Faraday Workspaces para Bug Bounties!

Hace tiempo en el release de Faraday v1.0.11 agregamos visualizaciones para representar el precio de las vulnerabilidades en base a su severidad.



Nos pareció interesante preparar workspaces de Faraday de cada Bug Bounty con un scanning inicial de los targets incluidos como punta pie del análisis.

En esta primer entrega los siguientes workspaces de Bug Bounty fueron creados:

1) Github
2) Facebook
3) Google
4) Yahoo
5) Mozilla

Para importar estos workspaces en Faraday solo deben bajarlos de Github.

Descomprimir el contenido en /var/lib/couchdb/ y ese workspace va a estar disponible en Faraday.

Recuerden tener configurado Faraday con CouchDB. Para más información lee nuestra guía sobre CouchDB.

Leer más sobre usar Faraday para programas de Bug bounty.

Si ves que algún targets falta dentro de los workspace o hay información adicional que quieras incorporar puedes mandar tus pull request acá!

Ojala que les sea de utilidad! Happy Bug Bountying!

Faraday Workspaces for Bug Bounties!

A ways back when we released Faraday v1.0.11 we added a couple of graphics to better visualize and understand the price of vulnerabilities based on their severity.




We thought it would be interesting to prepare Faraday workspaces for Bug bounties from different organizations. As a way to kick off the analysis we did scans of the included targets.

In this first batch, the following Bug Bounty workspaces were created.

1) Github
2) Facebook
3) Google
4) Yahoo
5) Mozilla

To import these workspaces into Faraday all you need to do is download them from Github.

Unzip the content in /var/lib/couchdb/ and these workspaces will be available in Faraday database.

Remember to have Faraday configured with CouchDB. For more information:
https://github.com/infobyte/faraday/wiki/Couchdb

Read more about using Faraday for Bug bounty programs.

If you happen to see that there are some targets are missing inside a workspace or you have additional information that you want to incorporate you can send us your pulls here!

We hope everyone finds this useful! Happy Bug Bountying!