GitHub - oktaybilge1/mangudai-overview · GitHub

/" data-turbo-transient="true" />

Skip to content

Type / to search

Sign in<br>Sign upAppearance settings

You signed in with another tab or window. Reload to refresh your session.<br>You signed out in another tab or window. Reload to refresh your session.<br>You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

{{ message }}

oktaybilge1

mangudai-overview

Public

Notifications<br>You must be signed in to change notification settings

Fork

Star

main

BranchesTags

Go to file

CodeOpen more actions menu

Folders and files<br>NameNameLast commit message<br>Last commit date<br>Latest commit

History<br>3 Commits<br>3 Commits

screenshots

screenshots

README.md

README.md

View all files

Repository files navigation

🛡️ Mangudai Attack Surface Management (ASM) Platform

Mangudai ASM is a comprehensive, multi-tenant External Attack Surface Management (EASM) and Vulnerability Management SaaS platform. It continuously discovers, audits, and monitors external-facing digital assets (subdomains, open ports, web applications, SSL certificates, email records) to assess organization-level risk scores and identify critical vulnerabilities.

Note<br>This repository is a Public Documentation & Showcase Hub for the Mangudai ASM platform. The core commercial source code (Go microservices & Next.js frontend) remains proprietary and private. For inquiries or live access, visit mangudai.io.

📐 System Architecture

Mangudai ASM is built as a highly scalable microservice system utilizing a decoupled REST API and an asynchronous background worker queue.

B[Go Gin REST API]<br>A -- WebSockets --> B<br>B -- Read/Write --> C[PostgreSQL 15]<br>B -- Queue Jobs --> D[Redis 7 Queue]<br>D -- Poll Tasks --> E[Go Worker Engine]<br>E -- Active Probes --> F[Nmap / Subfinder / Nikto]<br>E -- Passive Probes --> G[SSL / SPF / DMARC Audits]<br>E -- Write Findings --> C<br>H[Go Scheduler Cron] -- Lock/Sync --> D<br>H -- Trigger Scans --> B<br>" dir="auto">

graph TD<br>A[Next.js Frontend] -- REST API --> B[Go Gin REST API]<br>A -- WebSockets --> B<br>B -- Read/Write --> C[PostgreSQL 15]<br>B -- Queue Jobs --> D[Redis 7 Queue]<br>D -- Poll Tasks --> E[Go Worker Engine]<br>E -- Active Probes --> F[Nmap / Subfinder / Nikto]<br>E -- Passive Probes --> G[SSL / SPF / DMARC Audits]<br>E -- Write Findings --> C<br>H[Go Scheduler Cron] -- Lock/Sync --> D<br>H -- Trigger Scans --> B

Loading

Components Summary:

Frontend: React / Next.js (App Router) styled with high-fidelity Vanilla CSS, using framer-motion for fluid dashboard animations and lucide-react for responsive iconography.

Backend API: Go (Gin Gonic) server handling multi-tenant authorization, project/target configuration management, JWT authentication, stripe billing integration, and WebSocket-based live progress synchronization.

Scan Worker Engine: A Go daemon polling Redis task channels to execute high-performance concurrent security scans, coordinating CLI binary wrappers (nmap, subfinder, nikto) and native network probes.

Scheduler Service: A Go container managing recurring automated checks for domain configurations (SSL expiry, DNS drift, and leaked credentials).

Data Layer: PostgreSQL 15 stores team/user accounts, targets, scan historical logs, and vulnerabilities. Redis 7 handles distributed worker locks, task queues, and API rate-limiting tokens.

🛠️ The 9 Scan Engine Modules

Mangudai ASM features an orchestrator (worker.go) that spawns concurrent analysis threads in a goroutine pool. Based on the tenant's plan quotas, the following 9 modules execute:

Subdomain Discovery (Module 1 - Passive)

Maps the external DNS attack surface using integrations like subfinder to discover active subdomains and target hosts.

Port Scanning & Service Fingerprinting (Module 2 - Active)

Leverages custom nmap TCP parameters to find open ports and identify active system services.

Web Probing (Module 3 - Active)

Probes HTTP/HTTPS ports to analyze web technologies, server types, and framework versions.

Security HTTP Header Audit (Module 4 - Active)

Evaluates HTTP security headers (CSP, HSTS, X-Frame-Options, Permissions-Policy) to identify missing protective controls.

Sensitive File & Directory Leakage Scanner (Module 5 - Active)

Scans for exposed project structures, environment configurations (.env, .git), code backups, and database dumps.

SSL/TLS Certificate Inspection (Module 6 - Passive)

Audits SSL/TLS cipher strength, expiry dates, and issuer validation records to avoid domain downtime or man-in-the-middle risks.

Email Security Auditing (Module 7 - Passive)

Audits DNS-level email validation configurations (SPF, DKIM, DMARC) to prevent spoofing and domain reputation hijacking.

Nikto Web Vulnerability Scanning (Module 8 - Active)

Spawns nikto wrappers to detect outdated server modules, default CGI paths, and cross-site scripting (XSS) vectors.

SQLi / XSS Canary Probing (Module 9 - Active)

Executes native active payloads to identify raw SQL Injection (SQLi) and client-side...