Reporting Tools

faraday

faraday is a vulnerability-management platform for the whole engagement. Instead of scattering results across tool outputs and note files, Faraday pulls findings from many tools into one workspace with a shared web interface, so a team can work the same data together — deduplicating vulnerabilities, tracking status, tagging hosts, and producing consolidated reports. It’s the “single source of truth” layer for a larger assessment, where several people and dozens of tools need to converge on one organized picture.

Installed from the AUR (as faraday-bin); Security → Reporting Tools → faraday. It runs as a server with a web UI (faraday), plus frcli, a command -line client for scripting against it.

The client’s help

NAME:
   frcli - command line tool for faraday

USAGE:
   frcli [global options] command [command options] [arguments...]

VERSION:
   0.2.14-alpha commit=v0.2.14-alpha

COMMANDS:
   help, h  Shows a list of commands or help for one command

   insights:
     revenue   Get a pairwise revenue report for a channel.
     insights  List currently open channel with routing and uptime information.

   prices:
     fiat  Get fiat pricing for BTC.

   recommendations:
     threshold  Get close recommendations for currently open channels based on whether they are below a set threshold.
     outliers   Get close recommendations for currently open channels based on whether it is an outlier.

   reporting:
     audit        Get a report of node activity.
     closereport  Get a report for a specific channel close.

GLOBAL OPTIONS:
   --rpcserver value          host:port of faraday (default: "localhost:8465")
   --network value, -n value  the network faraday is running on e.g. mainnet, testnet, etc. (default: "mainnet")
   --faradaydir value         path to faraday's base directory (default: "/home/cyberbow/.faraday")
   --tlscertpath value        path to faraday's TLS certificate (default: "/home/cyberbow/.faraday/mainnet/tls.cert")
   --macaroonpath value       path to macaroon file (default: "/home/cyberbow/.faraday/mainnet/faraday.macaroon")
   --help, -h                 show help
   --version, -v              print the version

Using it

  1. Start the Faraday server; it serves a web interface (default http://localhost:5985) where the real work happens.
  2. Create a workspace for the engagement.
  3. Feed in results — Faraday imports the output of many scanners (nmap, nuclei, nikto, and more), normalizing everything into hosts, services, and vulnerabilities.
  4. Work the findings as a team — assign, tag, deduplicate, and track status in the shared UI.
  5. Generate a report from the consolidated data.

Faraday is worth the setup on multi-person engagements; for a solo assessment, cherrytree notes are often enough.