andresriancho / w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.
http://w3af.org/
4.53k stars 1.21k forks source link

Does the w3af have python3 version? #17866

Open jianghoo opened 5 years ago

jianghoo commented 5 years ago

Does the w3af have python3 version?

andresriancho commented 5 years ago

No, but we'll have to migrate at some point!

MartinFalatic commented 4 years ago

That time is quickly approaching (especially since Python 2 won't have security updates itself after the end of this year). Has there been progress in this regard?

andresriancho commented 4 years ago

No progress in this area.

XVilka commented 4 years ago

Python 2 is dead in a month, and many distributions started to remove python2 packages already. It makes sense to start the migration.

https://pythonclock.org/

anthraxx commented 4 years ago

Hm yeah, bigger major distros will not package python2 in upcoming versions, sad to see this tool struggling soon. It may obviously be lots of work and testing time, but hope this doesn't vanish

juju4 commented 4 years ago

trying switch to python3 in my ansible role (https://travis-ci.org/juju4/ansible-w3af/jobs/654157164#L3736) and many issues found

and after, get https://travis-ci.org/juju4/ansible-w3af/jobs/654221776#L4076

# w3af_console -v
Traceback (most recent call last):
  File "/usr/local/share/w3af/w3af_console", line 12, in <module>
    from w3af.core.controllers.dependency_check.dependency_check import dependency_check
  File "/usr/local/share/w3af/w3af/core/controllers/dependency_check/dependency_check.py", line 26, in <module>
    from w3af.core.data.db.startup_cfg import StartUpConfig
  File "/usr/local/share/w3af/w3af/core/data/db/startup_cfg.py", line 22, in <module>
    import ConfigParser
ModuleNotFoundError: No module named 'ConfigParser'

classic python3 migration https://stackoverflow.com/questions/14087598/python-3-importerror-no-module-named-configparser

any plan?

thanks

linxon commented 4 years ago

bump

Kali95739 commented 4 years ago

Is this tool still active or is it dead

Kali95739 commented 4 years ago

It's dead use industry standards such as acunetix burpsuite or detectify.

ITSundae commented 3 years ago

It is depressing that w3af quietly died like this. At the moment, it requires a good bit of messing around to get working now. I hope to see it return again, but it does not seem likely as even the author has left it behind.

codders commented 1 year ago

I'm happy to report that there is some work on-going on a python3 version: https://github.com/w4af/w4af It's still in pretty early stages, but feedback and user experience reports are greatly appreciated.