Skip to content

Workflow Overview

Workflows are the automation core of TestNet, orchestrating multiple tools through DAG (Directed Acyclic Graph) to achieve end-to-end automated asset discovery and security scanning.

Core Concepts

Workflow

A workflow consists of a series of nodes connected through dependency relationships and data flows, forming a directed acyclic graph (DAG).

[Subfinder] → [Httpx] → [Nuclei]
      ↘                 ↗
       [Amass] → [Dnsx]

Node

Each node corresponds to a tool invocation, which can be configured with:

  • Input sources (from upstream node outputs or external inputs)
  • Parameter overrides (modify tool default parameters)
  • Timeout and retry strategies

Trigger Types

TypeDescription
Manual TriggerUser manually executes, requires selecting input assets
Cron ScheduleAutomatically executes on a regular schedule via Cron expression
Auto TriggerAutomatically triggered when new assets are created (asset linkage)

Workflow Lifecycle

Draft → Enabled → Running → Completed

           Disabled (pauses cron/auto triggers)

Preset Workflows

The TestNet tool store provides 8 preset workflows that can be installed and used directly:

WorkflowDescriptionUse Case
Domain Recon PipelineSubdomain discovery + web probingComprehensive domain asset discovery
Full Asset DiscoveryComplete chain from company to vulnerabilityNew project initial scan
Port Scan WorkflowIP port discovery + service identificationIP asset port scanning
Web Attack Surface ProbingWeb application information collectionWeb asset inventory
IP Deep InventoryIP port service comprehensive scanningIP asset deep scanning
Subdomain Takeover MonitoringPeriodic takeover risk detectionContinuous monitoring
Deep Asset MonitoringPeriodic asset change monitoringScheduled monitoring
Full Auto ScanFull process automationComprehensive scanning

Quick Start

Install Preset Workflow

  1. Go to "Workflows" → "Workflow List"
  2. Click "Store"
  3. Select "Domain Recon Pipeline" → "Install"

Execute Workflow

  1. Find the installed workflow in the workflow list
  2. Click "Execute"
  3. Select input assets (e.g., target domain)
  4. Click "Confirm Execution"

View Execution Results

  1. Go to "Task Management"
  2. View the tool tasks generated by the workflow
  3. After tasks complete, view discovered assets

Released under the MIT License