Supported-Plugins
The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.
You break it. We keep track of the pieces!
To maximize flexibility Faraday Plugins run only on the client, which means you can have custom, private plugins all for yourself!
There are three kinds of plugins available for Faraday; console, report and API also called online. However, these are not mutually exclusive, meaning that some tools have more than one Plugin to process their output. For example, Nmap has a Console plugin which allows you to run it directly from ZSH, but it also has a Report one, in order to import scans that were run outside of Faraday.
Console¶
Check Faraday-Cli to use this feature!
Plugins that intercept commands, fired directly when a command is detected in the console. These are transparent to you and no additional action on your part is needed.
Report¶
Use the web UI to import reports. Check this Article!
API¶
Plugin connectors or online (BeEF, Metasploit, Burp), these connect to external APIs or databases, or talk directly to Faraday's API.
Custom¶
If you think your favourite tool is missing code your own plugin or ask us to do it!
The following table contains name, id, command or report, in the case of command it is that the command can be used inside faraday-cli and it gets imported into faraday after the run, for report it means that the file can be imported in the Faraday IU.
Name | ID | Command | Report |
---|---|---|---|
Acunetix XML Output Plugin | Acunetix | No | Yes |
Acunetix360 Output Plugin | Acunetix360 | No | Yes |
Acunetix JSON Output Plugin | Acunetix_Json | No | Yes |
Amap Output Plugin | Amap | Yes | No |
Appscan XML Plugin | Appscan | No | Yes |
Appscan CSV Output Plugin | Appscan_CSV | No | Yes |
AppSpider XML Output Plugin | AppSpider | No | Yes |
Arachni XML Output Plugin | Arachni | Yes | Yes |
arp-scan network scanner | arp-scan | Yes | No |
AWS Inspector JSON Output Plugin | AWSInspector_Json | No | Yes |
Bandit XML Output Plugin | Bandit | No | Yes |
BeEF Online Service Plugin | Beef | Yes | No |
brutexss | brutexss | Yes | No |
Burp XML Output Plugin | Burp | No | Yes |
Checkmarx XML Output Plugin | Checkmarx | No | Yes |
CIS XML Output Plugin | CIS | No | Yes |
Cobalt CSV Output Plugin | Cobalt | No | Yes |
Crowdstrike JSON Output Plugin | Crowdstrike_Json | No | Yes |
DiG | dig | Yes | No |
Dirb | dirb | Yes | No |
dirsearch | dirsearch | Yes | No |
Dnsenum XML Output Plugin | Dnsenum | Yes | No |
Dnsmap Output Plugin | Dnsmap | Yes | No |
Dnsrecon XML Output Plugin | Dnsrecon | Yes | No |
Dnswalk XML Output Plugin | Dnswalk | Yes | No |
Faraday CSV Plugin | faraday_csv | No | Yes |
Faraday Json | Faraday_JSON | No | Yes |
Fierce Output Plugin | Fierce | Yes | No |
Fortify XML Output Plugin | Fortify | No | Yes |
Ftp | ftp | Yes | No |
Goohost XML Output Plugin | Goohost | Yes | No |
Grype JSON Plugin | grype | Yes | Yes |
hping3 | Hping3 | Yes | No |
Hydra XML Output Plugin | Hydra | Yes | No |
Core Impact XML Output Plugin | CoreImpact | No | Yes |
Invicti XML Output Plugin | Invicti | No | Yes |
Ip360 CSV Output Plugin | Ip360 | No | No |
Junit XML Output Plugin | Junit | No | Yes |
Kubescape Json | Kubescape_JSON | No | Yes |
Lynis DAT Output Plugin | Lynis | Yes | Yes |
Maltego MTGX & MTGL Output Plugin | Maltego | No | Yes |
Microsoft Baseline Security Analyzer | MBSA | No | Yes |
Medusa Output Plugin | Medusa | Yes | No |
Metasploit XML Output Plugin | Metasploit | No | Yes |
Naabu | naabu | Yes | Yes |
ncrack XML Plugin | ncrack | No | Yes |
ndiff | Ndiff | Yes | No |
Nessus XML Output Plugin | Nessus | No | Yes |
Nessus Sc Output Plugin | Nessus_sc | No | Yes |
netdiscover | Netdiscover | Yes | No |
Netsparker XML Output Plugin | Netsparker | No | Yes |
NetsparkerCloud XML Output Plugin | NetsparkerCloud | No | Yes |
Nexpose XML 2.0 Report Plugin | NexposeFull | No | Yes |
nextnet | nextnet | Yes | No |
Nikto XML Output Plugin | Nikto | Yes | Yes |
Nipper XML Output Plugin | Nipper | No | Yes |
Nmap XML Output Plugin | Nmap | Yes | Yes |
Nuclei | nuclei | Yes | Yes |
Nuclei | nuclei_legacy | Yes | Yes |
OpenScap XML Output Plugin | OpenScap | No | Yes |
Openvas XML Output Plugin | Openvas | No | Yes |
pasteAnalyzer JSON Output Plugin | pasteAnalyzer | Yes | No |
PeepingTom | peepingtom | Yes | No |
Pentera Json Output Plugin | Pentera_Json | No | Yes |
Ping | ping | Yes | No |
Ping Castle XML Output Plugin | PingCastle | No | Yes |
Popeye JSON Output Plugin | Popeye_Json | No | Yes |
propecia port scanner | propecia | Yes | No |
Prowler | prowler | No | Yes |
Prowler | prowler_legacy | No | Yes |
Qualysguard XML Output Plugin | Qualysguard | No | Yes |
QualysWebapp XML Output Plugin | QualysWebapp | No | Yes |
rdpscan | rdpscan | Yes | No |
Reconng XML Output Plugin | Reconng | No | Yes |
Retina XML Output Plugin | Retina | No | Yes |
Reverseraider XML Output Plugin | Reverseraider | Yes | No |
Sarif Plugin | Sarif | No | Yes |
Semgrep Json | Semgrep_JSON | No | Yes |
Shodan | shodan | Yes | Yes |
Skipfish Output Plugin | Skipfish | Yes | No |
Snyk | Snyk | No | Yes |
SonarQube API Plugin | sonarqubeAPI | No | Yes |
Sourceclear | sourceclear | No | Yes |
sshdefaultscan | sshdefaultscan | Yes | No |
SSL Labs | ssllabs | No | Yes |
Sslyze Plugin | Sslyze_XML | No | Yes |
Sslyze Json | Sslyze_JSON | Yes | Yes |
Syhunt XML Plugin | Syhunt | No | Yes |
Telnet | Telnet | Yes | No |
Terraform Plugin JSON Output Plugin | TerraformPluginJson | No | Yes |
Theharvester XML Output Plugin | Theharvester | Yes | No |
Traceroute | Traceroute | Yes | No |
Trivy JSON Output Plugin | Trivy_Json | No | Yes |
W3af XML Output Plugin | W3af | Yes | Yes |
Wapiti XML Output Plugin | Wapiti | Yes | Yes |
Wcscan XML Output Plugin | Wcscan | Yes | No |
Webfuzzer Output Plugin | Webfuzzer | Yes | No |
Webinspect | Webinspect | No | Yes |
Wfuzz Plugin | Wfuzz | Yes | No |
WhatWebPlugin | whatweb | No | Yes |
whitesource | whitesource | No | Yes |
Whois | whois | Yes | No |
Windows Defender Jsonl | WindowsDefender_JSONL | No | Yes |
WPscan | wpscan | Yes | Yes |
Onapsis X1 XML Output Plugin | X1 | Yes | Yes |
xsssniper | xsssniper | Yes | No |
Zap XML Output Plugin | Zap | No | Yes |
Zap Json Output Plugin | Zap_Json | No | Yes |
References to the Tools:
- Acunetix (REPORT) (XML)
- Amap (CONSOLE)
- Appscan (REPORT)
- AppSpider (REPORT)
- Arachni (REPORT, CONSOLE) (XML)
- arp-scan (CONSOLE)
- AWS Prowler (REPORT)
- Bandit (REPORT)
- BeEF (API)
- Brutexss (REPORT)
- Burp, BurpPro (REPORT, API) (XML)
- Core Impact, Core Impact (REPORT) (XML)
- Dig (CONSOLE)
- Dirb (CONSOLE)
- Dirsearch (REPORT,CONSOLE)
- Dnsenum (CONSOLE)
- Dnsmap (CONSOLE)
- Dnsrecon (CONSOLE)
- Dnswalk (CONSOLE)
- evilgrade (API)
- Fierce (CONSOLE, REPORT)
- Fortify (REPORT)
- Fruitywifi (API)
- ftp (CONSOLE)
- Goohost (REPORT, CONSOLE) (XML)
- hping3 (CONSOLE)
- Hydra (CONSOLE) (XML)
- Ip360 (REPORT)
- Junit (REPORT)
- Lynis (REPORT)
- Maltego (REPORT)
- Microsoft Baseline Security Analyzer (REPORT)
- Medusa (CONSOLE)
- Metasploit, (REPORT, API) (XML) XML report
- Naabu (CONSOLE) (REPORT)
- Ncrack (REPORT)
- Ndiff (REPORT, CONSOLE)
- Nessus, (REPORT) (XML .nessus)
- Netdiscover (CONSOLE)
- Netsparker (REPORT) (XML)
- Netsparker Cloud (REPORT)
- Nexpose, Nexpose Enterprise, (REPORT) (simple XML, XML Export plugin (2.0))
- NextNet (CONSOLE)
- Nikto (REPORT, CONSOLE) (XML)
- Nipper (REPORT)
- Nmap (REPORT, CONSOLE) (XML)
- Nuclei (REPORT)
- OpenScap (REPORT)
- Openvas (REPORT) (XML)
- PasteAnalyzer (CONSOLE)
- Peeping Tom (CONSOLE)
- ping (CONSOLE)
- propecia (CONSOLE)
- Qualysguard (REPORT) (XML)
- QualysWebApp (REPORT)
- rdpscan (CONSOLE)
- Recon-NG (REPORT)
- Retina (REPORT) (XML)
- Reverseraider (CONSOLE)
- Shodan (API)
- Skipfish (CONSOLE)
- SonarQube (REPORT)
- SourceClear (REPORT)
- SSHdefaultscan (CONSOLE)
- SSL Labs (REPORT)
- SSLyze (REPORT, CONSOLE) (XML)
- Sublist3r (REPORT,CONSOLE)
- Telnet (CONSOLE)
- Theharvester (CONSOLE)
- Traceroute (CONSOLE)
- W3af (REPORT) (XML)
- Wapiti (CONSOLE)
- Wcscan (CONSOLE)
- WebInspect (REPORT,CONSOLE)
- Wfuzz (CONSOLE)
- Wfuzz (CONSOLE)
- WhatWebPlugin (REPORT)
- WhiteSource (REPORT)
- whois (CONSOLE)
- WPScan (CONSOLE)
- Xsssniper (REPORT)
- X1, Onapsis (REPORT) (XML)
- Zap (REPORT) (XML)