Product Introduction

TestNet is a distributed asset management and automated security scanning platform designed for enterprise security teams. It helps you systematically discover, manage, and monitor network assets, while continuously tracking changes and security risks through automated workflows.

Core Capabilities

Cascading Asset Graph Engine

TestNet incorporates 8 core asset models spanning organizational entities (Companies, Domains), network infrastructure (Subdomains, IPs, Ports), and application/risk surfaces (Web Sites, API Endpoints, Vulnerabilities). Our automated resolution engine builds a unified attack surface topology from root targets down to high-risk CVEs. For schema details, see: Asset Graph Models.

Visual Workflow Orchestration

Create automated scan workflows via a Visual DAG Editor:

• Manual Trigger: Run scan tasks on-demand
• Scheduled Trigger: Periodically execute scans based on Cron expressions
• Asset Linkage: Automatically trigger scans when new assets are discovered

Distributed Scanning Architecture

• Lightweight Client: Single binary without external dependencies, supporting Linux/macOS/Windows
• Flexible Execution: Supports Docker containers, Shell commands, HTTP requests, DNS queries, and TCP probing
• Elastic Scaling: Supports parallel execution across multiple nodes, adding or removing nodes as needed

AI Agent & MCP Penetration Platform

• Model Context Protocol (MCP) Standard: Seamless integration with external AI Agents such as Claude Code, Cursor, and Windsurf via standard SSE and JSON-RPC 2.0 transports
• 14 Core Facade MCP Tools: Each tool covers a complete business domain through an action parameter — panoramic queries across 8 asset types, workflow scheduling, streaming console logs, cyberspace search, vulnerability lifecycle, access control matrix testing, and HTTP penetration tooling (57 legacy atomic tool names remain backward-compatible)
• Engagement & Traffic Audit: End-to-end HTTP request audit capture with HAR 1.2 export, decision reasoning tree tracking, and persistent Markdown scratchpad memory

Rich Tool Ecosystem

24 built-in security tools covering reconnaissance, scanning, and vulnerability detection stages:

Reconnaissance Tools (Recon)

• Subfinder — Passive subdomain discovery
• Amass — Active subdomain enumeration
• OneForAll — Comprehensive subdomain collection
• DNS-Lookup — Query DNS records
• Dnsx — High-performance bulk DNS resolver
• Gau — Retrieve historic URLs
• Waybackurls — Extract URLs from Wayback Machine
• Katana — Web crawler and link extraction
• 0.zone — Enterprise asset mapping (query root domains + ICP by company name)

Scanning Tools (Scan)

• HTTP Probe — Built-in HTTP prober (no Docker required)
• Httpx — HTTP probing and info gathering
• Httpx-Screenshot — Web page screenshots
• Naabu — Port scanning
• Masscan — High-speed port scanning
• Nmap — Service and version identification
• TCP-Check — TCP port probing
• Dirsearch — Directory brute-forcing
• Ffuf — Web fuzzing tool

Vulnerability Detection (Vulnerability)

• Nuclei — Template-based vulnerability scanning
• Sqlmap — SQL injection detection
• Subzy — Subdomain takeover detection
• Trufflehog — Sensitive information leak scanner

Fingerprinting (Utility)

• Wappalyzer — Web technology fingerprinting
• Whatweb — Web application identifier

System Architecture

┌─────────────────────┐
│   Web Admin Interface  │
│   Vue 3 + Naive UI    │ :3100
└──────────┬──────────┘
           │ HTTPS / WebSocket
┌──────────▼──────────┐
│   Backend API           │
│   Spring Boot 3.4     │ :8081
└──┬──────┬──────┬────┘
   │      │      │
┌──────┐ ┌─▼──┐ ┌─▼──────────┐
│  PG  │ │Redis│ │ Go Scan Nodes │
│  16  │ │  7  │ │  (Multi-node) │
└──────┘ └─────┘ └──────────────┘

Use Cases

• Asset Discovery: Regularly scan to automatically find new subdomains, IPs, ports, and Web applications.
• Continuous Monitoring: Track asset changes and trigger scan workflows on new findings.
• Vulnerability Management: Automatically archive vulnerability scan results and track fix statuses.
• Security Inspection: Run regular compliance scan workflows to assess security state.
• Cyberspace Search Integration: Consolidate data from FOFA, Shodan, etc., to enrich asset sources.

Next Steps

• Quick Start — Perform your first login and scan in 5 minutes
• Dashboard — The first screen after sign-in: risk posture and asset inventory
• Asset Management — Learn how to manage enterprise assets
• Workflows — Create your first scanning workflow
• Deployment Guide — Deploy production environment with Docker compose