Skip to content

Commit 89b3594

Browse files
committed
updates for 1.2 release
1 parent 8433c18 commit 89b3594

41 files changed

Lines changed: 3417 additions & 462 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

docs/.DS_Store

0 Bytes
Binary file not shown.
Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
---
22
tags:
3-
- api
3+
- API
4+
- App Store
45
date: 2024-02-08
56
---
67
<img alt="Static Badge" src="https://img.shields.io/badge/Since-1.2-blue?style=flat">
@@ -101,4 +102,4 @@ public class MyPlugin extends BaseExtension extends BaseExtension implements com
101102
- Returns the updated vulnerability
102103

103104
## Additional Resources
104-
- [Building a JIRA Extension](/Extending%20FACTION/)
105+
- [Building a JIRA Extension](/APIS/Jira%20Integration%20Example/)
Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,11 @@
11
---
22
tags:
3-
- api
3+
- API
4+
- App Store
45
date: 2024-02-08
56
---
67
<img alt="Static Badge" src="https://img.shields.io/badge/Since-1.2-blue?style=flat">
8+
79
Faction can extend its functionality on the server side. If you are familiar with writing BurpSuite extensions then this process should be somewhat familiar to you. If you are not it’s OK. We will walk through the specifics below.
810

911
In this example, we will create a JIRA plugin that will create issues for each vulnerability when the assessment is finalized.

docs/APIS/REST API.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
tags:
3-
- api
3+
- API
44
date: 2024-03-15
55
---
66
The Rest API enables you to integrate FACTION into your unique environment. With the API you can:

docs/APIS/index.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
tags: []
3+
date: 2024-03-25
4+
weight: 1
5+
---

docs/Custom Security Report Templates.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
22
date: 2023-12-17
3-
tags: []
3+
tags: [Reporting, Customize, Variables]
44
---
55
![](files/Pasted image 20231217155942.png)
66

7-
The Faction Report Designer allows you to create custom security report templates for each assessment type. When building reports you need to use the variables listed below. Entering these into your DOCX reports will auto-replace assessment and vulnerability text when the report is generated. You can even use the same variables in many of the assessor input fields outside of the report template (like Risk Assessment Summaries) and it will auto-populate the fields when the report is generated.
7+
The Faction Report Designer allows you to create custom security report templates for each assessment type. When building reports you need to use the variables listed below. Entering these into your DOCX reports will auto-replace the assessment and vulnerability text when the report is generated. You can even use the same variables in many of the assessor input fields outside of the report template (like Risk Assessment Summaries) and it will auto-populate the fields when the report is generated.
88

99
You can download the sample templates here:
1010
[Sample Templates](https://github.com/factionsecurity/report_templates)
@@ -47,8 +47,8 @@ These are only available inside tables.
4747
- **${severity}** – Severity of each vulnerability.
4848
- **${likelihood}** – Likelihood of the vulnerability
4949
- **${impact}** – Impact of the vulnerability
50-
- **${cvssScore}** – CVSS score of the vulnerability
51-
- **${cvssString}** – CVSS vector of the vulnerability
50+
- **${cvssScore}** – CVSS score of the vulnerability (Since v1.2)
51+
- **${cvssString}** – CVSS vector of the vulnerability (Since v1.2)
5252
- **${count}** – Row Count of the vulnerability
5353
- **${tracking}** – Tracking number of the vulnerability
5454
- **${vid}** – Vulnerability internal database id
@@ -96,8 +96,8 @@ These are only available inside tables.
9696
- **${severity}** – Severity of each vulnerability.
9797
- **${likelihood}** – Likelihood of the vulnerability
9898
- **${impact}** – Impact of the vulnerability
99-
- **${cvssScore}** – CVSS score of the vulnerability
100-
- **${cvssString}** – CVSS vector of the vulnerability
99+
- **${cvssScore}** – CVSS score of the vulnerability (Since 1.2)
100+
- **${cvssString}** – CVSS vector of the vulnerability (Since 1.2)
101101
- **${count}** – Row Count of the vulnerability
102102
- **${tracking}** – Tracking number of the vulnerability
103103
- **${vid}** – Vulnerability internal database id

docs/Custom Variables.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,13 @@
11
---
2+
tags: [Reporting, Customize]
23
date: 2024-02-12
34
---
45

56
You can use custom variables to add additional features to Faction. These variables can be used to add additional information to vulnerabilities like a CVSS score or to populate additional data in reports like "product owner", "cost center", etc.
67

8+
!!! note
9+
Faction 1.2 and above has CVSS Scoring built in. You can still use this information as a guide to add your own custom variables.
10+
711
## Adding a CVSS Score
812
As of Faction version 1.1.25.1, Faction does not have CVSS scores built in but you can add your own easily.
913

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
---
2+
tags: [App Store, API]
3+
date: 2024-03-25
4+
weight: 1
5+
---
6+
7+
8+
Below is a List of Approved Faction Extensions. These all work with Faction 1.2+
9+
10+
| Name | Developer | URL |
11+
| --- | --- | --- |
12+
| Faction Jira Integration | Faction Security | [https://github.com/factionsecurity/Faction-Jira-Extension](https://github.com/factionsecurity/Faction-Jira-Extension) |
13+
| Faction Vulnerability Bar Chart | Faction Security | [https://github.com/factionsecurity/Faction-Vulnerability-Bar-Chart](https://github.com/factionsecurity/Faction-Vulnerability-Bar-Chart) |
14+
15+
16+
# Submit an Extension
17+
Send an email to develop [ at ] factionsecurity [dot] com with a link to to your github and a brief explaination of what it does.

docs/Faction Severity Rating and CVSS Scoring.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
---
2+
tags: [CVSS, Vulnerability, Core Features]
23
date: 2024-03-14
34
---
45

docs/Importing Your Vulnerability Templates Via the API.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
tags: []
2+
tags: [ API, Core Features, Vulnerability]
33
date: 2024-02-10
44
---
55
<img alt="Static Badge" src="https://img.shields.io/badge/Since-1.1.25-blue?style=flat">

0 commit comments

Comments
 (0)