/w3afUsersGuide.pdf

    I also uploaded the presentation materials of my talk at the T2
conference in Finland ( http://www.t2.fi/ ). The PDF file is a nice
introduction to the interesting features implemented in the framework
and can be found here:
        - http://w3af.sourceforge.net/documentation/user/w3af-T2.pdf

Cheers,
-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/