-
Notifications
You must be signed in to change notification settings - Fork 479
OWTF Installation Backend
** THIS IS DEPRECATED **
With the aim of supporting as many linux distributions as possible, OWTF tries to make the installation procedure as smooth as possible. But it is a challenging task to provide install scripts for different distributions and control them accordingly.
The stuff needed by OWTF is divided into three categories (in the order of their installation):
- Some restricted tools and dictionaries which are distro-independent => These are installed using basic commands
- Some utilities and tools which are distro dependent => These are installed using distro specific commands
- Python libraries required by OWTF => OWTF uses pip to install these libraries
These are present in install/restricted.cfg. Example
[SSL cipher Check]
directory = %(RootDir)s/tools/restricted/ssl/ssl-cipher-check
command = wget http://unspecific.com/ssl/ssl-cipher-check.pl; chmod 700 *
- The directory is used to check if the tool is already installed
- If not, command is executed inside the directory
- If there are too many commands to run, a script can also be called like
[CMS Explorer]
directory = %(RootDir)s/tools/restricted/cms-explorer
command = sh %(RootDir)s/install/update_convert_cms_explorer_dicts.sh %(RootDir)s
- Different distributions have different install scripts. It is recommended to create a directory for a distro inside install/ and place all relevent install & patch scripts inside it.
- Register the distribution in install/linux-distributions.cfg. Example
[Kali Linux]
install = sh %(RootDir)s/install/kali/install.sh %(RootDir)s
NOTE: Only one command should be provided for a distribution in config file, so it should be ensured that all other scripts are called from it. Check the install scripts of kali for more help :P
- Pip is used to install owtf libraries, all these are present in install/owtf.pip
This wiki and the OWTF README document contains a lot of information, please take your time and read these instructions carefully.
We provide a CHANGELOG that provides details about almost every OWTF release.
Be sure to read the CONTRIBUTING guidelines before reporting a new OWTF issue or opening a pull request.
If you have any questions about the OWTF usage or want to share some information with the community, please go to one of the following places:
- IRC channel
#owtf(irc.freenode.net)
Google Summer of Code 2018 Guide
Installation
Getting Started
- Define where your tools are
- Run OWASP OWTF
- HTTP Auth Configurations
- Simulation mode
- AUX plugins usage
- FAQ
SET usage
Cookbooks (GSoC 2014 Projects UPDATE)
-
Zest Integration:
- Quick Guide to get started with Zest,ZAP and Replay
- Zest and ZAP API Installation
- Zest and ZAP integration Introduction
- Zest Runner module
- Forward HTTP request to ZAP
- Zest script creation from single HTTP transaction
- Zest script creation from multiple HTTP transactions
- Zest Script Creator module
- HTTP Request Editing Window (Replay Function)
- Zest Script Recording Functionality
- Zest scripting console
Development
-
Plugins:
-
Tests:
Contact