Recon Automation


product security teams bug bounty hunters

🤔 Use-Case

I want to:

  • automate the entire process of asset discovery, reconnaissance, and vulnerability scanning
  • store relevant details with contextual information in a database and retrieve them at any time
  • schedule scans and set up alerts

😃 Feature

Mantis automates the entire process from discovery to scan and stores organization and application-based context in a MongoDB database.

The framework also provides easily customizable alerting capabilities with no code changes required.

Automation Overview

Mantis

Mantis is capable of understanding top-level domain, IP, IP-CIDR, IP Range or even subdomains as user input

  • Discovery module efficiently enumerates top-level domains provided as user input to identify subdomains
  • Reconnaissance module fetches crucial and relevant information about assets required for vulnerability scanning
  • Scan module is designed to identify misconfigurations and vulnerabilities