New in Faction, the open-source pentest reporting tool: themable code blocks, Mermaid attack diagrams, and content templates that automate report writing.

We're heading back to Black Hat SecTor Arsenal on October 8th to demo OWASP Faction 2.0 live. Come say hi, grab some stickers, and tell us what would make your reporting workflow better.

OWASP Faction is open source penetration testing management software. Automate pentest reporting from DOCX templates, write findings with AI, collaborate as a team, and track vulnerability remediation...

YouTube video by Faction Security - Automate Pentest Reporting

We are so excited to be releasing OWASP Faction 2.0 at BlackHat Arsenal 2026!!! 🎉👾. This is a major update to our existing opensource pentesting collaboration platform. If you do a lot of pentesting ...

Your workflow shouldn’t slow you down when you’re already juggling assessments, client deadlines, and a team that needs answers fast. Over…

YouTube video by Faction Security - Automate Pentest Reporting

Pen Test Report Generation and Assessment Collaboration - factionsecurity/faction

I just got back from speaking at PhreakNic 26 where I vibe coded a GitHub Faction Extension live while also speaking about my many…

I know this post is kind of late, but I’m just now getting around to posting about my Black Hat USA 2025 and SECTOR 2025 Arsenal…

For Enterprise Penetration Testing teams and Security Consulting Firms managing dozens — or hundreds — of assessments simultaneously…

Pen Test Report Generation and Assessment Collaboration - factionsecurity/faction

Automate PenTest Reporting and AppSec Posture Management (ASPM) for penetration testers, red teams, and application security teams.

If you have been doing penetration testing for any length of time, you probably have a personal database of vulnerability descriptions…

This is a useful Python script for generating a target specific wordlist for fuzzing backup files. - Spix0r/fback

YouTube video by DEFCONConference

YouTube video by Anchore

Building an Appsec Program from Scratch In today's digital landscape, application security is crucial for safeguarding sensitive data and maintaining user trust. Without a robust AppSec program, or with one poorly implemented, chaos can ensue, leading to vulnerabilities and breaches. This talk explo

Faction is an open-source security assessment collaboration framework designed to streamline and enhance your security workflows. With…

Other Western democracies have been roiled by the use of spyware to target political opponents, activists, journalists, and other vulnerable groups. Could it happen here?

Cybercriminals have devised a novel method to cash out from stolen credit card details linked to mobile payment systems such as Apple Pay and Google Pay, dubbed 'Ghost Tap,' which relays NFC card data...

The open source funding problem is very real, but a slew of initiatives have emerged of late, with startups, corporations, and venture capitalists launching various programs to support some of the most critical projects via equity-free financing. Today…

A Very Vulnerable Node.js Express.js Web Application and API. Used for testing Security tools, Application security and penetration testing. Using Swagger, Sqlite, Sequelize. - SirAppSec/vuln-node....

Spotify playlists and podcasts are being abused to push pirated software, game cheat codes, spam links, and "warez" sites. By injecting targeted keywords and links in playlist names and podcast descri...

Automate PenTest Reporting and Enable Collaboration for Penetration Testers, Red Teams, and Application Security Teams.

Pen Test Report Generation and Assessment Collaboration - factionsecurity/faction

EMERALDWHALE is an operation targeting exposed Git configurations, resulting in more than 15,000 cloud service credentials stolen.

Make your first post to the Bluesky app via the API in under 5 minutes.