faction: Pen Test Report Generation and Assessment Collaboration

FACTION Pen Test Report Generation and Collaboration Engine

FACTION is your entire assessment workflow in a box. With FACTION you can:

1. Automate pen testing and security assessment Reports
2. Peer review and track changes for reports
3. Create customized DOCX templates for different assessment types and retests
4. Real-time collaboration with assessors via the web app and Burp Suite Extensions
5. Customizable vulnerability templates with over 75 prepopulated
6. Easily manage assessment teams and track progress across your organization
7. Track vulnerability remediation efforts with custom SLA warnings and alerts
8. Full Rest API to integrate with other tools

Other Features:

1. LDAP Integration
2. OAUTH2.0 Integration
3. SMTP integration
4. Extendable with Custom Plugins similar to Burp Extender.
5. Custom Report Variables

Quick Setup

Requirements

• Java JDK11
• Maven (for building the project)

Run the following commands to build the war file and deploy it to the docker container.

Once the containers are up you can navigate to http://127.0.0.1:8080 to access your FACTION instance. On the first boot, it will ask you to create an admin account.

Import the Vulnerability Templates

1. Navigate to Admin -> Default Vulnerabilities
2. Click import VulnDB.

Customize reports

You can find out more information about creating your custom report templates here: Custom Security Report Templates – Faction Security

Burp Suite Extension

Burp Suite Extensions

Tutorial

Copyright (C) 2023 factionsecurity