Mageni – Open Source Vulnerability Scanner based on Laravel

Introduction

Mageni eases for you the vulnerability management cycle. We believe cybersecurity must be an enjoyable and uplifting experience to be truly fulfilling in your life. Mageni empowers you to identify, prioritize, and respond to vulnerabilities and misconfigurations before they are exploited by hackers. Mageni takes the discomfort and pain out of cybersecurity by easing simple tasks for vulnerability management, such as:

• Asset Discovery
• Prioritize Assets
• Vulnerability Scanning
• Vulnerability Assessment
• Reporting
• Remediation
• Vulnerability Prioritization
• Vulnerability Validation
• Compliance Testing (PCI DSS, NIST, HIPAA, ISO, NERC, FISMA, NIS)
• Penetration Testing
• Security Audits
• And more …

Mageni is accessible, powerful, and will save you time, money, and resources while reducing the risk of non compliance, financial losses, fines, and security breaches. This is what it currently looks like:

Vulnerability Management Statistics

• 60% of breach victims were breached due to an unpatched known vulnerability (Ponemom Institute)
• 62% were unaware that they were vulnerable prior to the data breach (Ponemom Institute)
• $4.24 million cost per data breach on average; highest in 17-year report history (IBM)

Mission

Mageni’s mission is to make your life more enjoyable and peaceful by providing you with a wonderful vulnerability management platform.

Vision

We envision a world where cybersecurity and vulnerability management is an enjoyable and uplifting experience that is truly fulfilling in your life.

What is the Vulnerability Management Cycle?

The Vulnerability Management Cycle is intended to allow organizations and individuals to identify and assess computer system security weaknesses; prioritize assets; assess, report, and remediate the weaknesses; and verify that they have been eliminated. Mageni automates for you the Vulnerability Management Cycle saving you time, money, and resources, and helps you to comply with security standards like PCI DSS, NIST, and others.

Here you can see the Vulnerability Management Cycle according to Gartner:

Mageni takes the pain out of the vulnerability management cycle by easing those tasks.

Audience

• PenTester
• Cybersecurity Professionals
• SOC Analyst
• Chief Information Security Officer
• Security Researchers
• Auditors
• Red Team
• Malware Analyst
• Business owners
• System Administrators
• Developers
• And anyone concerned about cybersecurity and vulnerabilities

Installation

Linux

1. Download Multipass

sudo snap install multipass

2. Launch a multipass instance

multipass launch -c 2 -m 6G -d 20G -n mageni 20.04 && multipass shell mageni

3. Install Mageni

curl -sL https://www.mageni.net/installation | sudo bash

macOS

1. If you don’t have it already, install Brew. Then, to install Multipass simply execute:

brew install --cask multipass

2. Launch a multipass instance

multipass launch -c 2 -m 6G -d 20G -n mageni 20.04 && multipass shell mageni

3. Install Mageni

curl -sL https://www.mageni.net/installation | sudo bash

Windows

1. Download the Multipass installer for Windows

Note: You need Windows 10 Pro/Enterprise/Education v 1803 or later, or any Windows 10 with VirtualBox

2. Ensure your network is private

Make sure your local network is designated as private, otherwise Windows prevents Multipass from starting.

3. Run the installer

You need to allow the installer to gain Administrator privileges.

4. Launch a multipass instance

multipass launch -c 2 -m 6G -d 20G -n mageni 20.04

5. Log into the multipass instance

6. Install Mageni

curl -sL https://www.mageni.net/installation | sudo bash

Sponsorship

We love working on Mageni and give it to you without expecting anything in return. We find great joy in providing you with the best foundation for your vulnerability management program as we possibly can. However, if you choose to show your appreciation by sponsoring this project, know that we are deeply appreciative.

10% of the proceeds go towards reducing climate change on earth and 90% go to funding the infrastructure and full-time staff working on new features, bug fixes, and improvements.

• Are you using Mageni for your personal projects and side projects and really enjoying it? The sponsorship tier Enthusiast gives you the chance to give back.
• Has Mageni reinvigorated your love for cybersecurity? The sponsorship tier Lover gives you the chance to give back.
• Has Mageni helped you in your career and made your cybersecurity experience more enjoyable? The sponsorship tier Professional gives you the chance to give back.
• Has Mageni helped your small business (less than 100 employees)? The sponsorship tier Small Business gives you the chance to give back.
• Has Mageni helped your medium business (less than 500 employees)? The sponsorship tier Medium Business gives you the chance to give back.
• Has Mageni helped your organization (more than 500 employees)? The sponsorship tier Organization gives you the chance to give back.
• Has Mageni helped your MSP? The sponsorship tier MSP gives you the chance to give back.

Benefits of Sponsorship

• Access to the private issues repository
• Access to the private discusion board
• Priority support to fix bugs
• Your feature request will be a top priority
• You have an active role in preserving the software that you use

CompTIA PenTest+ Certification

Mageni is developed by certified CompTIA PenTest+ Professionals. CompTIA PenTest+ is for cybersecurity professionals tasked with penetration testing and vulnerability management, is compliant with ISO 17024 standards and approved by the US DoD.

Mageni helps to reduce climate change

Mageni is a member of the Stripe Climate and contributes 10% of your sponsorship to reduce climate change.

With your sponsorship you are making this world a better place for both present and future generations.

Contributing

You can also contribute with:

• Bug reports
• Features request

For more information, read the contribution guide

Thank you, open source

Mageni uses a lot of open source projects and we thank them with all our hearts. We hope that providing Mageni as an free, open source project will help other people the same way those softwares have helped us and in doing so Mageni is also in strict compliance with the open source licenses. In this repository you will find the Software Bill of Materials (SBOM). This website has the list of all open source software that Mageni uses and their respective copyrights. If you believe that we are missing something, drop us an email to opensource@mageni.net and ASAP we will fix it.

Please note that Mageni does not sells the open source software. This software is, and always will be, free and open source.

License

Mageni is released under the GPLv2 license

Legal

This open source software is provided solely for lawful purposes and use. You must use the software in a manner that complies with all applicable national, federal, state and local laws, statutes, ordinances, regulations, codes and other types of government authority.