Package: faradaysec
Open Source Vulnerability ManagerSecurity has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your terminal and get your work organized on the run.
Faraday was made to let you take advantage of the available tools in the community in a truly multiuser way.Faraday aggregates and normalizes the data you load, allowing exploring it into different visualizations that are useful to managers and analysts alike.To read about the latest features check out therelease notes!InstallDocker-composeThe easiest way to get faraday up and running is using our docker-compose$wgethttps://raw.githubusercontent.com/infobyte/faraday/master/docker-compose.yaml
$docker-composeupIf you want to customize, you can find an example config over hereLinkDockerYou need to have aPostgresrunning first.$dockerrun\-v$HOME/.faraday:/home/faraday/.faraday\-p5985:5985\-ePGSQL_USER='postgres_user'\-ePGSQL_HOST='postgres_ip'\-ePGSQL_PASSWD='postgres_password'\-ePGSQL_DBNAME='postgres_db_name'\faradaysec/faraday:latestPyPi$pip3installfaradaysec
$faraday-manageinitdb
$faraday-serverBinary Packages (Debian/RPM)You can find the installers on ourreleases page$sudoaptinstallfaraday-server_amd64.deb# Add your user to the faraday group$faraday-manageinitdb
$sudosystemctlstartfaraday-serverAdd your user to thefaradaygroup and then runSourceIf you want to run directly from this repo, this is the recommended way:$pip3installvirtualenv
$virtualenvfaraday_venv
$sourcefaraday_venv/bin/activate
$gitclonegit@github.com:infobyte/faraday.git
$pip3install.
$faraday-manageinitdb
$faraday-serverCheck out our documentation for detailed information on how to install Faraday in all of our supported platformsFor more information about the installation, check out ourInstallation Wiki.In your browser now you can go tohttp://localhost:5985and login with "faraday" as username, and the password given by the installation processGetting StartedLearn about Faraday holistic approach and rethink vulnerability management.Centralize your vulnerability dataAutomate the scanners you needIntegrating faraday in your CI/CDSetup Bandit and OWASP ZAP in your pipelineGitHub[PDF]Jenkins[PDF]TravisCI[PDF]Setup Bandit, OWASP ZAP and SonarQube in your pipelineGitlab[PDF]Faraday CliFaraday-cli is our command line client, providing easy access to the console tools, work in faraday directly from the terminal!This is a great way toautomate scans,  integrate it toCI/CD pipelineor just getmetricsfrom a workspace$pip3installfaraday-cliCheck ourfaraday-clirepoCheck out the documentationhere.Faraday AgentsFaraday Agents Dispatcheris a tool that givesFaradaythe ability to run scanners or tools remotely from the platform and get the results.PluginsConnect you favorite tools through ourplugins. Right now there are more than80+ supported tools, among which you will find:Missing your favorite one?Create a Pull Request!There are two Plugin types:Consoleplugins which interpret the output of the tools you execute.$faraday-clitoolrun\"nmapwww.exampledomain.com\"💻ProcessingNmapcommandStartingNmap7.80(https://nmap.org)at2021-02-2214:13-03
Nmapscanreportforwww.exampledomain.com(10.196.205.130)Hostisup(0.17slatency).
rDNSrecordfor10.196.205.130:10.196.205.130.bc.example.com
Notshown:996filteredports
PORTSTATESERVICE80/tcpopenhttp443/tcpopenhttps2222/tcpopenEtherNetIP-13306/tcpclosedmysql
Nmapdone:1IPaddress(1hostup)scannedin11.12seconds
⬆Sendingdatatoworkspace:test✔DoneReportplugins which allows you to import previously generated artifacts like XMLs, JSONs.faraday-clitoolreportburp.xmlCreating custom plugins is super easy,Read more about Plugins.APIYou can access directly to our API,
check out the documentationhere.LinksHomepage:faradaysec.comDocumentation:Faraday DocsDownload:Download .deb/.rpm from releases pageIssue tracker and feedback:Github issue trackerFrequently Asked Questions:FaradaySEC FAQTwitter:@faradaysecTry one of ourDemos