Offensive Thinking

w3af WebScarab and Burp Proxy import

Posted: 2009-08-11

The WebScarab and Burp Proxy log file import I was talking about in this post has made it to w3af’s trunk as of revision 2995. The code I wrote for the WebScarab part was largely taken from sqlmap, which happened to already have a working import feature written in Python. No need to reinvent the wheel. Although I must say, after having a second glance at the code there are some shortcomings (as I have already addressed on w3af’s mailing list).

Andrés took Jon’s and my code and merged them into one function, as Burp and WebScarab seem to be quite similar in how they write their logs. As far as I understood Jon, he’s still writing some code which works for even more proxy logs, so maybe we’ll see an update which makes the importResults plugin even better.