[prev in list] [next in list] [prev in thread] [next in thread] 

List:       owasp-webscarab
Subject:    [Owasp-webscarab]  Webscarab classic enhancements?
From:       Rick Brown <malydog () gmail ! com>
Date:       2012-04-18 8:21:43
Message-ID: CAHgcfNxEcCHBj4hb8kp4QxaV+DNe_QshEFNpg5b_=9w=nmhsmA () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


oops i guess i was meant to "reply to all" - sorry.


---------- Forwarded message ----------
From: Rick Brown <malydog@gmail.com>
Date: Wed, Apr 18, 2012 at 6:13 PM
Subject: Re: [Owasp-webscarab] Webscarab classic enhancements?
To: Martin Holst Swende <martin@swende.se>


Ah - lots of nice new features there. Looking good. And the move to maven
is a big bonus.

Love the new behavior of "Tree Selection filters conversation list".
"Discard Conversations" - that's one of the enhancements I was considering
I would have a go at myself.

FYI I'm coming at this as a web developer rather than a security expert
like you fellows. "Fiddler" is the big name for MITM proxies in the web dev
world but it only runs on windows.

Anyway thanks for the friendly responses. I'm going to go poke around in
the source for a bit now.


On Wed, Apr 18, 2012 at 5:06 PM, Martin Holst Swende <martin@swende.se>wrote:

> Here are the commits:
>
>
> http://dawes.za.net/gitweb.cgi?p=webscarab.git;a=search;s=Martin+Holst+Swende;st=author
>
>
> Regards,
> Martin
>
> Ps. And btw, the DOM-xss-indicator is very naive. Anyone wanting to
> improve it could use the regexps in
> http://code.google.com/p/domxsswiki/wiki/FindingDOMXSS as a basis.
>
> On 04/18/2012 07:41 AM, Martin Holst Swende wrote:
> > Actually, I think it's in there, look at Rogans git tree.
> >
> > Skickat från min iPhone
> >
> > 18 apr 2012 kl. 07:11 skrev Rogan Dawes <rogan@dawes.za.net>:
> >
> >> On 2012/04/17 10:49 PM, malydog@gmail.com wrote:
> >>>
> >>> I stumbled across this email thread:
> >>>
> https://lists.owasp.org/pipermail/owasp-webscarab/2009-November/001033.html
> >>>
> >>> Some of the features sound pretty good but they don't seem to have
> found
> >>> their way into webscarab classic.
> >>>
> >>> Does anyoneknow if these contributions were actually adopted into the
> >>> webscarab project?
> >>>
> >>> Whilst webscarab is awesome there are a number of simple features it
> >>> lacks. I would be interested in providing some enhancements myself but
> >>> not if there is no chance of them going anywhere.
> >> Hi Malydog,
> >>
> >> I'll confess that I have not had much time/inclination to spend on
> webscarab for a while.
> >>
> >> However, I have started merging the features added by Frank Cornelis
> into my master tree, and am actually working on a couple of new plugins at
> the moment. See the gitweb tree [1] for the latest source.
> >>
> >> I don't think Martin ever did post his changes as a git tree or
> equivalent for me to pull, which made it difficult for me to add them. If
> he does want to post his changes, I'll be happy to merge them.
> >>
> >> Rogan
> >>
> >> [1] http://dawes.za.net/gitweb.cgi?p=webscarab.git;a=summary
> >> _______________________________________________
> >> Owasp-webscarab mailing list
> >> Owasp-webscarab@lists.owasp.org
> >> https://lists.owasp.org/mailman/listinfo/owasp-webscarab
> > _______________________________________________
> > Owasp-webscarab mailing list
> > Owasp-webscarab@lists.owasp.org
> > https://lists.owasp.org/mailman/listinfo/owasp-webscarab
>
>

[Attachment #5 (text/html)]

<br>oops i guess i was meant to &quot;reply to all&quot; - \
sorry.<div><br></div><div><br><div class="gmail_quote">---------- Forwarded message \
----------<br>From: <b class="gmail_sendername">Rick Brown</b> <span dir="ltr">&lt;<a \
                href="mailto:malydog@gmail.com">malydog@gmail.com</a>&gt;</span><br>
Date: Wed, Apr 18, 2012 at 6:13 PM<br>Subject: Re: [Owasp-webscarab] Webscarab \
classic enhancements?<br>To: Martin Holst Swende &lt;<a \
href="mailto:martin@swende.se">martin@swende.se</a>&gt;<br><br><br><div \
style="text-align:left"> Ah - lots of nice new features there. Looking good. And the \
move to maven is a big bonus.</div><div style="text-align:left"><br></div><div \
style="text-align:left">Love the new behavior of &quot;Tree Selection filters \
conversation list&quot;.</div>

<div style="text-align:left">&quot;Discard Conversations&quot; - that&#39;s one of \
the enhancements I was considering I would have a go at myself.</div><div \
style="text-align:left"><br></div><div style="text-align:left"> FYI I&#39;m coming at \
this as a web developer rather than a security expert like you fellows. \
&quot;Fiddler&quot; is the big name for MITM proxies in the web dev world but it only \
runs on windows.</div> <div style="text-align:left"><br></div><div \
style="text-align:left">Anyway thanks for the friendly responses. I&#39;m going to go \
poke around in the source for a bit now.</div><div class="HOEnZb"><div \
class="h5"><div style="text-align:left"> <br></div><br><div class="gmail_quote">
On Wed, Apr 18, 2012 at 5:06 PM, Martin Holst Swende <span dir="ltr">&lt;<a \
href="mailto:martin@swende.se" target="_blank">martin@swende.se</a>&gt;</span> \
wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px \
#ccc solid;padding-left:1ex">Here are the commits:<br> <br>
<a href="http://dawes.za.net/gitweb.cgi?p=webscarab.git;a=search;s=Martin+Holst+Swende;st=author" \
target="_blank">http://dawes.za.net/gitweb.cgi?p=webscarab.git;a=search;s=Martin+Holst+Swende;st=author</a><br>
 <br>
<br>
Regards,<br>
Martin<br>
<br>
Ps. And btw, the DOM-xss-indicator is very naive. Anyone wanting to<br>
improve it could use the regexps in<br>
<a href="http://code.google.com/p/domxsswiki/wiki/FindingDOMXSS" \
target="_blank">http://code.google.com/p/domxsswiki/wiki/FindingDOMXSS</a> as a \
basis.<br> <div><div><br>
On 04/18/2012 07:41 AM, Martin Holst Swende wrote:<br>
&gt; Actually, I think it&#39;s in there, look at Rogans git tree.<br>
&gt;<br>
&gt; Skickat från min iPhone<br>
&gt;<br>
&gt; 18 apr 2012 kl. 07:11 skrev Rogan Dawes &lt;<a href="mailto:rogan@dawes.za.net" \
target="_blank">rogan@dawes.za.net</a>&gt;:<br> &gt;<br>
&gt;&gt; On 2012/04/17 10:49 PM, <a href="mailto:malydog@gmail.com" \
target="_blank">malydog@gmail.com</a> wrote:<br> &gt;&gt;&gt;<br>
&gt;&gt;&gt; I stumbled across this email thread:<br>
&gt;&gt;&gt; <a href="https://lists.owasp.org/pipermail/owasp-webscarab/2009-November/001033.html" \
target="_blank">https://lists.owasp.org/pipermail/owasp-webscarab/2009-November/001033.html</a><br>
 &gt;&gt;&gt;<br>
&gt;&gt;&gt; Some of the features sound pretty good but they don&#39;t seem to have \
found<br> &gt;&gt;&gt; their way into webscarab classic.<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Does anyoneknow if these contributions were actually adopted into \
the<br> &gt;&gt;&gt; webscarab project?<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Whilst webscarab is awesome there are a number of simple features it<br>
&gt;&gt;&gt; lacks. I would be interested in providing some enhancements myself \
but<br> &gt;&gt;&gt; not if there is no chance of them going anywhere.<br>
&gt;&gt; Hi Malydog,<br>
&gt;&gt;<br>
&gt;&gt; I&#39;ll confess that I have not had much time/inclination to spend on \
webscarab for a while.<br> &gt;&gt;<br>
&gt;&gt; However, I have started merging the features added by Frank Cornelis into my \
master tree, and am actually working on a couple of new plugins at the moment. See \
the gitweb tree [1] for the latest source.<br> &gt;&gt;<br>
&gt;&gt; I don&#39;t think Martin ever did post his changes as a git tree or \
equivalent for me to pull, which made it difficult for me to add them. If he does \
want to post his changes, I&#39;ll be happy to merge them.<br>



&gt;&gt;<br>
&gt;&gt; Rogan<br>
&gt;&gt;<br>
&gt;&gt; [1] <a href="http://dawes.za.net/gitweb.cgi?p=webscarab.git;a=summary" \
target="_blank">http://dawes.za.net/gitweb.cgi?p=webscarab.git;a=summary</a><br> \
&gt;&gt; _______________________________________________<br> &gt;&gt; Owasp-webscarab \
mailing list<br> &gt;&gt; <a href="mailto:Owasp-webscarab@lists.owasp.org" \
target="_blank">Owasp-webscarab@lists.owasp.org</a><br> &gt;&gt; <a \
href="https://lists.owasp.org/mailman/listinfo/owasp-webscarab" \
target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-webscarab</a><br> &gt; \
_______________________________________________<br> &gt; Owasp-webscarab mailing \
list<br> &gt; <a href="mailto:Owasp-webscarab@lists.owasp.org" \
target="_blank">Owasp-webscarab@lists.owasp.org</a><br> &gt; <a \
href="https://lists.owasp.org/mailman/listinfo/owasp-webscarab" \
target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-webscarab</a><br> <br>
</div></div></blockquote></div><br>
</div></div></div><br></div>



_______________________________________________
Owasp-webscarab mailing list
Owasp-webscarab@lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-webscarab


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic