/faraday

Home

Francisco Amato edited this page Nov 25, 2016 · 51 revisions

Installation

The following platforms are supported:

platform

Read more about this.

Quick install

Download the latest tarball or clone the Faraday Git Project:

$ git clone https://github.com/infobyte/faraday.git faraday-dev
$ cd faraday-dev
$ ./install.sh
$ ./faraday-server.py
$ ./faraday.py

Read more about the installation process.

About

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the data generated during a security audit.

The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

Designed for simplicity, users should notice no difference between their own terminal application and the one included in Faraday. Developed with a specialized set of functionalities that help users improve their own work. Do you remember yourself programming without an IDE? Well, Faraday does the same as an IDE does for you when programming, but from the perspective of a penetration test.

GUI - QT

Once the data is loaded Faraday crunches it into different visualizations useful not only for managers, but also for pentesters.

GUI - Web

To read about the latest features check out the release notes!

Plugins list

Right now faraday has more than 60+ supported tools, among them you will find:

Features

Workspaces

Information is classified in Workspace units. Each Workspace maps into a pentest team's assignments containing all the intel discovered by that team.

Conflicts

If two plugins have different information for the same element it will generate a conflict that the user will have to resolve. For example, user1 incorporates host 127.0.0.1 OS:Linux and user2 incorporates 127.0.0.1 OS: Linux Ubuntu 13.10.

On our GTK interface there's a button on the bottom right corner of the main window with the number of conflicts in the current workspace. To solve them, just click that button and a window will open where you can edit the conflicting objects and select which one to keep.

Faraday plugin

Using our plugin you can do different actions using the command line, for example:

$ cd $faraday/bin/
$ #Adding new hosts 
$./fplugin -e 'for h in api.createAndAddHost("8.8.8.8","Linux")'
$ #Get all ip of HostTree
$ ./fplugin -e 'for h in api.__model_controller.getAllHosts(): print h.name' > allhost.txt
$ nmap -i allhost.txt

Read more about the Faraday Plugin.

Notifications

Updating objects on other Faraday instances result in notifications on your Faraday GTK Client.

ZSH UI no-gui notifications

CSV Exporting

More information

Links

Presentation