{"action":"created","issue":{"url":"https://api.github.com/repos/andresriancho/w3af/issues/2611","labels_url":"https://api.github.com/repos/andresriancho/w3af/issues/2611/labels{/name}","comments_url":"https://api.github.com/repos/andresriancho/w3af/issues/2611/comments","events_url":"https://api.github.com/repos/andresriancho/w3af/issues/2611/events","html_url":"https://github.com/andresriancho/w3af/issues/2611","id":33723314,"number":2611,"title":"upgrade dependences requirement","user":{"login":"blshkv","id":309751,"avatar_url":"https://avatars.githubusercontent.com/u/309751?v=3","gravatar_id":"","url":"https://api.github.com/users/blshkv","html_url":"https://github.com/blshkv","followers_url":"https://api.github.com/users/blshkv/followers","following_url":"https://api.github.com/users/blshkv/following{/other_user}","gists_url":"https://api.github.com/users/blshkv/gists{/gist_id}","starred_url":"https://api.github.com/users/blshkv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blshkv/subscriptions","organizations_url":"https://api.github.com/users/blshkv/orgs","repos_url":"https://api.github.com/users/blshkv/repos","events_url":"https://api.github.com/users/blshkv/events{/privacy}","received_events_url":"https://api.github.com/users/blshkv/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/andresriancho/w3af/labels/bug","name":"bug","color":"e10c02"},{"url":"https://api.github.com/repos/andresriancho/w3af/labels/priority:high","name":"priority:high","color":"e10c02"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/andresriancho/w3af/milestones/13","labels_url":"https://api.github.com/repos/andresriancho/w3af/milestones/13/labels","id":620790,"number":13,"title":"1.7.5 Scanning sites with anti-CSRF tokens","description":"Scanning sites with anti-CSRF tokens enabled is a really hard task to achieve, since the CSRF token implementation can be really strict and make the whole scan useless.\r\n\r\nI want to perform these tasks:\r\n * Identify the top 3 methods for CSRF (hidden form param, cookie? special header?)\r\n * Identify the top 3 implementations (maybe: Django, Ruby, Zend-PHP) and create test applications\r\n * Write tests that scan these three test applications\r\n * Modify the framework to PASS these tests","creator":{"login":"andresriancho","id":865200,"avatar_url":"https://avatars.githubusercontent.com/u/865200?v=3","gravatar_id":"","url":"https://api.github.com/users/andresriancho","html_url":"https://github.com/andresriancho","followers_url":"https://api.github.com/users/andresriancho/followers","following_url":"https://api.github.com/users/andresriancho/following{/other_user}","gists_url":"https://api.github.com/users/andresriancho/gists{/gist_id}","starred_url":"https://api.github.com/users/andresriancho/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andresriancho/subscriptions","organizations_url":"https://api.github.com/users/andresriancho/orgs","repos_url":"https://api.github.com/users/andresriancho/repos","events_url":"https://api.github.com/users/andresriancho/events{/privacy}","received_events_url":"https://api.github.com/users/andresriancho/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":1,"state":"open","created_at":"2014-04-04T19:22:46Z","updated_at":"2015-02-05T13:56:43Z","due_on":null,"closed_at":null},"comments":9,"created_at":"2014-05-17T04:39:00Z","updated_at":"2015-02-16T02:14:19Z","closed_at":"2015-02-05T13:56:43Z","body":"Hello,\r\n\r\nI've ported w3af to Pentoo Linux but it was pain. The main problem was the dependences issue. The stable version of w3af is using some unreleased (such as phply, which just has been released btw) software, and some really old packages such as lxml-2.3.2 or pdfminer-20110515 (both 3 years old).\r\n\r\nIt's hard to support that devil mixture of packages. Please keep them at descent versions.\r\n\r\nThank you."},"comment":{"url":"https://api.github.com/repos/andresriancho/w3af/issues/comments/74451552","html_url":"https://github.com/andresriancho/w3af/issues/2611#issuecomment-74451552","issue_url":"https://api.github.com/repos/andresriancho/w3af/issues/2611","id":74451552,"user":{"login":"blshkv","id":309751,"avatar_url":"https://avatars.githubusercontent.com/u/309751?v=3","gravatar_id":"","url":"https://api.github.com/users/blshkv","html_url":"https://github.com/blshkv","followers_url":"https://api.github.com/users/blshkv/followers","following_url":"https://api.github.com/users/blshkv/following{/other_user}","gists_url":"https://api.github.com/users/blshkv/gists{/gist_id}","starred_url":"https://api.github.com/users/blshkv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blshkv/subscriptions","organizations_url":"https://api.github.com/users/blshkv/orgs","repos_url":"https://api.github.com/users/blshkv/repos","events_url":"https://api.github.com/users/blshkv/events{/privacy}","received_events_url":"https://api.github.com/users/blshkv/received_events","type":"User","site_admin":false},"created_at":"2015-02-16T02:14:19Z","updated_at":"2015-02-16T02:14:19Z","body":"please release a new version at some point so I could push it as well. Thank you."}}