GUI Introduction

Warning

The GTK GUI was removed and will be replaced by a webclient-GUI. The following docu is outdated.

This documentation section is a user guide for the Graphical User Interface for Web Advanced Application Attack and Audit Framework (w4af), its goal is to provide a basic overview of how to use the application, how it works, and what you can do with it.

We recommend you read through the w4af users guide before diving into this GUI-specific section.

Contents

• General structure
  • The toolbar
• Scanning
  • Configuring the scan
  • Using the profiles
  • Running the scan
• Analyzing results
  • Browsing the Knowledge Base
  • Site structure
  • Requests and responses
• Exploitation
  • Executing an exploit
  • Using a shell
• Tools
  • Manual Requests
  • Fuzzy Requests
  • Encode and Decode
  • Comparing HTTP traffic
  • Using the Proxy
  • Wizards
• Configurations
  • HTTP configuration
  • Miscellaneous configuration
  • Advanced target configuration