Check out Faraday v1.0.18!

Today we are happy to announce that Faraday v1.0.18 (Community, Pro & Corp) is ready!

A short iteration, filled with small powerups - brand new CLI mode allows you to process reports in batch, new helpers and plugin fixes.

For our Pro and Corporate versions we added a set of exclusive improvements making the daily work easier.

We know that our users rely on a lot of different systems and solutions and we want to integrate Faraday in that workflow. In that order we added the ability to easily export data into a JIRA installation, allowing users to share the findings between the security engineering, devops and development teams. In order to do this, we added a new layer between Faraday and the database, making our product more robust than ever. Expect a lot of new features in this direction in the near future!

Pro & Corp exclusive changes:

 

• Experimental JIRA integration - just enable Faraday Proxy Server, go to our Status Report to select the desired vulns and click on the JIRA button! Read more about it here.
• Added Faraday Proxy Server, a proxy between CouchDB and Faraday, read about how to setup and run
• Improved Executive Report generation process
• Extended user management features

 

 

 

Community, Pro & Corp changes:

• Added CLI mode - to process the XML output of an NMap scan located in /tmp/nmap-scan.xml into the workspace named project_one run the following command:

  python2 faraday.py --cli --workspace project_one --report /tmp/nmap_scan.xml

  read more about it here
• Now you can run as many Faraday instances as you like per host
• Added some new scripts and helpers: (helpers/cfdbToCsv.py - helpers/vulndbToCsv.py - bin/getExploits.py)

Community, Pro & Corp bug fixes:

• Included all fields when editing Web Vulnerabilities in bulk mode in our Web UI
• Fixed selection of Hosts and Services in both their lists in our Web UI
• Fixed Hosts and Services filters, when results were empty it showed the loading icon forever, now it works as expected
• Fixed bugs in Qualys, ZAP, Nikto, w3af and OpenVAS plugins:

• ZAP
  Fixed for newest report version and added Unicode support
• Nikto
  Fixed for newest report version, added more data import
• Qualys
  Fixed for newest report version, added more data import and Unicode support
• ... and more!

We hope you enjoy it, and let us know if you have any questions or comments.

https://www.faradaysec.com/
https://github.com/infobyte/faraday
https://twitter.com/faradaysec