/faraday

Troubleshooting

micabot edited this page Dec 30, 2016 · 18 revisions

I can't access the web GUI

Is Faraday Server running? Try something like this, replacing the URL and port with those of your Faraday Server:

curl http://127.0.0.1:5984/_api/info

The reply should look something like

{"Faraday Server":"Running"}

If not, maybe try the Faraday Server Installation and the Apache CouchDB Installation Guide. Or perhaps try going through the First Steps again and double check everything.

[index]

Faraday is not importing my report

First let's make sure there is a Plugin to parse it so make sure your tool is listed in our Plugin List. Not there? Code your own or ask us to do it.

You can also try to force Faraday to process a report with a certain plugin. For example, let's say you have a metasploit report that faraday is not detecting. You can change the report so that it ends with _faraday_metasploit, so it ends up as myreport_faraday_metasplot.xml, and then copy it to ~/.faraday/reports/$yourworkspace. This of course works for any plugin, not only metasploit.

Is your XML valid? Try opening it in a browser, if the browser complains then you can try our XML Cleaning script (make sure to have BeautifulSoup):

python $FARADAY/helpers/cleanXML.py broken_file.xml

Read more about cleaning XMLs here.

Then open Faraday's GTK interface running the following in your installation root:

./faraday.py

Open the Workspaces perspective and select your workspace. Then copy the report file into the active workspace's directory in $HOME/.faraday/report/WS_NAME/. Faraday will only process requests for the active workspace.

[index]

A plugin added too much information to my database

You can go to your Status Report in the Web GUI, filter the vulnerabilities by whichever parameter you'd like, select them all and then click on Delete to remove them form the database.

If for any reason you don't want to or you can't access the WebUI (or maybe even you'd like to automatize this task) you can use our helper script to remove vulnerabilities by severity.

For example, say you want to remove all vulnerabilities of severity critical in a local CouchDB on the workspace named messedup, you should run:

./removeBySeverity.py -d messedup -s critical

Read more about it here.

Restore the CouchDB user administrator

It is possible to restore the database's users using the following script:

/faraday# ./reset_admin_couchdb.sh

Important: this process will eliminate existing users

[index]

Is your question not listed here? Contact us