full-disclosure - [FD] Check out faraday v1.0.18! New CLI mode, Jira support & bug fixes!

Open Source and information security mailing list archives

Message-ID: <CAL-7swzLfe5cyyZZDXbP2=F_ZEpgeYx5_rfbsGkkvPckN9oLyg@mail.gmail.com>
Date: Wed, 6 Apr 2016 10:48:28 -0300
From: Francisco Amato <famato@...obytesec.com>
To: fulldisclosure@...lists.org
Subject: [FD] Check out faraday v1.0.18! New CLI mode,
	Jira support & bug fixes!

Today we are happy to announce that Faraday v1.0.18 is ready!

A short iteration, filled with small powerups - brand new CLI mode
allows you to process reports in batch, new helpers and plugin fixes.

We know that our users rely on a lot of different systems and
solutions and we want to integrate Faraday in that workflow. In that
order we added the ability to easily export data into a JIRA
installation, allowing users to share the findings between the
security engineering, devops and development teams. In order to do
this, we added a new layer between Faraday and the database, making
our product more robust than ever. Expect a lot of new features in
this direction in the near future!

Changes:

* Experimental JIRA integration - just enable Faraday Proxy Server:
https://github.com/infobyte/faraday/wiki/Faraday-Server#proxy, go to
our Status Report to select the desired vulns and click on the JIRA
button! Read more about it here:
https://github.com/infobyte/faraday/wiki/JIRA-integration.
* Added Faraday Proxy Server, a proxy between CouchDB and Faraday,
read about how to setup and run
https://github.com/infobyte/faraday/wiki/Faraday-Server#proxy
* Improved Executive Report generation process
* Extended user management features

* Added CLI mode - to process the XML output of an Nessus scan located
in /tmp/nmap-scan.xmlinto the workspace named project_one run the
following command:

python2 faraday.py --cli --workspace project_one --report /tmp/nessus_scan.xml

read more about it here:  https://github.com/infobyte/faraday/wiki/Usage#cli
* Now you can run as many Faraday instances as you like per host
* Added some new scripts and helpers  (helpers/cfdbToCsv.py -
helpers/vulndbToCsv.py - bin/getExploits.py)

Bug fixes:

* Included all fields when editing Web Vulnerabilities in bulk mode in
our Web UI
* Fixed selection of Hosts and Services in both their lists in our Web UI
* Fixed Hosts and Services filters, when results were empty it showed
the loading icon forever, now it works as expected
* Fixed bugs in Qualys, ZAP, Nikto, w3af and OpenVAS plugins:

* ZAP - Fixed for newest report version and added Unicode support
* Nikto -Fixed for newest report version, added more data import
* Qualys - Fixed for newest report version, added more data import and
Unicode support
... and more!

We hope you enjoy it, and let us know if you have any questions or comments.
https://www.faradaysec.com/
https://github.com/infobyte/faraday
https://twitter.com/faradaysec

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives