This extension will allow you to import requests and issues from your Burp workspace into Faraday.
You can find Faraday in the Burp App Store!
Go to Extender-> BApp Store, and then install the Faraday extension.
Then make sure the extension is loaded in the Extensions tab.
Get the latest version of the extension .jar by heading to
the GitHub Repository and download
the file named faraday-burp-v2.x.jar
Go to Extender-> Extensions and click in the Add button.
In the Extension Details section, leave the extension type as Java, and the extension file
should be the path to the faraday-burp-v2.x.jar file you just downloaded.
Click Next, and if everything went well, you should see no errors and you can close the window.
Then make sure the extension is loaded in the Extensions tab.
Once the Faraday extension is loaded into your Burp, you will see a new tab called Faraday.
The first step you should complete upon installation is logging in to you Faraday instance.
For this, complete the Faraday Server URL with the address where your server is running. If it is the same machine, you can leave it as it is.
Once you are sure the URL is correct, click the Connect button so that the extension can validate your server.
If all goes okay, the username and password fields will be enabled for you to fill them in, and click Login.
If a 2FA token is requested by the server, you will be asked to provide it so that we can authenticate.
Once authenticated, you will be able to:
-
Import the vulnerabilities you've found so far.
-
Choose whether the vulnerabilities should be imported automatically as soon as they are found or not (it's disabled by default).
-
Restore the Faraday extension's configuration.
Also, we've added the possibility to send the issues and requests to Faraday with a new option in the context menu
