Shulou(Shulou.com)05/31 Report--

This article mainly introduces what Faraday is, the article is very detailed, has a certain reference value, interested friends must read it!

Fareday is a collaborative multi-functional penetration testing and vulnerability management platform.

The new version of Faraday introduces a new concept, IPE (Integrated Penetration Test Environment), which is called multi-user penetration testing IDE. With the help of Faraday, researchers can share the analysis data with other users or query the analysis results provided by other users in the process of security audit.

It is worth mentioning that in addition to data sharing, Faraday can also provide tools available in the community in a collaborative manner for multiple users.

There is no doubt that Faraday provides a new way to send, upload and share vulnerabilities, because the new version of Faraday integrates Service Now, so our options will be richer.

In the process of use, users will find that our terminal applications are no different from the tools integrated into Faraday, and also integrate a set of specific functions to improve our productivity.

Faraday can display the data loaded by users in different visual effects, which is very useful for both managers and penetration testers.

Integrated with Jira

Faraday allows us to send multiple vulnerabilities to Jira without filling out any forms, so we don't have to enter our Jira credentials every time we submit a vulnerability, we can modify or replace items directly in the tool configuration item.

Burp plug-in refurbished

1. The Burp plug-in can directly use a variety of Faraday server API, so we will no longer need the GTK client

2. The plug-in is rewritten in Java language

3. Added two-factor authentication (2FA) support to enhance security

Tool installation $git clone https://github.com/infobyte/faraday.git faraday-dev$ cd faraday-dev installation system dependent components

Debian (Debian, Ubuntu, Backtrack, etc.):

$sudo apt update $sudo apt install build-essential ipython python-setuptools\ python-pip python-devlibssl-dev\ libffi-dev pkg-configlibxml2-dev\ libxslt1-dev libfreetype6-devlibpng-dev postgresql

Kali Linux:

$sudo apt-get update$sudo apt-get install build-essential ipython python-setuptools\ python-pip python-devlibssl-dev\ libffi-dev pkg-configlibxml2-dev\ libxslt1-dev libfreetype6-devlibpng-dev

Initialize PostgreSQL:

The $python manage.py initdb tool runs $python2 faraday-server.py

Run the server in background mode:

$python2 faraday-server.py-other plug-ins that have been updated by start

-Netsparkers

-SQLMap

-Dnsmap

-SSLyze

-Nessus

-Goohost

The above is all the content of this article "what is Faraday?" thank you for reading! Hope to share the content to help you, more related knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.