# This is the eval() detection demo

plugins
output console,textFile
output config textFile
set fileName output-w3af.txt
set verbose True
back
output config console
set verbose False
back
back

plugins
audit eval
back

target
set target http://localhost/w3af/audit/eval/eval.php?c=
back

start

assert len(kb.kb.getData('eval','eval')) == 1

exploit
exploit eval
interact 0
ls
endInteraction

assert len(kb.kb.getData('eval','shell')) == 1

exit