W3af S. Qi,X. Ma,Y. Zhang,B Zhao,Y Zhu EC521 Fall 2014

w3af09/24/14 Outline  What is w3af?  Why we chose it?  Our Approaches  Evaluation

w3af09/24/14 What is w3af  Web application vulnerability scanner  2 main components  Core: Engine to coordinate, resource and features to be consumed  Plug-ins: Mechanism, performs tasks from different security perspective

w3af09/24/14 Why w3af  In Python!  Cross-platform  GUI and command-line interface  Framework: extensibility  Well documented  Online community

w3af09/24/14 Approaches  Setup and run  Deep understanding of architecture and core source  Choose experiment web apps  Collect results  Make the tutorial

w3af09/24/14 Evaluation  Compare with other framework  Ease of use?  Extensibility?

Photonics Presentation09/24/14 w3af