Plugin List

Plugin List

The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.

You break it. We keep track of the pieces!

To maximize flexibility, Faraday Plugins run only on the Client. This means you can have custom, private plugins all for yourself!

There are three kinds of plugins available for Faraday: Console, Report and API (also called Online). However, these are not mutually exclusive, meaning that some tools have more than one Plugin to process their output. For example, Nmap has a Console plugin which allows you to run it directly from ZSH, but it also has a Report one, in order to import scans that were run outside of Faraday.

Console

Plugins that intercept commands, fired directly when a command is detected in the console. These are transparent to you and no additional action on your part is needed.

Report

Plugins that import file reports. You have to copy the report to /home/faraday/.faraday/report/{workspacename} (replacing {workspacename} with the actual name of your Workspace) and Faraday GTK Client will automatically detect, process and add it to the HostTree.

If Faraday is not capable to detect the plugin needed to process the report, you can manually choose which plugin will be used by adding _faraday_pluginName to the file name before the extension.

For example, if the Burp report named burp_1456983368.xml is not being recognized, try renaming it to Burp_1456983368_faraday_Burp.xml. Now copy it to the Workspace directory and Faraday should now run the plugin and import all vulnerabilities.

Keep in mind that this functionality is case sensitive.

API

Plugin connectors or online (BeEFMetasploitBurp), these connect to external APIs or databases, or talk directly to Faraday's RPC API.

List

Faraday v3.11: Plugins updates: Nessus, Netsparker, w3af.

If you think your favorite tool is missing code your own plugin or ask us to do it!


    Still looking for answers? You can try opening a ticket.
      • Related Articles

      • Faraday Plugin

        Intro In order to manage, add, and list information stored in faraday, we created fplugin, a simple plugin that allows you to interact directly with our Python API from the command line. It gives Faraday powerful scripting features and allows you to ...
      • Basic Plugin Development

        This is an example of a Faraday Plugin that process a xml report. Configure Custom Plugins Folder To add custom plugins in faraday you first need to add the path where you have your plugins in the config.ini under server config section. ...
      • Burp Proxy Extender Plugin

        This plugin is a script developed in Java as an extender to the Burp Proxy API (Pro/Community). Installation with NGINX and SSL Enable (Auto-Signed Certificate) To enable Burp Plugin using NGINX and with SSL Enable you need the Name (e.g. server FQDN ...
      • Import CSV using faraday_csv Plugin

        With faraday_csv Plugin, you can upload data to Faraday by using CSV files.  Main header: The main headers for faraday_csv Plugin are target or ip. Both columns contain the same information (host's IP). Without any of them, Faraday won't recognize ...
      • Faraday is not importing my report

        First let's make sure there is a Plugin to parse it so make sure your tool is listed in our Plugin List.  Not there? Code your own or ask us to do it. You can also try to force Faraday to process a report with a certain plugin. For example, let's say ...