faraday-agent-dispatcher 1.2

Faraday agent dispatcher to communicate an agent to faraday

Faraday Agents Dispatcher helps user develop integrations with Faraday written in any language.

Installation

Just run pip3 install faraday_agent_dispatcher and you should see the faraday-dispatcher command in your system.

To setup a development environment (this is, to change code of the dispatcher itself, not to write your own integrations), you should clone this repo and run python setup.py develop.

Running Faraday Agent Dispatcher for first time

1. Generate a configuration file running faraday-dispatcher config-wizard.

2. Run the agent with faraday-dispatcher run command. The config file that it creates will be located in ~/.faraday/config/dispatcher.ini if you do not pass a custom path.

You should complete the agent configuration with your registration token, located at http://localhost:5985/#/admin/agents. Check that the server section has the correct information about your Faraday Server instance. Then, complete the agent section with the desired name of your agent. Finally, add the executors

Executors

Creating your own executors

An executor is a script that prints out single-line JSON data to stdout. Remember that if you print any other data to stdout, the dispatcher will trigger an error. If you want to print debugging or logging information you should use stderr for that.

Every line written to stdout by the executor will be decoded by the dispatcher and sent to Faraday using the Bulk Create endpoint. Therefore, the JSON you print must have the schema that the endpoint requires (this schema is detailed below). Otherwise, the dispatcher will complain because you supplied invalid data to it.

If you want to debug your executor, the simplest way to do it is by running it directly instead of with the Dispatcher. Since the executor just prints JSON data to stdout, you will be able to see all information it wants to send to Faraday, but without actually sending it.

Configuring a executor

After writing your executor, you have to add it with the faraday-dispatcher config-wizard within the executor section, adding its name, command to execute and the max size of the JSON to send to Faraday Server. Additionally, you can configure the Environment variables and Arguments in their proper section.

Running a executor

To run an executor use the faraday-dispatcher config-wizard command, and play it from the Faraday Server. The executor will use the environment variables set and ask for the arguments.

Bulk Create JSON format

TODO

Running multiple dispatchers

If you want to have more than one dispatcher, each one runninng its own executors, the preferred of doing this is to create different configuration files for each one (for example, ~/.faraday/config/dispatcher-1.ini and ~/.faraday/config/dispatcher-2.ini). Then, you can run two different Dispatcher instances with faraday-dispatcher --config-file PATH_TO_A_CONFIG_FILE.

Contributed executors

Inside the contrib/ directory you can find some already created executors. Here is a short description of each one:

• basic_example.py: The Hello World of Faraday executors. It will create a host with an associeted vulnerability to it
• heroku_discovery_agent.py: Load host and service information from your Heroku account
• prowlerSample.py: Run the prowler command and send its output to Faraday
• responder.py: Run Responder and send its output to Faraday
• brainfuck.sh: A proof-of-concept to demonstrate you can create an executor in any programming language, including Brainfuck!

Roadmap

We are currently working on new executors, apart from improving the experience using the agents.

Currently, you have to manually add each parameter and environment variable when adding a contrib executor. It will be possible to add them quicker in a automatic way.

We would also like to give some agents read access to their workspace, so they can benefit of the existing data in order to find more valuable information.

1.2 [May 27th, 2020]:

• Now we have official executors, packaged with the dispatcher
• Fix error when killed by signal
• Fix error when server close connection
• Fix error when ssl certificate does not exists
• Fix error when folder ~/.faraday does not exists, creating it
• The new official executors are:
  • nessus
  • nikto
  • nmap
  • sublist3r
  • wpscan
  • w3af
• Faraday versions: 3.11

1.1 [Apr 22th, 2020]:

• The dispatcher now runs with a faraday-dispatcher run command
• faraday-dispatcher wizard command added which generates configuration .ini file
• Manage execution_id within WS and API communication
• The route of Faraday ws comunication change from / to /websockets
• Better error management, now shows error and exceptions depending on log levels
• Better management of invalid token errors
• Add ssl support

1.0 [Dec 17th, 2019]:

• You can add fixed parameters than shouldn't came by the web (e.g. passwords) are set in the dispatcher.ini
• Now its possible to manage multiple executors within one agent
• Now is possible to receive params from the Faraday server

0.1 [Oct 31th, 2019]:

• First beta version published
• Basic structure implemented, with executor with fixed values