Faraday v4.1 released: Collaborative Penetration Test & Vulnerability Management Platform
Faraday introduces a new concept – IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distribution, indexation, and analysis of the data generated during a security audit.
The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.
Designed for simplicity, users should notice no difference between their own terminal application and the one included in Faraday. Developed with a specialized set of functionalities that help users improve their own work. Do you remember yourself programming without an IDE? Well, Faraday does the same as an IDE does for you when programming, but from the perspective of a penetration test.
Changelog v4.1
- Now error 403 will respond a json, not a html
- [FIX] Change resolve_hotname for resolve_hostname in agents
- Add filters as params for bulk_update
- Add Swagger view
- Modify way of filtering dates with
filters. Now only ‘YYYYMMDD’ format supported. - Add cvss v2 and v3 into model and api
- [ADD] Now if command_id is sent in a post for hosts, services or vulns, the created object is associated with that command_id if exist
- Add support for tagging when running an agent
- Clean up of commented code that’s not needed anymore
- [FIX] Change dns_resolution to resolve_hostname
- Add CWE into model and api
Plugins
Don’t change the way you work today! Faraday plays well with others, right now it has more than 50 supported tools, among them you will find:
There is 3 kind of plugins:
- Plugins that intercept commands, fired directly when a command is detected in the console. These are transparent to you and no additional action on your part is needed.
- Plugins that import file reports. You have to copy the report to $HOME/.faraday/report/[workspacename] (replacing [workspacename] with the actual name of your Workspace) and Faraday will automatically detect, process and add it to the HostTree.
- Plugin connectors or online (BeEF, Metasploit, Burp), these connect to external APIs or databases or talk directly to Faraday’s RPC API.
Installation & Tutorial
Source: https://github.com/infobyte/
