Faction Security

Come see OWASP Faction at SecTor Arsenal 2026 in Toronto! blog.factionsecurity.com/blog/see-you... #pentesting #appsec #cybersecurity #vulnerabilitymanagment #blackhat #sector #owasp

We just released some new pentesting reporting features into OWASP Faction! #pentest #appsec #owasp #redteam #cybersecurity #pentesttools blog.factionsecurity.com/blog/themabl...

🎉 OWASP is 25! Celebrate with us! 🎁 Join OWASP in the next 25 days and get 1 FREE year's individual membership to gift to a friend. More people, more knowledge, more AppSec! 🔐 One membership. Twice the impact. bit.ly/OWASPBringaFr... #OWASP25 #AppSec #opensource

Our new #OWASP Faction Documentation portal is up! docs.factionsecurity.com #appsec #pentesting #aspm #redteam #vulnerabilitymanagement

Stop Writing Pentest Reports By Hand - Use Custom AI Prompts in OWASP Faction 2.0 #pentest #owasp #appsec #infosec #cybersecurity www.youtube.com/watch?v=d4nG...

Thanks everyone for coming out to my OWASP Faction Talk at BlackHat Arsenal. It’s was amazing meeting everyone! #cybersecurity #owasp #pentesting #blackhat #bhusa26 #appsec #redteam

✨We just made some important updates to the Faction Enterprise and Consulting platforms 🚀✨ These features help streamline pen testing and provide better integration with SSO. FACTION Enterprise 1.8.9 — Multi-Format PenTest Reports, Encrypted PDFs, and Faster SSO medium.com/@we-are-fact...

OWASP Faction now has and MCP server! 🚀 It's really cool all the ways you an integrate agentic tools like OpenCode into you #pentesting workflow and automate reporting. Check out our video: www.youtube.com/watch?v=gxTG... #mcp #aicybersecurity #appsec #pentesting #redteam #llms #opencode #claude

We just released Faction1.74!! 🧨 which has several improvements you’ve been asking for, like faster report generation and extra visibility features. #appsec #pentesting #redteam #vulnerability github.com/factionsecur...

Did you know you how easy it is to integrate your #pentest reporting into any other system, like GitHub or JIRA. We'll show you how you can vibe code your assessments using Faction Extensions! #appsec #pentesting #cysbersecurity #owasp #redteam #hacking we-are-faction.medium.com/vibe-coding-...

I just did a quick post about my #blackhat and #sector arsenal experiences this year. #opensource #bh2025 #sector2025 medium.com/@we-are-fact...

We just released OWASP Faction 1.7 with lots of new features and bug fixes to help automate manual penetration testing and make reporting even easier. we-are-faction.medium.com/owasp-factio... #pentesting #cybersecurity #applicationsecurity #redteam #hacking #appsec #owasp

About to present Faction at SecTor Arsenal at 4 eastern. Hope to see you there. #appsec #blackhat #sectorca #redteam.

Lots of new things coming to Faction 2.0 Very Soon. We are excited to share a little preview. Follow us for more updates. #pentesting #appsec #redteam #hacking #vulnerabilitymanagement

I'm excited to be presenting at SecTor Arsenal! I'll be demoing OWASP Faction, an open source pen-testing collaboration framework. Hope to see you there! #SECTORCA #appsec #owasp #cybersecurity #blackhat #pentesting

Great views from the level up party last night. #blackhat2025 #blackhat.

Greetings from BlackHat 2025! If you’re attending this year come check out my talk on OWASP Faction, Thursday at noon - Arsenal station 3! #pentesting #owasp #hacking #blackhat2025 #redteam #appsec

#BlackHat Arsenal was awesome!!! 🎉🎉🎉🍺🍺🍺Thanks to all that came to my talk. I forgot to bring stickers with me but will be giving them out at #Defcon. Look for them in the usual spots or DM me. #owasp #appsec #redteam #pentesting @factionsecurity.com

🎉 I'm excited to be presenting Faction at BlackHat Arsenal 2025! 🚀 Come by Thursday Aug 7th 12-12:55 am to see what Faction can do for you and get some STICKERS!!! #hacking #pentesting #blackhat #BH2025 #appsec www.blackhat.com/us-25/arsena...

🎉 Faction 1.6 is Here — Powerful New Features for Open Source and Enterprise Users Lots of updates that brings major improvements that make #pentest reporting more flexible and tailored to your needs. docs.factionsecurity.com/blog/2025/07... #appsec #redteam #opensource #cybersecurity #hacking

🚀 OWASP Faction 1.5.2 is live! This is a major update with improvements to help you deliver more streamlined and professional assessments. What’s new? ✅ Checklist Improvements 🔐 SAML Authentication 📝 Better Markdown Handling github.com/factionsecur... #AppSec #Cybersecurity #OWASP #redteam

10 Burp extensions I actually use... BUT none of them are in the top 30 most popular in the BApp Store! I get tired of seeing the same extensions come up in "top 10" lists. Here are some hidden gems you might not have tried... yet. In no particular order. 🧵👇

Happy to announce that Faction is now an #OWASP Project!!! 🚀 #appsec #applicationsecurity #pentesting #vulnerability #cybersecurity #redteam #hacking owasp.org/www-project-...

It’s a new year and time to start the year off right by automating your manual #pentest with Faction. 🎉🍾💥 We got a lot of cool stuff planned for this year! We’ll be releasing more info in the coming months. Stay tuned! #appsec #redteam #hacking www.factionsecurity.com

Happy holidays from us at Faction Security!!! 🎄🤶🎁 Hope you get some downtime so you hack all the things next year! #cybersecurity

We just released Faction 1.4! 🚀 If you're currently using Enterprise or Teams versions, then you have already been upgraded 🎉 This release includes bug fixes in pentest report peer reviews and fixes several CVE's. Find out more: www.factionsecurity.com #appsec #redteam #hacking #cybersecurity

We published a blog post on how to automate boilerplate text in your #pentesting reports using the #opensouce security tool, Faction. Check out the link below! we-are-faction.medium.com/automate-pen... #appsec #infosec #redteam #pentest #hacking #hacking-tools #security-tools

I've developed a Python tool called Fback that generates wordlists for fuzzing backup files. It takes a JSON-based pattern file and a seed wordlist as input and produces a target-specific wordlist as output. Github: github.com/Spix0r/Fback #bugbounty #bugbountytools #cybersecurity

Hey #cybersecurity, we are building opensource tools to help streamline #pentesting assessments. We realize every company is different. We want to know where your pain points are and what would make your life as a #pentester easier. Reply or DM us your feedback. #infosec #appsec #redteam

Slashdot is now on Bluesky!

This was one of our favorite talks from #defon32. This is a really clever approach to getting SQL injection at the protocol level. #appsec #sqlinjection #hacking #applicationsecurity www.youtube.com/watch?v=Tfg1...

Happy thanksgiving for all that celebrate! 🦃

We're 🌟live🌟 in five, working on Open Source. 🌱 Join us with questions, comments & your important Syft & Grype bugs! 🐞 www.youtube.com/watch?v=hCRt... #sbom #opensource #security

Ready to level up your cybersecurity skills? 💻📈 Mireia Cano teaches us how to build an AppSec program at #WICCON2024! Level up here: www.youtube.com/watc... #CyberSecurity #WomenInTech

We got a story up on @medium.com! Learn out how to create your first #pentest report using Faction: we-are-faction.medium.com/how-to-autom... #appsec #redteam #informationsecurity #infosec #pentesting #ethicalhacking

Must read of the week: Ronan Farrow is looking at how governments (including the US) use spyware tech on individuals, activists, and journalists. www.newyorker.com/news/news-de...

When building your #pentest reports, Do you prefer CVSS scoring, critical/high/med/low, or something else to explain the severity of a finding? #appsec #infosec #redteam #infosec

Cybercriminals have devised a novel method to cash out from stolen credit card details linked to mobile payment systems such as Apple Pay and Google Pay, dubbed 'Ghost Tap,' which relays NFC card data to money mules worldwide. www.bleepingcomputer.com/news/securit...

GitHub launches $1.25M open source fund with a focus on security

Checkout my vulnerable web application, allows security teams to verify tools, educate developers and hone their skills! github.com/SirAppSec/vu...

Spotify playlists and podcasts are being abused to push pirated software, game cheat codes, spam links, and "warez" sites. www.bleepingcomputer.com/news/securit...

Oh hey #infosec! We have a Black Friday deal for you. If you signup for Faction Enterprise before Dec 1, you get 20% off for the first year no matter how big your team is. Faction will reduce your time writing #pentest reports by 70% or more. www.factionsecurity.com.

If you hate writing #pentest / #vulnerability reports then we have #securitytools for you! You can download Faction here: github.com/factionsecur.... We are looking for feedback. We want to make #pentesting easier and give you more time to hack! #cybersecurity #opensource #redteam #hacking

We've adding new features to our #pentest report plugins! Now you can customize report graphics to match your assessment style 🚀 . Check out Faction here: github.com/factionsecur... Chart plugin here: github.com/factionsecur... #appsec #infosec #cybersecurity #security

Internet of Things (IoT) platforms offer a complete set of tools and libraries for connecting to various #IoT devices, such as sensors, actuators, and gateways, and for managing these smart devices and their communication. Here are some available #opensource IoT platforms 😎👇 #smarthome

EMERALDWHALE, a large-scale global campaign exploiting exposed Git configurations. This sophisticated operation led to the theft of over 15,000 cloud service credentials and impacted more than 10,000 private repositories. #CyberSecurity #CloudSecurity #ThreatIntelligence

OMG, it's so easy!! 🤩 docs.bsky.app/docs/get-sta...