In the world of cybersecurity, where things change quickly, it’s important to do thorough and fast penetration testing. Here comes FACTION, a cutting-edge Penetration Testing Report Generation and Collaboration Engine that is meant to make the whole assessment process easier. This powerful tool not only automatically creates pen test reports, but it also lets peers review them, keeps track of changes, and lets people work together in real time. FACTION is a complete solution for handling security assessments and increasing team productivity in the field of cybersecurity. It has templates that can be changed to fit your needs, large databases of vulnerabilities, and easy integrations.
FACTION is your entire assessment workflow in a box. With FACTION you can:
- Automate pen testing and security assessment Reports
- Peer review and track changes for reports
- Create customized DOCX templates for different assessment types and retests
- Real-time collaboration with assessors via the web app and Burp Suite Extensions
- Customizable vulnerability templates with over 75 prepopulated
- Easily manage assessment teams and track progress across your organization
- Track vulnerability remediation efforts with custom SLA warnings and alerts
- Full Rest API to integrate with other tools
Other Features:
- LDAP Integration
- OAUTH2.0 Integration
- SMTP integration
- Extendable with Custom Plugins similar to Burp Extender.
- Custom Report Variables
Want to see it in action? -> Faction Video Overview
Quick Setup
Run the following commands to build the war file and deploy it to the docker container.
git clone git@github.com:factionsecurity/faction.git
cd faction
mvn clean compile war:war
docker-compose up --build
Once the containers are up you can navigate to http://127.0.0.1:8080 to access your FACTION instance. On the first boot, it will ask you to create an admin account.
Import the Vulnerability Templates
- Navigate to Admin -> Default Vulnerabilities
- Click import VulnDB.
Customize reports
You can find out more information about creating your own custom report templates here: Custom Security Report Templates – Faction Security
Burp Suite Extension
Manuals and Tutorials
Don’t want to host it yourself?
We can provide hosting for your instance. All instances are single tenants so you don’t have to worry about sharing infrastructure with untrusted parties. Navigate to https://www.factionsecurity.com to learn more.
Screenshots
Vulnerability Templates
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQZg7yCE08ujS6EVQs53HWns1DeGnKXEUbAqtdfbPOLHGZnODvRwdMkd4Bf0C1UXOfPyNTzDEyBV3aMhvXhS8XCpR3Yr9Li2VEvBbxJVHs7mDSr5YV9FIr18pYdV1hIjMa6eaVOKY5Oy8C2ue1HeogYGG-jCXQptrqe4rYTx-E7SVUenAbaW_2enSVkA/s16000/FACTION.webp)
Assessment Scheduling
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdtOLcwUlWDn9jBY45jUSO2aRRnrFOLgV6PLG4dLdY2V-kcpzIELosU9HAHI6iOpkOfBEEAsBgi_B8s0I9SF65v7ntXE50WeUhowWyahyphenhyphen95CmHvypsbtCZeSrfkfa1Rgt1JCGKF7yLXbQy0oKX3oaEgcFLnO5HxFTyX9LI3DEpBJ4t0ELk5fRojEpA5g/s16000/FACTION%20(1).png)
Peer Review and Track Changes
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRRnFDisyrqgRSNPFHsvoxhsm0u5CkV9Of7j7u0PqGAb16HLPHhaTyujAJxcDuqcNr745kLL4daF5kshpyBjEGFeKsYX76N-Kry1pG0RFue2VyRmokaI3BLY0ZQkJSAFj17y69kmxWs_hM4zqO4LjtVukiyYOOdYiXMncvjJVjS94B_reQrIrRNmqliA/s16000/FACTION%20(2).png)