forked from andresriancho/w3af
-
Notifications
You must be signed in to change notification settings - Fork 0
/
w3af_console
executable file
·167 lines (127 loc) · 4.46 KB
/
w3af_console
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
#!/usr/bin/env python
from __future__ import print_function
import getopt
import sys
import os
import base64
# Check if I have all needed dependencies
from w3af.core.controllers.dependency_check.dependency_check import dependency_check
dependency_check()
from w3af.core.ui.console.console_ui import ConsoleUI
from w3af.core.controllers.misc.get_w3af_version import get_w3af_version
import w3af.core.controllers.output_manager as om
USAGE_DOC = """
w3af - Web Application Attack and Audit Framework
Usage:
./w3af_console -h
./w3af_console -t
./w3af_console [-s <script_file>]
Options:
-h or --help
Display this help message
-s <script_file> or --script=<script_file>
Run <script_file> script
-n or --no-update
No update check will be made when starting. This option takes
precedence over the 'auto-update' setting in 'startup.conf' file.
-f or --force-update
An update check will be made when starting. This option takes
precedence over the 'auto-update' setting in 'startup.conf' file.
-p <profile> or --profile=<profile>
Run with the selected <profile>
-P <profile> or --profile-run=<profile>
Run with the selected <profile> in batch mode
-v or --version
Show w3af's version
For more info visit http://w3af.org/
"""
def _configure_output_manager():
"""
Make sure that the output manager is started before doing anything else,
since it is used by most w3af modules
"""
try:
om.manager.set_output_plugins(['console'])
except Exception as e:
print('Something went wrong, w3af failed to start the output manager.')
print('Exception: "%s"' % e)
sys.exit(-9)
def _usage():
print(USAGE_DOC)
def _generate_run_commands(script_file, profile, force_profile):
"""
Given the user configuration, generate the commands to run in the console
user interface at startup.
:param script_file: The script (-s) file name
:param profile: The profile (-p) name
:param force_profile: Should we run the profile? (-P)
"""
commands_to_run = []
if script_file is not None:
try:
fd = open(script_file)
except IOError:
print('Failed to open script file: "%s"' % script_file)
sys.exit(2)
else:
for line in fd:
line = line.strip()
# if not a comment..
if line != '' and line[0] != '#':
commands_to_run.append(line)
fd.close()
elif profile is not None:
current_dir = os.getcwd()
commands_to_run = ["profiles use %s %s" % (profile, current_dir)]
if force_profile is not None:
commands_to_run.append("start")
commands_to_run.append("exit")
return commands_to_run
def main():
try:
long_options = ['script=', 'help', 'version', 'no-update',
'force-update', 'profile=', 'commit=', 'profile-run']
opts, _ = getopt.getopt(sys.argv[1:], "ehvs:nfp:P:", long_options)
except getopt.GetoptError:
# Print help information and exit
_usage()
return -3
script_file = None
force_profile = None
profile = None
do_update = None
for o, a in opts:
if o == "-e":
# easter egg
msg = 'R3JhY2lhcyBFdWdlIHBvciBiYW5jYXJtZSB0YW50YXMgaG9yYXMgZGUgZG'\
'VzYXJyb2xsbywgdGUgYW1vIGdvcmRhIQ=='
print(base64.b64decode(msg))
if o in ('-s', '--script'):
script_file = a
if o in ('-P', '--profile-run'):
# selected profile
force_profile = True
profile = a
if o in ('-p', '--profile'):
# selected profile
profile = a
if o in ('-h', '--help'):
_usage()
return 0
if o in ('-v', '--version'):
print(get_w3af_version())
return 0
if o in ('-f', '--force-update'):
do_update = True
elif o in ('-n', '--no-update'):
do_update = False
commands_to_run = _generate_run_commands(script_file, profile, force_profile)
console = ConsoleUI(commands=commands_to_run, do_upd=do_update)
if not console.accept_disclaimer():
return -4
return console.sh()
def _main():
_configure_output_manager()
sys.exit(main())
if __name__ == "__main__":
_main()