Welcome to mantis Discussions!

[santanusinha]

👋 Welcome!

We’re using Discussions as a place to connect with other members of our community. We hope that you:

• Ask questions you’re wondering about.
• Share ideas.
• Engage with other community members.
• Welcome others and are open-minded. Remember that this is a community we
  build together 💪.

To get started, comment below with an introduction of yourself and tell us about what you do with this community.

[0xbharath]

Hi folks,

This is Bharath. I'm one of the developers of Mantis. My area of interests include AppSec and Attack Surface Management (ASM).

As part of Mantis, I helped with the ASM flows and installation scripts.

Happy to help folks with Mantis and discuss new ideas!

[Prateek-Thakare]

Hey there!!
I am Prateek. I'm also one of the developers of Mantis. Feel free to request any feature or raise any issue. I'll be able to help you with new tool integrations and anything related to Mantis.

[wisdomfreak-1]

Hi folks,

This is Saddam. I'm also one of the developer of Mantis. I'll be able to help you with Dashboard, tools integrations.

Happy to help folks with Mantis and discuss new ideas!

[vancong160202]

How can I use Mantis to detect sql injection and xss vulnerabilities in my website? Can you make a video tutorial?

[0xbharath]

@vancong160202 Mantis is intended to be an Attack Surface Management framework rather than a web app vulnerability scanner. All the tools we have included so far help enumerating attack surface, finding low hanging security issues and known security issues.

However, it is relatively easy to integrate tools into Mantis for your own workflows and make it work similar to a web app vulnerability scanner.

[vancong160202]

Can you guide me to integrate tools into Mantis to scan for web vulnerabilities such as sql injection, xss...? I think when integrated, Mantis will have more applications and will be a useful framework

[0xbharath]

@vancong160202 Thank you for considering contributing to Mantis.

@Prateek-Thakare would be of better help here regarding code contributions.

Ideally, can you start a discussion under "Contribution" regarding this https://github.com/PhonePe/mantis/discussions/categories/contribution

Try to mention the following in the discussion:

• Tool(s) you'd like to see integrated
• What will these tool(s) find and how would they help

[Prateek-Thakare]

@vancong160202 If you want to integrate tools you can refer integration doc: https://phonepe.github.io/mantis/new-scanner-integrations/new-scanner-integration.html. Feel free to reach out if you face any difficulties.

[vancong160202]

Thank you for helping me add tools in Mantis
However, when I scan the website, it cannot scan with 0% efficiency

I tried running the separate Nuclei module and it said Could not load template
So I downloaded nuclei-templates

but when running again Could not find template

Here is the vulnerable site I am trying to scan (http://demo.owasp-juice.shop/#/) Can you use Mantis to scan for that web vulnerability and give me the results? and please show me how to do it.
Best regards, thank you.