Faraday Bsides Latam 2016

http://www.infobytesec.com

Francisco AmatoFaraday

BsideLatam 2016

WHOAMI


ContactFrancisco Amato

[email protected] @famato

https://www.faradaysec.com

mailto:[email protected]

http://www.faradaysec.com

WHOAMI


Ekoparty

WHOAMI


#Eko12 October 26, 27, 28

Introduction


Agenda

• Penetration Test • Faraday Platform• Testing Lab

Introduction


Penetration Test

• Collaborative• Reporting• Vulnerability Assessment• Issues• Task

Introduction


Faraday

• Collaborative Penetration Test• Vulnerability Management Platform• An Integrated Multiuser Risk Environment that maps and leverages all the knowledge you generate in real time.

Faraday


Open Source - v1.0.20

Platforms


Introduction


Interfaces

• QT• GTK• ZSH• Web

Interfaces


QT - Deprecated

Interfaces


GTK

Interfaces


ZSH

Interfaces


Web-UI

Plugins


50+

Plugins


Types

Console (Nmap, Nikto, etc)Report (Nessus, Acunetix, ZAP )Api (BeFF, Metasploit, Burp)

Database


CouchDB

Vulnerability Database


Workspaces


Dashboard


Dashboard


Status Report


Status Report


Hosts


Faraday Plugin


Faraday Plugin


Continuous Scanning


APIs


Faraday

- RPC API 127.0.0.1:9876- RESTful 127.0.0.1:9977

Get Involve!


* https://groups.google.com/d/forum/faradaysec* Freenode: #faraday-dev* http://twitter.com/faradaysec* http://github.com/infobyte/faraday

https://groups.google.com/d/forum/faradaysec

http://twitter.com/faradaysec

http://github.com/infobyte/faraday

Faraday Awards


Labs!


Labs!

Faraday Bsides Latam 2016

Software