Package Details: w3af 1.6.46-2

Git Clone URL: https://aur.archlinux.org/w3af.git (read-only)
Package Base: w3af
Description: Web Application Attack and Audit Framework
Upstream URL: http://w3af.org/
Licenses: GPL2
Submitter: None
Maintainer: anthraxx
Last Packager: anthraxx
Votes: 29
Popularity: 0.000664
First Submitted: 2008-05-24 18:17
Last Updated: 2015-06-18 16:13

Latest Comments

anthraxx commented on 2015-12-11 22:45

@GI_Jack: yep inded... the good news is that i'm preparing those packages for the move of w3af into [community] :D

GI_Jack commented on 2015-12-11 22:44

PKGBUILD is broken due to dependency fuckery. I think this got smashed in the move to AUR4.

anthraxx commented on 2015-04-16 05:27

I'm not at home this week and can't verify the update, I will return on Friday and will then (of cause) provide a working update :)
cheers and sorry for patience,
anthraxx

hazey commented on 2015-04-16 03:43

Hey anthraxx - any luck on updating to the latest? I know you mentioned you were reworking the pkgbuild etc, thanks for maintaining and cleaning up!

BackfromHell commented on 2015-04-14 17:03

Please consider using a more recent version of w3af since this one had a bug where I was not able to scan any https targets. As of today, version 1.6.49 runs flawlessly (though I only managed to run it in a Debian VM).

anthraxx commented on 2015-03-26 11:24

small status update: PKGBUILD cleanup finished so far but there are lot of issues with packaging the new version as it wants to make installation checks using pip and has several new dependencies that do not exist yet. currently adding those and continuing the tests util everything works fine. I hope it will be possible to get this working again in the following days.

anthraxx commented on 2015-03-19 17:10

just adopted this package (and also w3af-git). Will start working on an update and fix all the problems to get this running soon, please be patient a bit!
cheers, anthraxx

Anonymous comment on 2014-07-19 07:29

$ /usr/bin/w3af
Traceback (most recent call last):
File "/usr/share/w3af/w3af_console", line 25, in <module>
from core.ui.console.console_ui import ConsoleUI
File "/usr/share/w3af/core/ui/console/console_ui.py", line 42, in <module>
from core.controllers.w3afCore import w3afCore
File "/usr/share/w3af/core/controllers/w3afCore.py", line 36, in <module>
from core.controllers.core_helpers.strategy import w3af_core_strategy
File "/usr/share/w3af/core/controllers/core_helpers/strategy.py", line 30, in <module>
from core.data.url.extended_urllib import MAX_ERROR_COUNT
File "/usr/share/w3af/core/data/url/extended_urllib.py", line 45, in <module>
from core.data.parsers.HTTPRequestParser import HTTPRequestParser
File "/usr/share/w3af/core/data/parsers/HTTPRequestParser.py", line 26, in <module>
from core.data.request.factory import create_fuzzable_request_from_parts
File "/usr/share/w3af/core/data/request/factory.py", line 29, in <module>
import core.data.parsers.parser_cache as parser_cache
File "/usr/share/w3af/core/data/parsers/parser_cache.py", line 26, in <module>
import core.data.parsers.document_parser as DocumentParser
File "/usr/share/w3af/core/data/parsers/document_parser.py", line 25, in <module>
from core.data.parsers.pdf import PDFParser, pdf_to_text
File "/usr/share/w3af/core/data/parsers/pdf.py", line 26, in <module>
from pdfminer.pdfinterp import PDFResourceManager, PDFPageInterpreter, process_pdf
ImportError: cannot import name process_pdf
$

Anonymous comment on 2014-07-19 07:01

replace 'pdfminer==20110515' with 'pdfminer'.

Shibumi commented on 2014-07-16 20:48

Please add python2-setuptools as dependency thx!

paraxor commented on 2013-12-26 15:35

@test0: Thanks. I have fixed all three issues.

test0 commented on 2013-12-25 22:33

And also please replace
Exec=/usr/bin/w3af_gui
with
Exec=/usr/bin/w3af-gui
in w3af.desktop.

test0 commented on 2013-12-25 22:24

Thanks again, Evan. But there are two more issues to go.

Issue 1:
$ w3af-gui
Traceback (most recent call last):
File "/usr/share/w3af/w3af_gui", line 104, in <module>
err_code = main()
File "/usr/share/w3af/w3af_gui", line 100, in main
import core.ui.gui.main
File "/usr/share/w3af/core/ui/gui/main.py", line 38, in <module>
from core.controllers.w3afCore import w3afCore
File "/usr/share/w3af/core/controllers/w3afCore.py", line 36, in <module>
from core.controllers.core_helpers.strategy import w3af_core_strategy
File "/usr/share/w3af/core/controllers/core_helpers/strategy.py", line 30, in <module>
from core.data.url.extended_urllib import MAX_ERROR_COUNT
File "/usr/share/w3af/core/data/url/extended_urllib.py", line 45, in <module>
from core.data.parsers.HTTPRequestParser import HTTPRequestParser
File "/usr/share/w3af/core/data/parsers/HTTPRequestParser.py", line 26, in <module>
from core.data.request.factory import create_fuzzable_request_from_parts
File "/usr/share/w3af/core/data/request/factory.py", line 29, in <module>
import core.data.parsers.parser_cache as parser_cache
File "/usr/share/w3af/core/data/parsers/parser_cache.py", line 26, in <module>
import core.data.parsers.document_parser as DocumentParser
File "/usr/share/w3af/core/data/parsers/document_parser.py", line 25, in <module>
from core.data.parsers.pdf import PDFParser, pdf_to_text
File "/usr/share/w3af/core/data/parsers/pdf.py", line 26, in <module>
from pdfminer.pdfinterp import PDFResourceManager, PDFPageInterpreter, process_pdf
ImportError: cannot import name process_pdf

Cause: See http://sourceforge.net/mailarchive/message.php?msg_id=31714213
Solution:
1) Remove python2-pdfminer-git from w3af dependencies, use pdfminer instead
2) When installing pdfminer package - change it's pkgver to 20110515 while building

Issue 2:
$ w3af-gui
Traceback (most recent call last):
File "/usr/share/w3af/w3af_gui", line 104, in <module>
err_code = main()
File "/usr/share/w3af/w3af_gui", line 100, in main
import core.ui.gui.main
File "/usr/share/w3af/core/ui/gui/main.py", line 53, in <module>
from core.ui.gui import scanrun, helpers, profiles, compare
File "/usr/share/w3af/core/ui/gui/scanrun.py", line 28, in <module>
import xdot
ImportError: No module named xdot

Cause: no xdot module, that's obvious
Solution: install xdot package from AUR and add it to dependencies of w3af

After that modifications w3af-gui runs just fine.

paraxor commented on 2013-12-23 17:19

Thanks. I changed the dependency name to 'python2-pdfminer-git' (https://aur.archlinux.org/packages/python2-pdfminer-git/).

test0 commented on 2013-12-23 16:14

Thanks a lot, Evan! But python2-pdfminer is still missing. There is pdfminer package in AUR already. I suggest you to change python2-pdfminer to pdfminer in dependencies (haven't tried to build though).

test0 commented on 2013-12-23 16:14

Thanks a lot, Evan! But python2-pdfminer is missing. There is pdfminer package in AUR already. I suggest you to change python2-pdfminer to pdfminer in dependencies (haven't tried to build though).

test0 commented on 2013-12-23 16:14

Thanks a lot! But python2-pdfminer is missing. There is pdfminer package in AUR already. I suggest you to change python2-pdfminer to pdfminer in dependencies (haven't tried to build though).

paraxor commented on 2013-12-22 12:45

I completely forgot about the new dependencies. I have uploaded them to the AUR.

test0 commented on 2013-12-22 09:31

It would be great if you'll submit the missing python2-cluster, python2-pdfminer, python2-guess-language, python2-esmre, python2-pygithub, python2-ntlm, python2-clamd, python2-phply packages :)

paraxor commented on 2013-12-22 00:35

I have fixed the issue reported by @revel and upgraded this package to version 1.5

revel commented on 2013-12-21 21:35

w3af.desktop file refers to /opt/w3af/core/ui/gtkUi/data/w3af_icon.jpeg as an icon
and yet this file is missing
perhaps it should be changed to /opt/w3af/core/ui/gtkUi/data/w3af_icon.png
[note the .png], which is present in the package

paraxor commented on 2013-10-30 20:31

I have adopted this package. I am working on updating it now.

notizblock commented on 2013-05-30 10:54

I'm no longer using w3af. Feel free to adopt it.

notizblock commented on 2013-01-02 23:38

done, thank you.

Zeph commented on 2013-01-02 23:17

Update the package, changing pysvn-py2 to python2-pysvn

notizblock commented on 2012-11-20 16:03

@cookiecaper: are these required for the console version as well? Otherwise, they are listed as optional dependencies, if you want to use the gui.

cookiecaper commented on 2012-11-19 21:54

Installing w3af on a new build, when I try to start w3af_gui I get these messages:

$ w3af_gui
w3af is officially supported under Python 2.6
You have to install graphviz library.
- On Debian based distributions: apt-get install graphviz
- On Mac: sudo port install graphviz

and

$ w3af_gui
w3af is officially supported under Python 2.6
You have to install python-gtksourceview2.
- On Debian based distributions: apt-get install python-gtksourceview2

Resolved by:
yaourt -S graphviz pygtksourceview2

Please add graphviz and pygtksourceview2 as dependencies.

notizblock commented on 2012-11-06 17:11

@jpaechnatz: Good question. I can't reproduce it yet. I'll look into it.

jpaechnatz commented on 2012-11-06 10:41

w3af_console
w3af is officially supported under Python 2.6
Your python installation needs the following packages:
nltk

pacman -Q|grep python
gstreamer0.10-python 0.10.22-1
python 3.3.0-1
python-dbus 1.1.1-2
python-dbus-common 1.1.1-2
python-distutils-extra 2.37-1
python-lxml 3.0.1-1
python-sip 4.14-2
python2 2.7.3-2
python2-beautifulsoup3 3.2.1-1
python2-cairo 1.10.0-1
python2-cherrypy 3.2.2-2
python2-cssselect 0.7.1-2
python2-cssutils 0.9.9-3
python2-dateutil 1.5-2
python2-dbus 1.1.1-2
python2-distribute 0.6.29-1
python2-dnspython 1.10.0-1
python2-fpconst 0.7.3-4
python2-gobject 3.4.1.1-1
python2-gobject2 2.28.6-8
python2-imaging 1.1.7-5
python2-lxml 3.0.1-1
python2-mechanize 0.2.5-3
python2-netifaces 0.8-1
python2-nltk 2.0.2-1
python2-notify 0.1.1-12
python2-psutil 0.6.1-2
python2-pybloomfiltermmap 0.3.8-1
python2-pykka 1.0.0-1
python2-pyopenssl 0.13-2
python2-pyqt 4.9.5-3
python2-pysqlite 2.6.3-3
python2-sip 4.14-2
python2-soappy 0.12.0-11
python2-xdg 0.23-2
python2-yaml 3.10-3

So, what am I missing?

test0 commented on 2012-10-19 16:03

@notizblock: no problem, thanks for update :)

notizblock commented on 2012-10-19 14:00

@test0: sorry about that; my mirror was out-of-sync.

test0 commented on 2012-10-19 07:16

@notizblock: so what are these:
http://www.archlinux.org/packages/extra/any/python2-fpconst/
http://www.archlinux.org/packages/extra/any/python2-soappy/
http://www.archlinux.org/packages/extra/i686/python2-pysqlite/
?
And results for this search: http://www.archlinux.org/packages/?sort=&q=fpconst&maintainer=&last_update=&flagged=&limit=50 ?

test0 commented on 2012-10-19 07:15

@notizblock: so what are these:
http://www.archlinux.org/packages/extra/any/python2-fpconst/
http://www.archlinux.org/packages/extra/any/python2-soappy/
http://www.archlinux.org/packages/extra/i686/python2-pysqlite/
?

test0 commented on 2012-10-19 07:14

@notizblock: oh, really? So what are these:
http://www.archlinux.org/packages/extra/any/python2-fpconst/
http://www.archlinux.org/packages/extra/any/python2-soappy/
http://www.archlinux.org/packages/extra/i686/python2-pysqlite/
?

notizblock commented on 2012-10-18 18:42

@test0 none of them have been renamed to python2-*.

test0 commented on 2012-10-18 06:20

Maybe it's time to change python-fpconst, python-soappy and python-pysqlite to python2-fpconst, python2-soappy and python2-pysqlite in dependencies?

test0 commented on 2012-09-29 13:59

Oh, after comparing python2 -v's logs from my computer and computer with working same copy of w3af I've found that there is no numpy mentions in my load log.
So I've installed python2-numpy and now w3af works just fine, even gui. Maybe you want to add this package to deps?

test0 commented on 2012-09-29 13:58

Oh, after comparing python2 -v's logs from my computer and computer with working same copy of w3af I've found that there is no numpy in my load log.
So I've installed python2-numpy and now w3af works just fine, even gui. Maybe you want to add python2-numpy to dependencies?

test0 commented on 2012-09-27 00:39

Fails to start for me, complains that I don't have nltk, although I do have that.
$ pacman -Q python2-nltk
python2-nltk 2.0.2-1

With "python2 -v /opt/w3af/w3af_console" gives the following output: http://pastebin.com/5k9EGxGY
And with this test code:

try:
import nltk
except Exception, e:
print "oops"

Nothing is printed, though. That's a miracle? :D

test0 commented on 2012-09-27 00:34

Fails to start for me, complains that I don't have nltk, although I do have that.
$ pacman -Q python2-nltk
python2-nltk 2.0.2-1

With "python2 -v /opt/w3af/w3af_console" gives the following output: http://pastebin.com/5k9EGxGY
And with this test code:

try:
import nltk
except Exception, e:
print "oops"

Nothing is printed, though. That's a miracle? :D

test0 commented on 2012-09-27 00:32

Fails to start for me, complains that I don't have nltk, although I do have that.
$ pacman -Q python2-nltk
python2-nltk 2.0.2-1

With "python2 -v /opt/w3af/w3af_console" gives the following output: http://pastebin.com/5k9EGxGY
And with this test code:

try:
import nltk
except Exception, e:
print "oops"

Nothing is printed, though. That's a miracle? :D

test0 commented on 2012-09-27 00:30

Fails to start for me, complains that I don't have nltk, although I do have that.
$ pacman -Q python2-nltk
python2-nltk 2.0.2-1

With "python2 -v /opt/w3af/w3af_console" gives the following output: http://pastebin.com/5k9EGxGY
And with this test code:

try:
import nltk
except Exception, e:
print "oops"

Nothing is printed, though.

test0 commented on 2012-09-27 00:30

Fails to start for me, complains that I don't have nltk, although I do have that.
$ pacman -Q python2-nltk
python2-nltk 2.0.2-1

With "python2 -v /opt/w3af/w3af_console" foves the following output: http://pastebin.com/5k9EGxGY
And with this test code:

try:
import nltk
except Exception, e:
print "oops"

Nothing is printed, though.

cookiecaper commented on 2012-09-25 13:38

My issue has been resolved with python2-pybloomfiltermmap 0.3.8. See https://github.com/axiak/pybloomfiltermmap/issues/22 .

cookiecaper commented on 2012-09-21 18:46

Fails to start for me, complains that I don't have pybloomfiltermmap, although I do have that.

$ w3af_gui
w3af is officially supported under Python 2.6
On debian based systems:
sudo apt-get install python2.6-dev

Additional information:
pybloomfiltermmap is a required dependency in *nix systems, please install from http://pypi.python.org/pypi/pybloomfiltermmap/0.2.0

$ yaourt -Ss pybloomfiltermmap
aur/python2-pybloomfiltermmap 0.3.6-1 [installed] (10)

bl4rk commented on 2012-07-24 15:52

spiderman seems to be b0rked. every URL I visit gives me this error:

[Tue 24 Jul 2012 11:48:17 AM EDT] https://REDACTED:443/REDACTED | Method: GET
[Tue 24 Jul 2012 11:48:17 AM EDT] Traceback for this error: Traceback (most recent call last):
File "/opt/w3af/core/controllers/daemons/proxy.py", line 425, in do_CONNECT
httpsServer.process_request(conWrap, self.client_address)
File "/usr/lib/python2.7/SocketServer.py", line 311, in process_request
self.shutdown_request(request)
File "/usr/lib/python2.7/SocketServer.py", line 459, in shutdown_request
request.shutdown(socket.SHUT_WR)
TypeError: shutdown() takes exactly 0 arguments (1 given)

Something wrong in Python land. Hrmmmm.

notizblock commented on 2012-07-17 20:53

I finally found the time to fix the reported problems. It works for me now; please report if it does not work for you.

Anonymous comment on 2012-07-17 17:54

got an error when launching saying i needed python-lxml when it was already installed, so i installed python2-lxml which recommended python2-beautifulsoup3, which i installed and then it worked. not sure if it was python2-lxml or python2-beautifulsoup3 that did the trick but it needed one of them

Anonymous comment on 2012-07-17 17:28

after googleing a bit, found out just putting a ! in front of the option for "strip" in /etc/makepkg.conf got around this.

Anonymous comment on 2012-07-17 16:52

I got the same error as seed419
==> Tidying install...
-> Purging unwanted files...
-> Compressing man and info pages...
-> Stripping unneeded symbols from binaries and libraries...
strip:./opt/w3af/plugins/attack/payloads/code/netcat: File format not recognized
/usr/bin/fakeroot: line 181: 4939 User defined signal 1 FAKEROOTKEY=$FAKEROOTKEY LD_LIBRARY_PATH="$PATHS" LD_PRELOAD="$LIB" "$@"

Anonymous comment on 2012-06-04 15:05

I get the following error during build

strip:./opt/w3af/plugins/attack/payloads/code/netcat: File format not recognized
/usr/bin/fakeroot: line 181: 7375 User defined signal 1 FAKEROOTKEY=$FAKEROOTKEY LD_LIBRARY_PATH="$PATHS" LD_PRELOAD="$LIB" "$@"

notizblock commented on 2012-02-28 16:14

done, thx @ s1gma

Anonymous comment on 2012-02-28 15:08

Dependency python-nltk should be updated to python2-nltk.

Anonymous comment on 2011-11-13 22:32

It is working fine, but we have two libs to do the same thing, right?


I think we should report upstream. What you think about it?

notizblock commented on 2011-11-12 00:12

@Gomex,
well i think it may be already solved with version 1.1.

Is the current version working for you?

Anonymous comment on 2011-11-11 20:57

@notizblock

Great job! But I really wanna report this bug to upstream. Can you please help me?

notizblock commented on 2011-11-11 11:51

@Gomex,
nope i didn't report the issue. It seems like version 1.1 requires python2-pybloomfiltermmap anyway.

Anonymous comment on 2011-11-11 02:51

@notizblock

Did you report the upstream? Do you need some help to do that?

notizblock commented on 2011-11-10 21:02

updated to version 1.1

Anonymous comment on 2011-11-07 17:08

@Notizbock

Just remove that package! :D

notizblock commented on 2011-11-07 17:05

@Gomex

This is a good idea, since i can't reproduce the bug.

Anonymous comment on 2011-11-07 16:50

@Notizblock

What you think about report the upstream? That check is broken, right?

notizblock commented on 2011-11-07 16:49

@Gomex

w3af brings its own version of pybloom (/opt/w3af/core/data/bloomfilter/pybloom.py).

i'll try to remove it from core/data/bloomfilter and use the package from aur.

notizblock commented on 2011-11-07 16:48

@Gomex

w3af brings its own version of pybloom (/opt/w3af/core/data/bloomfilter/pybloom.py).

i'll try to remove it from core/data/bloomfilter and use the package from aur.

notizblock commented on 2011-11-07 16:42

@Gomex

this is getting strange… It does not make any difference whether python2-pybloomfiltermmap is installed or not.

Anonymous comment on 2011-11-07 16:33

@notizblock

I couldn't start w3af_console without python2-pybloomfiltermmap. Can you please try?


[root@gondor ~]# pacman -R python2-pybloomfiltermmap
checking dependencies...

Remove (1): python2-pybloomfiltermmap-0.2.0-1

Total Removed Size: 0.11 MB

Do you want to remove these packages? [Y/n] y
(1/1) removing python2-pybloomfiltermmap [################################################] 100%
[root@gondor ~]# w3af_console
w3af is officially supported under Python 2.6
On debian based systems:
sudo apt-get install python2.6-dev

Additional information:
pybloomfiltermmap is a required dependency in *nix systems, please install from http://pypi.python.org/pypi/pybloomfiltermmap/0.2.0

notizblock commented on 2011-11-07 16:27

@Gomex
Could you please try to start w3af_console without the packages being installed.
According to the user guide [1], these are only needed when running the gui (thus optdepends).

thx!
[1] http://w3af.svn.sourceforge.net/viewvc/w3af/trunk/readme/EN/w3af-users-guide.pdf

Anonymous comment on 2011-11-07 16:10

@notizblock

The problem is that without this packages you can't run that software.

notizblock commented on 2011-11-07 14:48

some of these are listed in optdepens. i'll look into python2-pybloomfiltermmap when i have time.

Anonymous comment on 2011-11-07 13:04

Hi guys, to use this program we need this packages:

python2-pybloomfiltermmap (AUR)
graphviz (PACMAN)
pygtksourceview2 (PACMAN)

Can you fix it?

notizblock commented on 2011-02-03 23:08

yep, thx @kost for pointing this out.

Anonymous comment on 2011-02-03 22:45

I think dependency should include python2-pyopenssl

notizblock commented on 2011-01-25 22:42

@Mazra: thx for reporting - fixed now.

Anonymous comment on 2011-01-25 21:13

Got an error during build.

rm: cannot remove `/home/matt/w3af/src/w3af/extlib/nltk': No such file or directory
rm: cannot remove `/home/matt/w3af/src/w3af/extlib/nltk_contrib': No such file or directory

Fixed by removing nltk and nltk_contrib from the rm line in the build section.

notizblock commented on 2011-01-10 11:20

updated, thx @kost

notizblock commented on 2011-01-10 11:20

updated, thx @kost

Anonymous comment on 2011-01-10 07:17

you should include $* or something similar in calls to w3af_ executables. I.e. in line like this:
python2 /opt/w3af/w3af_console
should be like this (or something similar):
python2 /opt/w3af/w3af_console $*

(as executables accept arguments)

notizblock commented on 2010-11-03 06:51

new version is out.

notizblock commented on 2010-10-20 05:33

maintenance update for arch's python transition.