Repository navigation
Home
The following platforms are supported:
[Read more about this] (https://github.com/infobyte/faraday/wiki/installation-client).
Download the latest tarball or clone the [Faraday Git Project](https://github.com/infobyte/faraday repository):
$ git clone https://github.com/infobyte/faraday.git faraday-dev
$ cd faraday-dev
$ ./install.sh
$ ./faraday-server.py
$ ./faraday.py
Read more about the installation process.
Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distribution, indexation and analysis of the data generated during a security audit.
The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.
Designed for simplicity, users should notice no difference between their own terminal application and the one included in Faraday. Developed with a specialized set of functionalities that help users improve their own work. Do you remember yourself programming without an IDE? Well, Faraday does the same as an IDE does for you when programming, but from the perspective of a penetration test.
Once the data is loaded Faraday crunches it into different visualizations useful not only for managers, but also for pentesters.
To read about the latest features check out the release notes!
Right now faraday has more than 60+ supported tools, among them you will find:
##Features
Information is classified in Workspace units. Each Workspace maps into a pentest team's assignments containing all the intel discovered by that team.
Using CTRL+SPACE in the console for the different commands for example nikto CTRL+SPACE will show the nikto options, or you can use it to get ip or hostname which is in the HostTree for example $ 127.0[CTRL+SPACE] will complete to 127.0.0.1 if we have that ip in the HostTree
If two plugins have different information for the same element it will generate a conflict that the user will have to resolve. For example, user1 incorporates host 127.0.0.1 OS:Linux and user2 incorporates 127.0.0.1 OS: Linux Ubuntu 13.10.
On our GTK interface there's a button on the bottom right corner of the main window with the number of conflicts in the current workspace. To solve them, just click that button and a window will open where you can edit the conflicting objects and select which one to keep.
Using our plugin you can do different actions using the command line, for example:
$ cd $faraday/bin/
$ #Adding new hosts
$./fplugin -e 'for h in api.createAndAddHost("8.8.8.8","Linux")'
$ #Get all ip of HostTree
$ ./fplugin -e 'for h in api.__model_controller.getAllHosts(): print h.name' > allhost.txt
$ nmap -i allhost.txt
Read more about the Faraday Plugin.
Updating objects on other Faraday instances result in notifications on your Faraday GTK Client.
- Homepage: https://www.faradaysec.com
- User's manual: https://github.com/infobyte/faraday/wiki
- Download: [.tar.gz] (https://github.com/infobyte/faraday/tarball/master)
- Commits RSS feed: https://github.com/infobyte/faraday/commits/master.atom
- Issue tracker: https://github.com/infobyte/faraday/issues
- Frequently Asked Questions (FAQ): https://github.com/infobyte/faraday/wiki/FAQ
- Mailing list subscription: https://groups.google.com/forum/#!forum/faradaysec
- Twitter: [@faradaysec] (https://twitter.com/faradaysec)
- [Demos] (https://github.com/infobyte/faraday/wiki/Demos)
- IRC: [ircs://irc.freenode.net/faraday-dev] (ircs://irc.freenode.net/faraday-dev) WebClient
- Screenshots: https://github.com/infobyte/faraday/wiki/Screenshots
-
Black Hat Arsenal USA - 2016:
-
SecurityWeekly - 2016:
-
Bsides Latam - 2016:
-
Black Hat Arsenal Asia - 2016:
-
Black Hat Arsenal Europe - 2015:
-
Black Hat Arsenal USA - 2015:
-
RSA - 2015:
-
Ekoparty Security Conference - 2014:
-
Black Hat Arsenal - 2011
-
Ekoparty Security Conference - 2010: