dradis Framework ForumsRecent Posts
Pages: [1] 2 3 ... 10
 1 
 on: August 13, 2010, 01:36:58 am 
Started by digininja - Last post by werrett
Ha! This bug hit me as well but I hit this thread searching the form for:

"word export undefined method"

ETD's method of tracing the dodgy note via:

Code:
rake export:word
...
ruby script/runner "p Note.find(70).text"

Where 70 is the number of the note processing failed on allowed me to find the line with trailing space after the ...]#


 2 
 on: August 10, 2010, 08:40:55 am 
Started by digininja - Last post by digininja
I started looking at it and got the menu item in place but then got a bit stuck on the javascript, trying to work out the object structure and I haven't had much chance to go back to it.

I think the notes table would be best, for backward compatibility, how far does it need to go? Is it if someone backs up a db with the change that it has to work with an older version of Dradis then that could be tricky, if it is that if someone is restoring an old back up to a new system then that is OK, we could have a check on the restore to look for the field and if it is missing add it then and set the defaults.

Icons will be just the same really, just modifying the nodes style probably adding a background image rather than a colour.

 3 
 on: August 10, 2010, 07:37:20 am 
Started by digininja - Last post by etd

Well, I must say it will be a really nice improvement. There are a couple of things to consider:

  • You'll need to get your head around ExtJS and nodestree.js
  • Where are you going to save the node's colour?

I can think of two tables: nodes and configurations. Probably it will make more sense to add it to the nodes table, but that will mean introducing a backwards incompatible change in the schema and we'll need to look into other changes required (the project import/export comes to mind).

Alternatively we can save the colour in a Configuration property in a separate table and do a JOIN every time, which already sounds like a less ideal solution but one that would be backwards compatible.

And finally, if we go for the altering the nodes table structure, I'd put some thought into a related idea, it's been suggested in the past that it would be good if we could associate icons to the nodes, so for instance you can mark and distinguish Windows/Solaris/Linux nodes. I think there is some overlapping between the colour and icon idea, but as I said before, it would be a great addition!

If this is something you're still interested in pushing, maybe the developers mailing list will be a more dynamic resource.

When do we start?

Daniel

 4 
 on: August 10, 2010, 07:26:40 am 
Started by digininja - Last post by etd
I hate this playing catch up game Sad

I remember jcran mentioned something about this incompatibilities some time ago, we definitely need to look into this.

Daniel

 5 
 on: August 10, 2010, 07:24:00 am 
Started by werrett - Last post by etd
Thanks werrett,

I'll update the documentation page with this info.

Daniel

 6 
 on: August 10, 2010, 07:22:31 am 
Started by digininja - Last post by etd
Added to the tracker!

https://sourceforge.net/tracker/?func=detail&aid=3042322&group_id=209736&atid=1010920

 7 
 on: August 10, 2010, 07:17:39 am 
Started by admin - Last post by admin
Hi all,

Soon before Blackhat/Defcon this year the forum became heavily targeted by spam bots. I tried to cope with the fake new registrations for a while manually deleting the accounts and then creating a script to automatically delete them.

It wasn't getting better so I had to close down registrations for a while. I still have a backlog of 8 pages of user listings to go through and clean up from spammed profiles, but I'm getting there. Once that is done, I'll re-enable registrations.

If anyone has dealt with SMF spam or some other forum spam in the past, please shout to see if we can figure out a clever solution to the problem.

Update (2010-08-18) I just re-enabled registrations after getting rid of the registered accounts that looked like spam / abandoned. Fingers crossed now


Update (2010-09-04) Since we still got plenty of fake registrations I'm trying a new feature: new users have to guess the answer to three questions. Lets see how good the spam bots are at that..

Thanks!

 8 
 on: July 24, 2010, 06:36:13 am 
Started by werrett - Last post by werrett
Below are a bunch of hoops I had to jump through to get Dradis installed under Apache. I was using Ubuntu 10.04 server but no doubt at least some of them will be relevant for other platforms.

'Missing' passenger-install-apache2-module

The passenger-install-apache2-module executable wasn't in my default path. I installed it via gem and it ended up at:

Code:
/var/lib/gems/1.8/bin/passenger-install-apache2-module

Configuring Passenger Apache module

Once you've run the passenger-install-apache2-module executable you'll need to configure and enable it. To do this create two files in the /etc/apache2/mods-available directory:

/etc/apache2/mods-available/passenger.load
Code:
LoadModule passenger_module /var/lib/gems/1.8/gems/passenger-2.2.15/ext/apache2/mod_passenger.so

/etc/apache2/mods-available/passenger.conf
Code:
<IfModule mod_passenger.c>
   PassengerRoot /var/lib/gems/1.8/gems/passenger-2.2.15
   PassengerRuby /usr/bin/ruby1.8
</IfModule>

And enable the module by running the following commands
Code:
a2enmof passenger && apache2ctl restart


This will fix any 'Premature end of script headers: dispatch.cgi' errors you may be getting.

Correcting file permissions

You'll need to make sure Apache has permissions to view and run the Dradis code base. By default Apache will run as the www-data user on Ubuntu. So if you have installed Dradis under the /data/dradis-2.5 directory you'll need to correct the ownership permissions with:

Code:
chown -R www-data:www-data /data/dradis-2.5/

For platforms other than Ubuntu (or on customised installs) you'll be able to find the user that Apache processes run as via the User and Group configuration statements (see /etc/apache2/apache2.conf and /etc/apache2/envars).

 9 
 on: July 12, 2010, 10:27:06 pm 
Started by digininja - Last post by digininja
I think it would be good to be able to mark notes in different colours, maybe even do it automatically in some plugins such as CVSS score in the Nessus plugin.

Has anyone thought of, or started this already? If not I'm up for giving it a go.

Just got the svn checkout so going to get my head around the code first then have a play.

Pages: [1] 2 3 ... 10