Shulou(Shulou.com)06/01 Report--

W3af is a Web application shentouceshi and audit framework. The goal of the project is to create a framework to help you protect Web applications by finding and exploiting all Web application vulnerabilities.

Github address: https://github.com/andresriancho/w3af.git

Just download git clone https://github.com/andresriancho/w3af.git directly.

Install pybloomfiltermmap graphviz after download

Apt install-y python-pybloomfiltermmap

After the installation is successful, you can see that the version that needs to be installed in the pybloomfiltermmap version 0.3.15 w3af file is 0.3.14, and the lxml and openssl versions that come with kali are not the same as those installed in w3af. You need to manually modify the w3af file to the version that comes with kali.

Vim w3af/core/controllers/dependency_check/requirements.py

PIPDependency ('pybloomfilter',' pybloomfiltermmap', '0.3.15')

PIPDependency ('OpenSSL',' pyOpenSSL', '16.2.0')

PIPDependency ('lxml',' lxml', '3.7.1')

Vim w3af/core/controllers/dependency_check/platforms/mac.py

MAC_CORE_PIP_PACKAGES.remove (PIPDependency ('pybloomfilter',' pybloomfiltermmap', '0.3.15')

Then execute. / w3af_gui to display the dependencies required for various installations and generate installation scripts in the / tmp directory

Cd to run the installation script in the tmp directory

. / w3af_dependency_install.sh

Note that the presence of successfully at this time does not necessarily mean success. See the following error report.

Since kali2.0 does not have the npm command, we can just install it at this time.

Wget http://npmjs.org/install.sh downloads the installation script, and then chmod + x install.sh gives you the execution permission and then runs it.

. / install.sh

At this point, tab can issue the npm command.

Follow the previous prompt to install npm install-g retire (long here)

Then execute the. / w3af_gui prompt to install graphviz

Apt-get install graphviz

Execute the. / w3af_gui again and prompt no module named webkit

You have to download the software package and rely on

Cd.. /

Wget http://ftp.de.debian.org/debian/pool/main/i/icu/libicu57_57.1-6+deb9u2_amd64.deb

Wget http://ftp.de.debian.org/debian/pool/main/p/pango1.0/libpango-1.0-0_1.42.4-6_amd64.deb

Wget http://ftp.br.debian.org/debian/pool/main/p/pywebkitgtk/python-webkit_1.1.8-3_amd64.deb

Wget http://ftp.br.debian.org/debian/pool/main/w/webkitgtk/libjavascriptcoregtk-1.0-0_2.4.11-3_amd64.deb

Wget http://ftp.br.debian.org/debian/pool/main/p/python-support/python-support_1.0.15_all.deb

Wget http://ftp.br.debian.org/debian/pool/main/w/webkitgtk/libwebkitgtk-1.0-0_2.4.11-3_amd64.deb

Installation

Dpkg-I libicu57_57.1-6+deb9u2_amd64.deb

Dpkg-I libpango-1.0-0mm 1.42.4-6_amd64.deb

Dpkg-I libjavascriptcoregtk-1.0-0mm 2.4.11-3_amd64.deb

Dpkg-I python-support_1.0.15_all.deb

Dpkg-I libwebkitgtk-1.0-0mm 2.4.11-3_amd64.deb

Dpkg-I python-webkit_1.1.8-3_amd64.deb

An error will occur during installation.

Don't worry to install in the order I gave and use the apt-get install-- fix-broken command to perform the repair installation and then perform the dpkg installation again.

That's it. / w3af_gui is ready to start.

Attached is a scan of the Beijing Film Academy.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.