w3af 二次开发手记

w3af 常用命令

• w3af_console

w3af>>>

• w3af>>> help

w3af>>> help
|-----------------------------------------------------------------------------|
| start         | Start the scan.                                             |
| plugins       | Enable and configure plugins.                               |
| exploit       | Exploit the vulnerability.                                  |
| profiles      | List and use scan profiles.                                 |
| cleanup       | Cleanup before starting a new scan.                         |
|-----------------------------------------------------------------------------|
| http-settings | Configure the HTTP settings of the framework.               |
| misc-settings | Configure w3af misc settings.                               |
| target        | Configure the target URL.                                   |
|-----------------------------------------------------------------------------|
| back          | Go to the previous menu.                                    |
| exit          | Exit w3af.                                                  |
| assert        | Check assertion.                                            |
|-----------------------------------------------------------------------------|
| help          | Display help. Issuing: help [command] , prints more         |
|               | specific help about "command"                               |
| version       | Show w3af version information.                              |
| keys          | Display key shortcuts.                                      |
|-----------------------------------------------------------------------------|

• w3af>>> version

w3af>>> version
w3af - Web Application Attack and Audit Framework
Version: 1.2
Revision: unknown
Distribution: Debian
Author: Andres Riancho and the w3af team.

最近没时间研究咯~待续