Can't Install w3af on Kali Linux Good day, first of all i want to apolgies myself if i won't wrote the right english language and if this isn't the right thread for this case. W3af is an extremely popular, powerful, and flexible framework for finding and exploiting web application vulnerabilities. It is easy to use and extend and features dozens of web assessment and exploitation plugins.
Prerequisites¶
![W3af windows download W3af windows download](http://slideplayer.com/5267389/17/images/6/W3AF+%E2%80%93+Supported+Platforms.jpg)
Make sure you have the following software ready before starting the installation:
- Git client:
sudoapt-getinstallgit
- Python 2.7, which is installed by default in most systems
- Pip version 1.1:
sudoapt-getinstallpython-pip
Installation¶
Let me explain what’s going on there:
- First we use
git
to downloadw3af
’s source code - Then we try to run the
w3af_console
command, which will most likely failbecause of missing dependencies. This command will generate a helper scriptat/tmp/w3af_dependency_install.sh
that when run will install all therequired dependencies. - Dependencies are installed by running
/tmp/w3af_dependency_install.sh
The framework dependencies don’t change too often, but don’t be alarmed if afterupdating your installation
w3af
requires you to install new dependencies.Supported platforms¶
The framework should work on all Python supported platforms and has been testedin various Linux distributions, Mac OSX, FreeBSD and OpenBSD.
Note
The platform used for development is Ubuntu 14.04 and running our continuous integration testsis Ubuntu 12.04 LTS.
Warning
While in theory you can install w3af in Microsoft Windows, we don’t recommendnor support that installation process.
One of the ugly details users can find is that
w3af
needs to detect theOperating System / Linux distribution, and then have support for creating the/tmp/w3af_dependency_install.sh
for that specific combination. In other words,for Ubuntu we use apt-getinstall
and for Suse we use yuminstall
.The list of distributions
w3af
knows how to generate the installation scriptfor is extensive .If we don’t support your distribution, we’ll default to Ubuntu.Installation in Kali¶
The easiest way to install
w3af
in Kali is:This will install the latest packaged version, which might not be the latestavailable from our repositories. If the latest version is needed these stepsare recommended:
This will install the latest
w3af
at ~/w3af/w3af_console
and leave thepackaged version un-touched.Note
cd~/w3af/;./w3af_console
will run the latest versionw3af_console
will run the one packaged in Kali
Installing using Docker¶
Docker is awesome, it allows users to run
w3af
without installing any of it’s dependencies. The only pre-requisite is toinstall docker , which is widelysupported.Once the docker installation is running these steps will yield a running
w3af
console:For advanced usage of
w3af
’s docker container please read the documentationat the docker registry hubInstallation in Mac OSX¶
In order to start the process, you need XCode and MacPorts installed.
Those commands should allow you to run
./w3af_console
again without any issues,in order to run the GUI a new dependency set is required:Troubleshooting¶
After running the helper script w3af still says I have missing python dependencies, what should I do?¶
You will recognize this when this message appears: “Your python installationneeds the following modules to run w3af”.
First you’ll want to check that all the dependencies are installed. To do thatjust follow these steps:
Replace
futures
with the library that is missing in your system. If thepipfreeze|grepfutures
command returns an empty result, you’ll need toinstall the dependency using the /tmp/w3af_dependency_install.sh
command.Pay special attention to the output of that command, if installation failsyou won’t be able to run w3af
.It is important to notice that
w3af
requires specific versions of thethird-party libraries. The specific versions required at /tmp/w3af_dependency_install.sh
need to match the ones you see in the output of pipfreeze
. If the versionsdon’t match you can always install a specific version usingpipinstall--upgradefutures2.1.5
.w3af still says I have missing operating system dependencies, what should I do?¶
You will recognize this when this message appears: “please install the followingoperating system packages”.
Most likely you’re using a Linux distribution that
w3af
doesn’t know how todetect. This doesn’t mean that w3af won’t work with your distribution! It justmeans that our helper tool doesn’t know how to create the/tmp/w3af_dependency_install.sh
script for you.What you need to do is:
![Download W3af Windows Installer Download W3af Windows Installer](https://a.fsdn.com/con/app/proj/w3af/screenshots/179098.jpg/245/183/1)
- Find a match between the Ubuntu package name given in the list and the one
for your distribution* Install it* Run
./w3af_console
again. Repeat until fixedPlease create a ticketexplaining the packages you installed, your distribution, etc. and we’ll addthe code necessary for others to be able to install
w3af
without goingthrough any manual steps.How do I ask for support on installation issues?¶
You can create a ticketcontaining the following information:
- Your linux distribution (usually the contents of
/etc/lsb-release
will be enough) - The contents of the
/tmp/w3af_dependency_install.sh
file - The output of
pipfreeze
- The output of
python--version
The installer checks, that we have got the python's 2.5 version. We must install it, before we start the installation, because we can't install w3af. Click the Next button.
We can read the GNU GPL license. If you agree with it, Click theI Agree button, if not, click the Cancel button and the installation will break. So click the I Agree button.
We can choose the installation type: Full, Costum, Minimal. Choose the Full, then click the Next button.
We can give the directory of w3af where we want to install, then click the Next button.
We can give Start Menu folder, where we want to create the program's shortcuts. Click the Next button.
The installation is begin. Through the installation, we can install the dependencies.
Here we can see the installation of the pygtk-2.12.1. We have to do just click the Next and Finish button. Click the Next button.
Click the Next button.
The pygtk-2.12.1 is installing.
The installation is done. Click the Finish button. That's what we have to do when we install the other dependencies.Click the Next button.
The installation of w3af is done. Before we click the Finish button, we have to install the Opensslwin dependency. We can do this just like before we install the pygtk-2.12.1.
Before we start to use w3af, it is recommended to read the User Guide. After we click the Finish button, we have to see this.