{"id":25273827,"url":"https://github.com/factionsecurity/faction","last_synced_at":"2026-03-11T08:05:37.464Z","repository":{"id":206758868,"uuid":"714971579","full_name":"factionsecurity/faction","owner":"factionsecurity","description":"Pen Test Report Generation and Assessment Collaboration","archived":false,"fork":false,"pushed_at":"2026-03-09T13:07:01.000Z","size":105684,"stargazers_count":591,"open_issues_count":18,"forks_count":60,"subscribers_count":13,"default_branch":"main","last_synced_at":"2026-03-09T17:53:08.464Z","etag":null,"topics":["application-security","hacking","penetration-testing","penetration-testing-tools","pentesting","reporting","security","security-audit","security-automation","security-report","security-reporting","security-tools","security-vulnerability"],"latest_commit_sha":null,"homepage":"https://www.factionsecurity.com/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/factionsecurity.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"factionsecurity","patreon":"null0perat0r","open_collective":"faction"}},"created_at":"2023-11-06T08:18:36.000Z","updated_at":"2026-03-09T13:04:56.000Z","dependencies_parsed_at":"2024-11-06T15:34:56.899Z","dependency_job_id":"f976754c-8f8f-4a58-bbf1-f2869c7d3b3d","html_url":"https://github.com/factionsecurity/faction","commit_stats":{"total_commits":239,"total_committers":4,"mean_commits":59.75,"dds":"0.012552301255230103","last_synced_commit":"e91934c645129f69a9de711a73c9240f0755d7a5"},"previous_names":["factionsecurity/faction"],"tags_count":100,"template":false,"template_full_name":null,"purl":"pkg:github/factionsecurity/faction","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/factionsecurity%2Ffaction","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/factionsecurity%2Ffaction/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/factionsecurity%2Ffaction/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/factionsecurity%2Ffaction/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/factionsecurity","download_url":"https://codeload.github.com/factionsecurity/faction/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/factionsecurity%2Ffaction/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30375579,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-11T06:09:32.197Z","status":"ssl_error","status_checked_at":"2026-03-11T06:09:17.086Z","response_time":84,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["application-security","hacking","penetration-testing","penetration-testing-tools","pentesting","reporting","security","security-audit","security-automation","security-report","security-reporting","security-tools","security-vulnerability"],"created_at":"2025-02-12T14:01:32.363Z","updated_at":"2026-03-11T08:05:37.446Z","avatar_url":"https://github.com/factionsecurity.png","language":"Java","readme":"# OWASP - FACTION PenTesting Report Generation and Collaboration Framework\n\n ![GitHub last commit](https://img.shields.io/github/last-commit/factionsecurity/faction) ![GitHub Release Date - Published_At](https://img.shields.io/github/release-date/factionsecurity/faction) [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/10120/badge)](https://www.bestpractices.dev/projects/10120)\n\n[![](https://img.shields.io/badge/null0perat0r-it?style=flat-square\u0026logo=mastodon\u0026labelColor=white\u0026color=white\u0026link=https%3A%2F%2Finfosec.exchange%2F%40null0perat0r)](https://infosec.exchange/@null0perat0r)\n[![Bluesky](https://img.shields.io/badge/Bluesky-0285FF?logo=bluesky\u0026logoColor=fff)](https://bsky.app/profile/factionsecurity.com)\n\n___Faction is now an OWASP Project! You can find more information [here](https://owasp.org/www-project-faction/)___\n\n![image](https://github.com/factionsecurity/faction/assets/2343831/d9237bed-302f-4e6a-9716-22ae88d0dc36)\n\n## Sponsors\n### Premium Sponsors \n\n\u003ctable style=\"background:white\"\u003e\n \u003ctr\u003e\n \u003ctd align=\"center\"\u003e\n \u003ca href=\"https://www.otto-js.com\"\u003e\u003cimg style=\"width:100px; margin-right:30%; margin-left: 30%\" src=\"https://www.otto-js.com/assets/otto-blue-logo.jpg\"/\u003e\u003c/a\u003e\u003cbr/\u003e\u003ca href=\"https://www.otto-js.com\"\u003eotto-js - PCI and Client Side Security\u003c/a\u003e \n \u003c/td\u003e\n \u003ctd align=\"center\"\u003e\n \u003ca href=\"https://secninjaz.com/\"\u003e\n\u003cpicture\u003e\n  \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"backers/white-horizontal.svg\"\u003e\n  \u003csource media=\"(prefers-color-scheme: light)\" srcset=\"backers/black-horizontal.svg\"\u003e\n  \u003cimg alt=\"SecNinjaz Technologies LLP\" src=\"backers/Secninjaz+Logo+with+outline+01.svg\" style=\"padding-bottom:25px; margin-top:30px\"\u003e\n\u003c/picture\u003e\n \u003c/a\u003e\u003cbr/\u003e\u003ca href=\"https://secninjaz.com/\"\u003eSecninjaz Technologies LLP\u003c/a\u003e \n \u003c/td\u003e\n \u003c/td\u003e\n \u003c/tr\u003e\n\u003c/table\u003e\n\n### Become a Sponsor ❤️\nIf you like the project and would like to see it advance then consider being a sponsor. All sponsors get access to the Faction discord server and will have bug reports prioritized. Just click the sponsor links at the top of this repo or contact us at info[at]factionsecurity.com\n\n### Community, Getting Involved, and Updates\n[Join the OWASP Slack Community](https://owasp.org/slack/invite) and and follow #project-faction! Be sure to follow us on [BlueSky](https://bsky.app/profile/factionsecurity.com) and our [Blog](https://medium.com/@we-are-faction) to get the latest updates.\n\n\n### Contributing\nPlease see our [contributing guidelines](CONTRIBUTING.md) for details and standards on contributing before considering or submitting a pull request.\n\n# Introduction\n\nFACTION is your entire assessment workflow in a box. With FACTION you can:\n1. Automate pen testing and security assessment Reports\n1. Peer review and track changes for reports\n1. Create customized DOCX templates for different assessment types and retests\n3. Real-time collaboration with assessors via the web app and [Burp Suite Extensions](https://github.com/factionsecurity/Faction-Burp)\n4. Customizable vulnerability templates with over 75 prepopulated\n5. Easily manage assessment teams and track progress across your organization\n6. Track vulnerability remediation efforts with custom SLA warnings and alerts  \n7. Full Rest API to integrate with other tools                     \n\nOther Features:           \n1. LDAP Integration       \n1. OAUTH2.0 Integration\n1. SMTP integration \n1. Extendable with Custom Plugins similar to Burp Extender.\n2. Custom Report Variables\n\n__Want to see it in action?__ -\u003e [Faction YouTube Channel](https://www.youtube.com/@factionsecurity/videos)\n\n## Quick Setup\n__Requirements__\n- Java JDK11 \n- Maven (for building the project)\n- (Optional for VM). Mongo DB requires a CPU with AVX support. You may run into this issue if using [Oracle Virtual](https://www.mongodb.com/community/forums/t/could-not-start-mongodb-5-0-running-oracle-linux-on-virtualbox/120524/10) Box or [Kubernetes](https://stackoverflow.com/questions/70818543/mongo-db-deployment-not-working-in-kubernetes-because-processor-doesnt-have-avx)\n\nRun the following commands to build the war file and deploy it to the docker container. \n```\ngit clone git@github.com:factionsecurity/faction.git\ncd faction\ndocker-compose up --build\n```\n\nOnce the containers are up you can navigate to http://127.0.0.1:8080 to access your FACTION instance. \nOn the first boot, it will ask you to create an admin account. \n\n## Import the Vulnerability Templates\n1. Navigate to Templates -\u003e Default Vulnerabilities\n2. Click Update from Faction. \n\n## Customize reports\nYou can find out more information about creating your own custom report templates here:\n[Custom Security Report Templates - Faction Security](https://docs.factionsecurity.com/Custom%20Security%20Report%20Templates/)\n\n## Burp Suite Extension\n[Burp Suite Extensions](https://github.com/factionsecurity/Faction-Burp)\n\n## Manuals and Tutorials\n[Manual](https://docs.factionsecurity.com/)\n\n## Don't want to host it yourself?\nWe can provide hosting for your instance. All instances are single tenants so you don't have to worry about sharing infrastructure with untrusted parties. Navigate to [https://www.factionsecurity.com to learn more](https://www.factionsecurity.com). \n\n\n## Screenshots\n__Vulnerability Templates__\n![image](https://github.com/factionsecurity/faction/assets/2343831/b6fa6a0b-34a9-46cf-87cb-6aeb2b5d3347)\n\n__Assessment Scheduling__\n![image](https://github.com/factionsecurity/faction/assets/2343831/7410f74e-3854-41e9-843f-7ca44d79cc54)\n\n\n__Peer Review and Track Changes__\n![image](https://github.com/factionsecurity/faction/assets/2343831/fa72a72b-2c95-4c2c-bad1-5b34aab7fd13)\n\n\n__Remediation/Retest Queue__\n![image](https://github.com/factionsecurity/faction/assets/2343831/31a576a7-8cee-4b41-9a72-52eccec8d3d8)\n\n__Schedule Retests__\n![image](https://github.com/factionsecurity/faction/assets/2343831/421a9150-96a8-4ce8-ba06-061562012c16)\n\n__Assessor Retest Interface__\n![image](https://github.com/factionsecurity/faction/assets/2343831/11421c1f-63db-44e2-a692-a3918ddbf2ac)\n\n__Vulnerability Status Tracking__\n![image](https://github.com/factionsecurity/faction/assets/2343831/a1973dba-663c-4617-bd78-ffb08eb27973)\n\n# 1.2 Release Updates\n\nFaction 1.2 introduces the App Store! The Faction App Store will make it easier for developers to extend faction. Faction Extensions can be used to trigger custom code when certain events happen in your workflow like sending all vulnerbilities to Jira when the assessment is complete or update a tracking system when retests pass or fail. More information can be found in the [documentation site](https://docs.factionsecurity.com). \n\n### ⭐️ Jira Integration and AppStore Dashboard\n![image](https://github.com/factionsecurity/faction/assets/2343831/53feb37e-cc66-401c-9ef0-e43fd4dc9f51)\n\nNote you can reorder extensions so that updates for one can affect updates to the next. \n\n### ⭐️ Extensions for Custom Graphics\nExtensions will also allow custom bar charts to your reports:\n![image](https://github.com/factionsecurity/faction/assets/2343831/1657ed40-fdd3-4b29-afd3-b5d3aa8f78c5)\n\nGenerated report with graphics:\n![image](https://github.com/factionsecurity/faction/assets/2343831/abf9b5d4-2638-411d-a57c-89fcd5819976)\n\n\n\n\n\n\n","funding_links":["https://github.com/sponsors/factionsecurity","https://patreon.com/null0perat0r","https://opencollective.com/faction"],"categories":["6. [↑](#-content) Utility \u0026 Miscellaneous","security-tools","JavaScript"],"sub_categories":["6.1 [↑](#-content) Utility"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffactionsecurity%2Ffaction","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffactionsecurity%2Ffaction","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffactionsecurity%2Ffaction/lists"}