kali-linux 202202 安裝w3af命令列版的詳細過程

2022-06-21 14:10:01

更換國內源

vi /etc/apt/sources.list

deb https://mirrors.aliyun.com/kali kali-rolling main non-free contrib
deb-src https://mirrors.aliyun.com/kali kali-rolling main non-free contrib

從github上面下載w3af

https://github.com/andresriancho/w3af

下載完成後放到kali裡面去解壓就可以，我放在了/usr/w3af目錄下面。

檢視kali上的python版本

python --version

如果是3.10的版本，再用下面這條命令看kali上面裝了幾個python版本，一般是3個

ll /usr/bin | grep python

-rwxr-xr-x 1 root root           967 11月 17  2020 apython
-rwxr-xr-x 1 root root          2336  7月 25  2018 dh_python3-ply
-rwxr-xr-x 1 root root           963  1月 24 15:22 ipython3
lrwxrwxrwx 1 root root            23  3月 28 16:47 pdb2.7 -> ../lib/python2.7/pdb.py
lrwxrwxrwx 1 root root            24  3月 24 09:07 pdb3.10 -> ../lib/python3.10/pdb.py
lrwxrwxrwx 1 root root            23  3月 24 09:02 pdb3.9 -> ../lib/python3.9/pdb.py
lrwxrwxrwx 1 root root            31  5月  1 18:33 py3versions -> ../share/python3/py3versions.py
-rwxr-xr-x 1 root root           953  5月  1  2021 pybabel-python3
lrwxrwxrwx 1 root root            24  6月 19 05:41 python -> /etc/alternatives/python
lrwxrwxrwx 1 root root             9  7月 28  2021 python2 -> python2.7
-rwxr-xr-x 1 root root       3533496  3月 28 16:47 python2.7
lrwxrwxrwx 1 root root            33  3月 28 16:47 python2.7-config -> x86_64-linux-gnu-python2.7-config
lrwxrwxrwx 1 root root            10  5月  1 18:33 python3 -> python3.10
-rwxr-xr-x 1 root root       5540696  3月 24 09:07 python3.10
lrwxrwxrwx 1 root root            34  3月 24 09:07 python3.10-config -> x86_64-linux-gnu-python3.10-config
-rwxr-xr-x 1 root root       5447080  3月 24 09:02 python3.9
-rwxr-xr-x 1 root root           963  4月 23 15:15 python3-commonmark
lrwxrwxrwx 1 root root            17  5月  1 18:33 python3-config -> python3.10-config
-rwxr-xr-x 1 root root           960 12月 23  2020 python3-futurize
-rwxr-xr-x 1 root root           964 12月 23  2020 python3-pasteurize
-rwxr-xr-x 1 root root           945 10月 21  2021 python3-qr
-rwxr-xr-x 1 root root           977  3月 27 16:47 python-dotenv
lrwxrwxrwx 1 root root             7  4月 13 11:26 python-faraday -> faraday
lrwxrwxrwx 1 root root            29  7月 28  2021 pyversions -> ../share/python/pyversions.py
-rwxr-xr-x 1 root root          2970  3月 28 16:47 x86_64-linux-gnu-python2.7-config
-rwxr-xr-x 1 root root          3154  3月 24 09:07 x86_64-linux-gnu-python3.10-config
lrwxrwxrwx 1 root root            34  5月  1 18:33 x86_64-linux-gnu-python3-config -> x86_64-linux-gnu-python3.10-config

我的python有2.7,3.9和3.10三個版本。

接下來設定切換python版本：

┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --install /usr/bin/python python /usr/bin/python2.7 1
update-alternatives: 使用 /usr/bin/python2.7 來在自動模式中提供 /usr/bin/python (python)
                                                                             
┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --install /usr/bin/python python /usr/bin/python3.9 2
update-alternatives: 使用 /usr/bin/python3.9 來在自動模式中提供 /usr/bin/python (python)
                                                                             
┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --install /usr/bin/python python /usr/bin/python3.10 3
update-alternatives: 使用 /usr/bin/python3.10 來在自動模式中提供 /usr/bin/python (python)
                                                                             
┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# update-alternatives --config python
有 3 個候選項可用於替換 python (提供 /usr/bin/python)。

  選擇       路徑               優先順序  狀態
------------------------------------------------------------
* 0            /usr/bin/python3.10   3         自動模式
  1            /usr/bin/python2.7    1         手動模式
  2            /usr/bin/python3.10   3         手動模式
  3            /usr/bin/python3.9    2         手動模式

要維持當前值[*]請按<確認鍵>，或者鍵入選擇的編號：1
update-alternatives: 使用 /usr/bin/python2.7 來在手動模式中提供 /usr/bin/python (python)
                                                                             
┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# python --version
Python 2.7.18

設定完成後切換到python2.7版本

下載所需要的依賴包

第一個是pip包

┌──(root㉿kali)-[/usr/w3af/w3af-master/w3af]
└─# wget https://bootstrap.pypa.io/pip/2.7/get-pip.py
--2022-06-19 05:48:07--  https://bootstrap.pypa.io/pip/2.7/get-pip.py
正在解析主機 bootstrap.pypa.io (bootstrap.pypa.io)... 146.75.112.175, 2a04:4e42:8c::175
正在連線 bootstrap.pypa.io (bootstrap.pypa.io)|146.75.112.175|:443... 已連線。
已發出 HTTP 請求，正在等待迴應... 200 OK
長度：1908226 (1.8M) [text/x-python]
正在儲存至: 「get-pip.py」

get-pip.py              100%[==============================>]   1.82M  31.0KB/s  用時 96s     

2022-06-19 05:49:49 (19.5 KB/s) - 已儲存 「get-pip.py」 [1908226/1908226])

接下來安裝pip.py

┌──(root㉿kali)-[/usr/w3af/w3af-master/w3af]
└─# python get-pip.py 
DEPRECATION: Python 2.7 reached the end of its life on January 1st, 2020. Please upgrade your Python as Python 2.7 is no longer maintained. pip 21.0 will drop support for Python 2.7 in January 2021. More details about Python 2 support in pip can be found at https://pip.pypa.io/en/latest/development/release-process/#python-2-support pip 21.0 will remove support for this functionality.                                                                                         
Collecting pip<21.0
  Downloading pip-20.3.4-py2.py3-none-any.whl (1.5 MB)
     |████████████████████████████████| 1.5 MB 4.0 kB/s 
Collecting wheel
  Downloading wheel-0.37.1-py2.py3-none-any.whl (35 kB)
Installing collected packages: pip, wheel
Successfully installed pip-20.3.4 wheel-0.37.1

嘗試啟動

┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# ./w3af_console 
w3af's requirements are not met, one or more third-party libraries need to be installed.

On Kali systems please install the following operating system packages before running the pip installer:
    sudo apt-get -y install npm python-setuptools python-pip libssl-dev python2.7-dev libsqlite3-dev libxslt1-dev libyaml-dev

Your python installation needs the following modules to run w3af:
    pyclamd github git.util pybloomfilter phply nltk chardet tblib pdfminer concurrent.futures OpenSSL ndg pyasn1 lxml scapy.config guess_language cluster msgpack ntlm Halberd darts.lib.utils jinja2 vulndb markdown psutil ds_store termcolor mitmproxy ruamel.ordereddict Flask yaml tldextract pebble acora esmre diff_match_patch bravado_core lz4 vulners ipaddresses subprocess32

After installing any missing operating system packages, use pip to install the remaining modules:
    sudo pip install pyClamd==0.4.0 PyGithub==1.21.0 GitPython==2.1.15 pybloomfiltermmap==0.3.14 phply==0.9.1 nltk==3.0.1 chardet==3.0.4 tblib==0.2.0 pdfminer==20140328 futures==3.2.0 pyOpenSSL==18.0.0 ndg-httpsclient==0.4.0 pyasn1==0.4.2 lxml==3.4.4 scapy==2.4.0 guess-language==0.2 cluster==1.1.1b3 msgpack==0.5.6 python-ntlm==1.0.1 halberd==0.2.4 darts.util.lru==0.5 Jinja2==2.10 vulndb==0.1.1 markdown==2.6.1 psutil==5.4.8 ds-store==1.1.2 termcolor==1.1.0 mitmproxy==0.13 ruamel.ordereddict==0.4.8 Flask==0.10.1 PyYAML==3.12 tldextract==1.7.2 pebble==4.3.8 acora==2.1 esmre==0.3.1 diff-match-patch==20121119 bravado-core==5.15.0 lz4==1.1.0 vulners==1.3.0 ipaddresses==0.0.2 subprocess32==3.5.4

External programs used by w3af are not installed or were not found.Run these commands to install them on your system:

    npm install -g retire@2.0.3
    npm update -g retire


According to Kali's documentation [0] in order to avoid breaking the packaged w3af version you should run the following commands:

cd ~
apt-get install -y python-pip
pip install --upgrade pip
git clone https/github.com/andresriancho/w3af.git
cd w3af
./w3af_console
. /tmp/w3af_dependency_install.sh

[0] http://www.kali.org/kali-monday/bleeding-edge-kali-repositories/

A script with these commands has been created for you at /tmp/w3af_dependency_install.sh

可以看到w3af為我們儲存了一個安裝指令碼，在 /tmp/w3af_dependency_install.sh。

執行w3af_dependency_install.sh

┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# bash /tmp/w3af_dependency_install.sh

接下來會出現很多次time out報錯：

Collecting pdfminer==20140328
  Downloading pdfminer-20140328.tar.gz (4.1 MB)
     |█████████████▌                  | 1.7 MB 6.0 kB/s eta 0:06:32ERROR: Exception:
Traceback (most recent call last):                                                             
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/cli/base_command.py", line 223, in _main                                                                                         
    status = self.run(options, args)                                                           
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/cli/req_command.py", line 180, in wrapper                                                                                        
    return func(self, options, args)                                                           
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/commands/install.py", line 321, in run                                                                                           
    reqs, check_supported_wheels=not options.target_dir                                        
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/resolution/legacy/resolver.py", line 180, in resolve                                                                             
    discovered_reqs.extend(self._resolve_one(requirement_set, req))                            
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/resolution/legacy/resolver.py", line 385, in _resolve_one                                                                        
    dist = self._get_dist_for(req_to_install)                                                  
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/resolution/legacy/resolver.py", line 337, in _get_dist_for                                                                       
    dist = self.preparer.prepare_linked_requirement(req)                                       
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 480, in prepare_linked_requirement                                                                  
    return self._prepare_linked_requirement(req, parallel_builds)                              
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 505, in _prepare_linked_requirement                                                                 
    self.download_dir, hashes,                                                                 
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 257, in unpack_url                                                                                  
    hashes=hashes,                                                                             
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/operations/prepare.py", line 130, in get_http_url                                                                                
    from_path, content_type = download(link, temp_dir.path)                                    
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/network/download.py", line 163, in __call__                                                                                      
    for chunk in chunks:                                                                       
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/cli/progress_bars.py", line 168, in iter                                                                                         
    for x in it:                                                                               
  File "/usr/local/lib/python2.7/dist-packages/pip/_internal/network/utils.py", line 88, in response_chunks                                                                                   
    decode_content=False,                                                                      
  File "/usr/local/lib/python2.7/dist-packages/pip/_vendor/urllib3/response.py", line 576, in stream                                                                                          
    data = self.read(amt=amt, decode_content=decode_content)                                   
  File "/usr/local/lib/python2.7/dist-packages/pip/_vendor/urllib3/response.py", line 541, in read                                                                                            
    raise IncompleteRead(self._fp_bytes_read, self.length_remaining)                           
  File "/usr/lib/python2.7/contextlib.py", line 35, in __exit__                                
    self.gen.throw(type, value, traceback)                                                     
  File "/usr/local/lib/python2.7/dist-packages/pip/_vendor/urllib3/response.py", line 451, in _error_catcher                                                                                  
    raise ReadTimeoutError(self._pool, None, "Read timed out.")                                
ReadTimeoutError: HTTPSConnectionPool(host='files.pythonhosted.org', port=443): Read timed out.

主要原因就是網不好，需要多次嘗試，我大概下了20幾次把他都下載完了。

最後都下載完成再執行的時候會出現這個：

┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# ./w3af_console                      
External programs used by w3af are not installed or were not found.Run these commands to install them on your system:

    npm install -g retire@2.0.3
    npm update -g retire


According to Kali's documentation [0] in order to avoid breaking the packaged w3af version you should run the following commands:

cd ~
apt-get install -y python-pip
pip install --upgrade pip
git clone https/github.com/andresriancho/w3af.git
cd w3af
./w3af_console
. /tmp/w3af_dependency_install.sh

[0] http://www.kali.org/kali-monday/bleeding-edge-kali-repositories/

A script with these commands has been created for you at /tmp/w3af_dependency_install.sh

這是需要你下載retire@2.0.3和升級它

首先安裝npm

┌──(root㉿kali)-[/tmp]
└─# apt-get install npm
正在讀取軟體包列表... 完成
正在分析軟體包的依賴關係樹... 完成
正在讀取狀態資訊... 完成                 
npm 已經是最新版 (8.12.1~ds1-1)。
下列軟體包是自動安裝的並且現在不需要了：
  python3-distlib python3-filelock python3-pip-whl python3-platformdirs python3-setuptools-whl
  python3-wheel python3-wheel-whl
使用'apt autoremove'來解除安裝它(它們)。
升級了 0 個軟體包，新安裝了 0 個軟體包，要解除安裝 0 個軟體包，有 475 個軟體包未被升級。

然後再執行：

┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# npm install -g retire@2.0.3

啟動w3af命令列

在上述安裝完畢後，就可以啟動w3af命令列版了

┌──(root㉿kali)-[/usr/w3af/w3af-master]
└─# ./w3af_console             
/usr/share/offsec-awae-wheels/pyOpenSSL-19.1.0-py2.py3-none-any.whl/OpenSSL/crypto.py:12: CryptographyDeprecationWarning: Python 2 is no longer supported by the Python core team. Support for it is now deprecated in cryptography, and will be removed in the next release.
Usage of w3af for sending any traffic to a target without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

Do you accept the terms and conditions? [N|y] y

到此這篇關於kali-linux 202202 安裝w3af命令列版的文章就介紹到這了,更多相關kali-linux 安裝w3af內容請搜尋it145.com以前的文章或繼續瀏覽下面的相關文章希望大家以後多多支援it145.com！