Discussion:
[W3af-users] facing issue while executing commands inside w3af console when connected through ssh connection handler
ravi keerthi m d
2016-09-22 19:42:58 UTC
Permalink
Hi,
Manually I am able to execute my w3af commands successfully. When
trying to
execute same w3af commands using a ssh connection then it is appending
a ^J,
so whatever commands I am executing it is executing like "^Jplugins".
w3af >>> ^J
this is the first output after executing w3af_console using ssh
connection
handler, now when I execute "plugins" command the output looks like this
w3af >>> ^Jplugins
It is saying command not found.
Can you please help me out in this. Because using same ssh connection
handler I am able to run metasploit framework commands on msfconsole.
Thanks,
Ravi
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
GPG: 0x93C344F3
Andres Riancho
2016-09-23 18:15:18 UTC
Permalink
Works on my PC (tm)

[pablo:/home/pablo] 35m40s $ ssh ***@127.0.0.1
The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.
ECDSA key fingerprint is a0:6d:ef:23:e0:e0:0a:3a:63:67:cd:1d:4f:79:4d:4e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts.
***@127.0.0.1's password:
Welcome to Ubuntu 14.04.5 LTS (GNU/Linux 3.13.0-96-generic x86_64)

* Documentation: https://help.ubuntu.com/

Last login: Mon Aug 8 13:59:49 2016
[***@eulogias:/home/pablo] 1 $ cd pch/w3af/
[***@eulogias:/home/pablo/pch/w3af] master ± ./w3af_console
w3af>>> plugins
w3af/plugins>>> back
w3af>>> exit

Liked it? Donate some money!

[***@eulogias:/home/pablo/pch/w3af] master 12s ±



On Thu, Sep 22, 2016 at 4:42 PM, ravi keerthi m d
Hi,
Manually I am able to execute my w3af commands successfully. When trying
to
execute same w3af commands using a ssh connection then it is appending a
^J,
so whatever commands I am executing it is executing like "^Jplugins".
w3af >>> ^J
this is the first output after executing w3af_console using ssh
connection
handler, now when I execute "plugins" command the output looks like this
w3af >>> ^Jplugins
It is saying command not found.
Can you please help me out in this. Because using same ssh connection
handler I am able to run metasploit framework commands on msfconsole.
Thanks,
Ravi
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
GPG: 0x93C344F3
------------------------------------------------------------------------------
_______________________________________________
W3af-users mailing list
https://lists.sourceforge.net/lists/listinfo/w3af-users
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3

------------------------------------------------------------------------------
ravi keerthi m d
2016-09-23 18:20:38 UTC
Permalink
Even I tried the same way it works.. But while using pexpect python module
I'm facing issue..

Let's think it's a pexpect issue, but the same module works for
Metasploit, nessus, etc..
Post by Andres Riancho
Works on my PC (tm)
The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.
ECDSA key fingerprint is a0:6d:ef:23:e0:e0:0a:3a:63:67:cd:1d:4f:79:4d:4e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts.
Welcome to Ubuntu 14.04.5 LTS (GNU/Linux 3.13.0-96-generic x86_64)
* Documentation: https://help.ubuntu.com/
Last login: Mon Aug 8 13:59:49 2016
w3af>>> plugins
w3af/plugins>>> back
w3af>>> exit
Liked it? Donate some money!
On Thu, Sep 22, 2016 at 4:42 PM, ravi keerthi m d
Hi,
Manually I am able to execute my w3af commands successfully. When
trying
to
execute same w3af commands using a ssh connection then it is
appending a
^J,
so whatever commands I am executing it is executing like "^Jplugins".
w3af >>> ^J
this is the first output after executing w3af_console using ssh
connection
handler, now when I execute "plugins" command the output looks like
this
w3af >>> ^Jplugins
It is saying command not found.
Can you please help me out in this. Because using same ssh connection
handler I am able to run metasploit framework commands on msfconsole.
Thanks,
Ravi
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
GPG: 0x93C344F3
------------------------------------------------------------
------------------
_______________________________________________
W3af-users mailing list
https://lists.sourceforge.net/lists/listinfo/w3af-users
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
GPG: 0x93C344F3
Andres Riancho
2016-09-23 18:34:39 UTC
Permalink
Ah, your initial bug report never mentioned pexpect.

^J is a control char, new line according to [0]. This doesn't seem to
be a w3af problem.

[0] http://www.robelle.com/smugbook/ascii.html

On Fri, Sep 23, 2016 at 3:20 PM, ravi keerthi m d
Post by ravi keerthi m d
Even I tried the same way it works.. But while using pexpect python module
I'm facing issue..
Let's think it's a pexpect issue, but the same module works for Metasploit,
nessus, etc..
Post by Andres Riancho
Works on my PC (tm)
The authenticity of host '127.0.0.1 (127.0.0.1)' can't be established.
ECDSA key fingerprint is a0:6d:ef:23:e0:e0:0a:3a:63:67:cd:1d:4f:79:4d:4e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '127.0.0.1' (ECDSA) to the list of known hosts.
Welcome to Ubuntu 14.04.5 LTS (GNU/Linux 3.13.0-96-generic x86_64)
* Documentation: https://help.ubuntu.com/
Last login: Mon Aug 8 13:59:49 2016
w3af>>> plugins
w3af/plugins>>> back
w3af>>> exit
Liked it? Donate some money!
On Thu, Sep 22, 2016 at 4:42 PM, ravi keerthi m d
Hi,
Manually I am able to execute my w3af commands successfully. When trying
to
execute same w3af commands using a ssh connection then it is appending a
^J,
so whatever commands I am executing it is executing like "^Jplugins".
w3af >>> ^J
this is the first output after executing w3af_console using ssh
connection
handler, now when I execute "plugins" command the output looks like this
w3af >>> ^Jplugins
It is saying command not found.
Can you please help me out in this. Because using same ssh connection
handler I am able to run metasploit framework commands on msfconsole.
Thanks,
Ravi
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
GPG: 0x93C344F3
------------------------------------------------------------------------------
_______________________________________________
W3af-users mailing list
https://lists.sourceforge.net/lists/listinfo/w3af-users
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
GPG: 0x93C344F3
--
Andrés Riancho
Project Leader at w3af - http://w3af.org/
Web Application Attack and Audit Framework
Twitter: @w3af
GPG: 0x93C344F3

------------------------------------------------------------------------------
Loading...