kali-linux?202202?安裝w3af命令行版的詳細(xì)過程
更換國內(nèi)源
vi /etc/apt/sources.list
deb https://mirrors.aliyun.com/kali kali-rolling main non-free contrib deb-src https://mirrors.aliyun.com/kali kali-rolling main non-free contrib
從github上面下載w3af
https://github.com/andresriancho/w3af
下載完成后放到kali里面去解壓就可以,我放在了/usr/w3af目錄下面。
查看kali上的python版本
python --version
如果是3.10的版本,再用下面這條命令看kali上面裝了幾個(gè)python版本,一般是3個(gè)
ll /usr/bin | grep python
-rwxr-xr-x 1 root root 967 11月 17 2020 apython -rwxr-xr-x 1 root root 2336 7月 25 2018 dh_python3-ply -rwxr-xr-x 1 root root 963 1月 24 15:22 ipython3 lrwxrwxrwx 1 root root 23 3月 28 16:47 pdb2.7 -> ../lib/python2.7/pdb.py lrwxrwxrwx 1 root root 24 3月 24 09:07 pdb3.10 -> ../lib/python3.10/pdb.py lrwxrwxrwx 1 root root 23 3月 24 09:02 pdb3.9 -> ../lib/python3.9/pdb.py lrwxrwxrwx 1 root root 31 5月 1 18:33 py3versions -> ../share/python3/py3versions.py -rwxr-xr-x 1 root root 953 5月 1 2021 pybabel-python3 lrwxrwxrwx 1 root root 24 6月 19 05:41 python -> /etc/alternatives/python lrwxrwxrwx 1 root root 9 7月 28 2021 python2 -> python2.7 -rwxr-xr-x 1 root root 3533496 3月 28 16:47 python2.7 lrwxrwxrwx 1 root root 33 3月 28 16:47 python2.7-config -> x86_64-linux-gnu-python2.7-config lrwxrwxrwx 1 root root 10 5月 1 18:33 python3 -> python3.10 -rwxr-xr-x 1 root root 5540696 3月 24 09:07 python3.10 lrwxrwxrwx 1 root root 34 3月 24 09:07 python3.10-config -> x86_64-linux-gnu-python3.10-config -rwxr-xr-x 1 root root 5447080 3月 24 09:02 python3.9 -rwxr-xr-x 1 root root 963 4月 23 15:15 python3-commonmark lrwxrwxrwx 1 root root 17 5月 1 18:33 python3-config -> python3.10-config -rwxr-xr-x 1 root root 960 12月 23 2020 python3-futurize -rwxr-xr-x 1 root root 964 12月 23 2020 python3-pasteurize -rwxr-xr-x 1 root root 945 10月 21 2021 python3-qr -rwxr-xr-x 1 root root 977 3月 27 16:47 python-dotenv lrwxrwxrwx 1 root root 7 4月 13 11:26 python-faraday -> faraday lrwxrwxrwx 1 root root 29 7月 28 2021 pyversions -> ../share/python/pyversions.py -rwxr-xr-x 1 root root 2970 3月 28 16:47 x86_64-linux-gnu-python2.7-config -rwxr-xr-x 1 root root 3154 3月 24 09:07 x86_64-linux-gnu-python3.10-config lrwxrwxrwx 1 root root 34 5月 1 18:33 x86_64-linux-gnu-python3-config -> x86_64-linux-gnu-python3.10-config
我的python有2.7,3.9和3.10三個(gè)版本。
接下來設(shè)置切換python版本:
┌──(root?kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --install /usr/bin/python python /usr/bin/python2.7 1
update-alternatives: 使用 /usr/bin/python2.7 來在自動(dòng)模式中提供 /usr/bin/python (python)
┌──(root?kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --install /usr/bin/python python /usr/bin/python3.9 2
update-alternatives: 使用 /usr/bin/python3.9 來在自動(dòng)模式中提供 /usr/bin/python (python)
┌──(root?kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --install /usr/bin/python python /usr/bin/python3.10 3
update-alternatives: 使用 /usr/bin/python3.10 來在自動(dòng)模式中提供 /usr/bin/python (python)
┌──(root?kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --config python
有 3 個(gè)候選項(xiàng)可用于替換 python (提供 /usr/bin/python)。
選擇 路徑 優(yōu)先級(jí) 狀態(tài)
------------------------------------------------------------
* 0 /usr/bin/python3.10 3 自動(dòng)模式
1 /usr/bin/python2.7 1 手動(dòng)模式
2 /usr/bin/python3.10 3 手動(dòng)模式
3 /usr/bin/python3.9 2 手動(dòng)模式
要維持當(dāng)前值[*]請(qǐng)按<回車鍵>,或者鍵入選擇的編號(hào):1
update-alternatives: 使用 /usr/bin/python2.7 來在手動(dòng)模式中提供 /usr/bin/python (python)
┌──(root?kali)-[/usr/w3af/w3af-master]
└─# python --version
Python 2.7.18設(shè)置完成后切換到python2.7版本
下載所需要的依賴包
第一個(gè)是pip包
┌──(root?kali)-[/usr/w3af/w3af-master/w3af] └─# wget https://bootstrap.pypa.io/pip/2.7/get-pip.py --2022-06-19 05:48:07-- https://bootstrap.pypa.io/pip/2.7/get-pip.py 正在解析主機(jī) bootstrap.pypa.io (bootstrap.pypa.io)... 146.75.112.175, 2a04:4e42:8c::175 正在連接 bootstrap.pypa.io (bootstrap.pypa.io)|146.75.112.175|:443... 已連接。 已發(fā)出 HTTP 請(qǐng)求,正在等待回應(yīng)... 200 OK 長度:1908226 (1.8M) [text/x-python] 正在保存至: “get-pip.py” get-pip.py 100%[==============================>] 1.82M 31.0KB/s 用時(shí) 96s 2022-06-19 05:49:49 (19.5 KB/s) - 已保存 “get-pip.py” [1908226/1908226])
接下來安裝pip.py
┌──(root?kali)-[/usr/w3af/w3af-master/w3af]
└─# python get-pip.py
DEPRECATION: Python 2.7 reached the end of its life on January 1st, 2020. Please upgrade your Python as Python 2.7 is no longer maintained. pip 21.0 will drop support for Python 2.7 in January 2021. More details about Python 2 support in pip can be found at https://pip.pypa.io/en/latest/development/release-process/#python-2-support pip 21.0 will remove support for this functionality.
Collecting pip<21.0
Downloading pip-20.3.4-py2.py3-none-any.whl (1.5 MB)
|████████████████████████████████| 1.5 MB 4.0 kB/s
Collecting wheel
Downloading wheel-0.37.1-py2.py3-none-any.whl (35 kB)
Installing collected packages: pip, wheel
Successfully installed pip-20.3.4 wheel-0.37.1嘗試啟動(dòng)
┌──(root?kali)-[/usr/w3af/w3af-master]
└─# ./w3af_console
w3af's requirements are not met, one or more third-party libraries need to be installed.
On Kali systems please install the following operating system packages before running the pip installer:
sudo apt-get -y install npm python-setuptools python-pip libssl-dev python2.7-dev libsqlite3-dev libxslt1-dev libyaml-dev
Your python installation needs the following modules to run w3af:
pyclamd github git.util pybloomfilter phply nltk chardet tblib pdfminer concurrent.futures OpenSSL ndg pyasn1 lxml scapy.config guess_language cluster msgpack ntlm Halberd darts.lib.utils jinja2 vulndb markdown psutil ds_store termcolor mitmproxy ruamel.ordereddict Flask yaml tldextract pebble acora esmre diff_match_patch bravado_core lz4 vulners ipaddresses subprocess32
After installing any missing operating system packages, use pip to install the remaining modules:
sudo pip install pyClamd==0.4.0 PyGithub==1.21.0 GitPython==2.1.15 pybloomfiltermmap==0.3.14 phply==0.9.1 nltk==3.0.1 chardet==3.0.4 tblib==0.2.0 pdfminer==20140328 futures==3.2.0 pyOpenSSL==18.0.0 ndg-httpsclient==0.4.0 pyasn1==0.4.2 lxml==3.4.4 scapy==2.4.0 guess-language==0.2 cluster==1.1.1b3 msgpack==0.5.6 python-ntlm==1.0.1 halberd==0.2.4 darts.util.lru==0.5 Jinja2==2.10 vulndb==0.1.1 markdown==2.6.1 psutil==5.4.8 ds-store==1.1.2 termcolor==1.1.0 mitmproxy==0.13 ruamel.ordereddict==0.4.8 Flask==0.10.1 PyYAML==3.12 tldextract==1.7.2 pebble==4.3.8 acora==2.1 esmre==0.3.1 diff-match-patch==20121119 bravado-core==5.15.0 lz4==1.1.0 vulners==1.3.0 ipaddresses==0.0.2 subprocess32==3.5.4
External programs used by w3af are not installed or were not found.Run these commands to install them on your system:
npm install -g retire@2.0.3
npm update -g retire
According to Kali's documentation [0] in order to avoid breaking the packaged w3af version you should run the following commands:
cd ~
apt-get install -y python-pip
pip install --upgrade pip
git clone https/github.com/andresriancho/w3af.git
cd w3af
./w3af_console
. /tmp/w3af_dependency_install.sh
[0] http://www.kali.org/kali-monday/bleeding-edge-kali-repositories/
A script with these commands has been created for you at /tmp/w3af_dependency_install.sh
可以看到w3af為我們保存了一個(gè)安裝腳本,在 /tmp/w3af_dependency_install.sh。
執(zhí)行w3af_dependency_install.sh
┌──(root?kali)-[/usr/w3af/w3af-master] └─# bash /tmp/w3af_dependency_install.sh
接下來會(huì)出現(xiàn)很多次time out報(bào)錯(cuò):
Collecting pdfminer==20140328
Downloading pdfminer-20140328.tar.gz (4.1 MB)
|█████████████▌ | 1.7 MB 6.0 kB/s eta 0:06:32ERROR: Exception:
Traceback (most recent call last):
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/cli/base_command.py", line 223, in _main
status = self.run(options, args)
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/cli/req_command.py", line 180, in wrapper
return func(self, options, args)
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/commands/install.py", line 321, in run
reqs, check_supported_wheels=not options.target_dir
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/resolution/legacy/resolver.py", line 180, in resolve
discovered_reqs.extend(self._resolve_one(requirement_set, req))
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/resolution/legacy/resolver.py", line 385, in _resolve_one
dist = self._get_dist_for(req_to_install)
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/resolution/legacy/resolver.py", line 337, in _get_dist_for
dist = self.preparer.prepare_linked_requirement(req)
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 480, in prepare_linked_requirement
return self._prepare_linked_requirement(req, parallel_builds)
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 505, in _prepare_linked_requirement
self.download_dir, hashes,
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 257, in unpack_url
hashes=hashes,
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 130, in get_http_url
from_path, content_type = download(link, temp_dir.path)
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/network/download.py", line 163, in __call__
for chunk in chunks:
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/cli/progress_bars.py", line 168, in iter
for x in it:
File "/usr/local/lib/python2.7/dist-packages/pip/_internal/network/utils.py", line 88, in response_chunks
decode_content=False,
File "/usr/local/lib/python2.7/dist-packages/pip/_vendor/urllib3/response.py", line 576, in stream
data = self.read(amt=amt, decode_content=decode_content)
File "/usr/local/lib/python2.7/dist-packages/pip/_vendor/urllib3/response.py", line 541, in read
raise IncompleteRead(self._fp_bytes_read, self.length_remaining)
File "/usr/lib/python2.7/contextlib.py", line 35, in __exit__
self.gen.throw(type, value, traceback)
File "/usr/local/lib/python2.7/dist-packages/pip/_vendor/urllib3/response.py", line 451, in _error_catcher
raise ReadTimeoutError(self._pool, None, "Read timed out.")
ReadTimeoutError: HTTPSConnectionPool(host='files.pythonhosted.org', port=443): Read timed out.
主要原因就是網(wǎng)不好,需要多次嘗試,我大概下了20幾次把他都下載完了。
最后都下載完成再運(yùn)行的時(shí)候會(huì)出現(xiàn)這個(gè):
┌──(root?kali)-[/usr/w3af/w3af-master]
└─# ./w3af_console
External programs used by w3af are not installed or were not found.Run these commands to install them on your system:
npm install -g retire@2.0.3
npm update -g retire
According to Kali's documentation [0] in order to avoid breaking the packaged w3af version you should run the following commands:
cd ~
apt-get install -y python-pip
pip install --upgrade pip
git clone https/github.com/andresriancho/w3af.git
cd w3af
./w3af_console
. /tmp/w3af_dependency_install.sh
[0] http://www.kali.org/kali-monday/bleeding-edge-kali-repositories/
A script with these commands has been created for you at /tmp/w3af_dependency_install.sh
這是需要你下載retire@2.0.3和升級(jí)它
首先安裝npm
┌──(root?kali)-[/tmp] └─# apt-get install npm 正在讀取軟件包列表... 完成 正在分析軟件包的依賴關(guān)系樹... 完成 正在讀取狀態(tài)信息... 完成 npm 已經(jīng)是最新版 (8.12.1~ds1-1)。 下列軟件包是自動(dòng)安裝的并且現(xiàn)在不需要了: python3-distlib python3-filelock python3-pip-whl python3-platformdirs python3-setuptools-whl python3-wheel python3-wheel-whl 使用'apt autoremove'來卸載它(它們)。 升級(jí)了 0 個(gè)軟件包,新安裝了 0 個(gè)軟件包,要卸載 0 個(gè)軟件包,有 475 個(gè)軟件包未被升級(jí)。
然后再執(zhí)行:
┌──(root?kali)-[/usr/w3af/w3af-master] └─# npm install -g retire@2.0.3
啟動(dòng)w3af命令行
在上述安裝完畢后,就可以啟動(dòng)w3af命令行版了
┌──(root?kali)-[/usr/w3af/w3af-master] └─# ./w3af_console /usr/share/offsec-awae-wheels/pyOpenSSL-19.1.0-py2.py3-none-any.whl/OpenSSL/crypto.py:12: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release. Usage of w3af for sending any traffic to a target without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program. Do you accept the terms and conditions? [N|y] y
到此這篇關(guān)于kali-linux 202202 安裝w3af命令行版的文章就介紹到這了,更多相關(guān)kali-linux 安裝w3af內(nèi)容請(qǐng)搜索腳本之家以前的文章或繼續(xù)瀏覽下面的相關(guān)文章希望大家以后多多支持腳本之家!
相關(guān)文章
解決maven第一次創(chuàng)建項(xiàng)目太慢的問題
Maven是 Apache 下的一個(gè)純 Java 開發(fā)的開源項(xiàng)目,是一個(gè)項(xiàng)目構(gòu)建和管理的工具;它提供了幫助管理 構(gòu)建、文檔、報(bào)告、依賴、scms、發(fā)布、分發(fā)的方法。這篇文章主要介紹了maven第一次創(chuàng)建項(xiàng)目太慢的解決方法,需要的朋友可以參考下2020-02-02
ElasticSearch 使用 Composite Aggregation 實(shí)
composite aggregation 是 Elasticsearch 中的一種特殊聚合方式,適用于需要分頁展示的聚合結(jié)果,本文給大家介紹ElasticSearch 使用 Composite Aggregation 實(shí)現(xiàn)桶的分頁查詢,感興趣的朋友一起看看吧2024-12-12
Blazor實(shí)現(xiàn)組件嵌套傳遞值的示例詳解
這篇文章主要為大家詳細(xì)介紹了Blazor實(shí)現(xiàn)組件嵌套傳遞值的相關(guān)知識(shí),文中的示例代碼講解詳細(xì),具有一定的學(xué)習(xí)價(jià)值,感興趣的可以了解一下2023-02-02
git版本回退_動(dòng)力節(jié)點(diǎn)Java學(xué)院整理
Git的版本回退速度非常快,因?yàn)镚it在內(nèi)部有個(gè)指向當(dāng)前版本的HEAD指針。接下來通過本文給大家分享git版本回退問題,感興趣的朋友一起看看吧2017-08-08

