Faraday Cli (original) (raw)

Use Faraday directly from your favorite terminal. faraday-cli is the official client that make automating your security workflows, easier.

Examples¶

Here you have some snippets of different workflows you can generate using faraday-cli

One-line Continuous Scan¶

Scan assets from workspace.

$ faraday-cli host list -ip -w other_ws | nmap -iL - -oX /tmp/nmap.xml && faraday-cli tool report -w other_ws /tmp/nmap.xml

One-Line to nmap to all the host in the workspace and import the results back to Faraday¶

To scan all the host list inside a workspace with nmap and import the results back to faraday.

for ip in <math xmlns="http://www.w3.org/1998/Math/MathML"><semantics><mrow><mo stretchy="false">(</mo><mi>f</mi><mi>a</mi><mi>r</mi><mi>a</mi><mi>d</mi><mi>a</mi><mi>y</mi><mo>−</mo><mi>c</mi><mi>l</mi><mi>i</mi><mi>h</mi><mi>o</mi><mi>s</mi><mi>t</mi><mi>l</mi><mi>i</mi><mi>s</mi><mi>t</mi><mo>−</mo><mi>i</mi><mi>p</mi><mo stretchy="false">)</mo><mo separator="true">;</mo><mi>f</mi><mi>a</mi><mi>r</mi><mi>a</mi><mi>d</mi><mi>a</mi><mi>y</mi><mo>−</mo><mi>c</mi><mi>l</mi><mi>i</mi><mi>t</mi><mi>o</mi><mi>o</mi><mi>l</mi><mi>r</mi><mi>u</mi><mi>n</mi><mover accent="true"><mi>n</mi><mo>¨</mo></mover><mi>m</mi><mi>a</mi><mi>p</mi><mo>−</mo><mi>P</mi><mi>n</mi><mo>−</mo><mi>p</mi><mn>443</mn><mo separator="true">,</mo><mn>80</mn><mo>−</mo><mi>s</mi><mi>V</mi><mo>−</mo><mo>−</mo><mi>s</mi><mi>c</mi><mi>r</mi><mi>i</mi><mi>p</mi><mi>t</mi><mo>=</mo><mo>+</mo><mi>h</mi><mi>t</mi><mi>t</mi><mi>p</mi><mo>−</mo><mi>e</mi><mi>n</mi><mi>u</mi><mi>m</mi><mo>−</mo><mi>v</mi><mi>v</mi><mi>v</mi></mrow><annotation encoding="application/x-tex">(faraday-cli host list -ip); faraday-cli tool run \"nmap -Pn -p443,80 -sV --script=+http-enum -vvv </annotation></semantics></math>(faraday−clihostlist−ip);faraday−clitoolrunn¨map−Pn−p443,80−sV−−script=+http−enum−vvvip\"

!!! info In this case it should have a workspace named "other_ws" with hostnames in it

Scan your subdomains¶

Use a tool like assetfinder to do a domains lookup, scan them with nmap and send the results to faraday

$ assetfinder -subs-only example.com| sort | uniq |awk 'BEGIN { ORS = ""; print " {\"target\":\""} { printf "%s%s", separator, <math xmlns="http://www.w3.org/1998/Math/MathML"><semantics><mrow><mn>1</mn><mo separator="true">,</mo></mrow><annotation encoding="application/x-tex">1, </annotation></semantics></math>1,2 separator = ","}END { print "\"}" }' | faraday-cli agent run -a 1 -e nmap --stdin

!!! info For this purpouse, an agent is created and already connected to run the nmap executor

Send Faraday Executive Reports by mail¶

Run a daily scan and send your report

$ faraday-cli executive_report create -t \'"generic_default.docx (generic) (Word)"\' --confirmed -d /tmp/report.docx && echo "Faraday Daily Report" | mail -s "Daily Report" user@example.com -A /tmp/report.docx

Load your assets from your cloud provider¶

Here you can list your assets using a cli from your provider (in this example Digital Ocean), then generate a json with that information and use faraday-cli to send it to faraday.

$ doctl compute droplet list --format PublicIPv4,Name --no-header | awk 'BEGIN { ORS = ""; print " ["} { printf "%s{\"ip\": \"%s\", \"description\": \"%s\"}", separator, <math xmlns="http://www.w3.org/1998/Math/MathML"><semantics><mrow><mn>1</mn><mo separator="true">,</mo></mrow><annotation encoding="application/x-tex">1, </annotation></semantics></math>1,2 separator = ", "}END { print "] " }' | faraday-cli host create --stdin

Too many secrets?

QW55IGZhbnMgb2YgVGhlIFNuZWFrZXJzPz8gVHJ5IHJ1bm5pbmcgZmFyYWRheS1jbGkgYWZ0ZXIgc2V0dGluZyB0aGlzICJleHBvcnQgS0FLRVJfTU9ERT0xIg