w3af.sh

#!/bin/bash

set -e

#requirements for w3af
apt install -y build-essential libxml2-dev libxslt1-dev zlib1g-dev libssl-dev
#w3af_api_client for python3
wget -nv https://github.com/andresriancho/w3af-api-client/archive/master.zip
unzip master.zip
cd w3af-api-client-master
pip3 install -r requirements.txt
python3 setup.py build
python3 setup.py install
cp -r w3af_api_client /usr/local/lib/python3.6/dist-packages/
cd /tmp

#pip (again) only because strict w3af dependency checks
apt install -y python-pip
pip2 install -r /tmp/requirements.txt
pip2 install git+git://github.com/hay/xml2json.git@3a674efad91e0f1e978babc41a72f297d5e5144b
#node and retire
apt install -y npm
npm install -g retire
#W3AF
apt install -y libffi-dev libsqlite3-dev libyaml-dev
cd /tmp
wget -nv https://github.com/andresriancho/w3af/archive/1910600684c22c767a1105fbfcb051db73ad1280.zip
unzip -q 1910600684c22c767a1105fbfcb051db73ad1280.zip
mv w3af-1910600684c22c767a1105fbfcb051db73ad1280 /service/w3af

## for authenticated scans
#cp ~/extended_generic.py w3af/plugins/auth/
#enable other output plugins for w3af API
patch /service/w3af/w3af/core/ui/api/utils/scans.py /tmp/w3af_output_fix.patch
patch /service/w3af/w3af/core/controllers/dependency_check/requirements.py /tmp/w3af-lz4.patch