Kagin

Technical summary

Kagin (working name) is a complete infrastructure, cybersecurity and advanced OSINT tooling suite — the natural evolution of ZenDev. It is an authenticated web hub with more than 25 internal tools, an admin panel, a verified domains system, uptime monitoring with alerts and a distributed Main Server + Satellite Nodes (OCI) architecture executing edge tasks via its own Kagin Agent, with an official APT repository for agent distribution and automated hardening (CrowdSec + nftables). It runs on Laravel 11 in Docker (PHP-FPM 8.4 + MariaDB + Redis + queue workers) with the Evolya premium front-end on Next.js 15. The project is paused — current focus is NEXUS — and will be released for free in the future.

Executed scope

• CyberSec/OSINT: whois with history, DNS toolkit, dnstul, multi-stage subfinder (discover → resolve → status), dork generator, IP history, icon enumeration, CORS checker, header checker, batch blacklist with streaming/history/retry.
• SnapTime: time machine module — Wayback Machine and CDX proxy, on-demand snapshots, ZIP export (Archive.ph + Wayback).
• Networks/Infra: ipcalc, my IP, IP country, reverse lookup, iptables viewer, smartproxy, scraper, site status via proxy.
• Offensive/defensive security: bcrypt and MariaDB hash generators, multi-format encoder, revshell generator, email header analyzer.
• Monitoring: uptime monitors with groups, sharing between users, alerts and historical logs.
• Platform: full authentication (register/login/e-mail), domains verified via TXT record (60-day renewal), agreement acceptance, per-user tool favorites and usage history, API with Sanctum tokens.
• Distributed ecosystem: Main Server centralizing API + APT Repository V2 + panel; Satellite Nodes on OCI (CA-Montreal / SP-Brazil) provisioned by one-liner (curl ... | bash) installing Kagin Agent, CrowdSec LAPI and nftables Firewall Bouncer; automatic main-server whitelisting; direct real-IP communication (Cloudflare/cache bypass).
• Sadmin Panel: user and fleet node management + internal technical documentation served via Docsify.
• Modern infra: Docker Compose with 5 healthchecked services (app, worker, nginx, mariadb, redis); internal Task Dashboard API for automations.
• Evolya premium front-end: Next.js 15 + React 19 for data visualization and fleet control.

Stack and tools

• Laravel 11 + PHP 8.4 (PHP-FPM) + queue workers
• MariaDB 11.4 + Redis 7.2 (cache/queues) behind NGINX
• Docker Compose (app, worker, web, db, redis)
• Next.js 15 + React 19 (Evolya)
• Python + Bash (Kagin Agent and satellite provisioning)
• CrowdSec LAPI + Firewall Bouncer (nftables)
• Own APT (.deb) repository — Repo V2

Operational tags

• OSINT
• Cybersecurity
• Infrastructure
• Monitoring
• Satellite Nodes
• Docker
• Automation

Operational outcome

• Suite operational in development environment, with working dashboard, tools and agents.
• Main + Satellites architecture validated with real OCI nodes (Montreal and São Paulo).
• Project paused: current development focus is NEXUS; future resumption with free distribution.