rengine - reNgine is an automated reconnaissance framework f

项目说明

<p align="center">
<a href=" src=".github/screenshots/banner.gif" alt=""/></a>
</p>

<p align="center">
<h3>reNgine: The Ultimate Web Reconnaissance & Scanner 🚀</h3>
</p>

<p align="center"><a href=" target="_blank"><img src=" alt="reNgine Latest " /></a>&nbsp;<a href=" target="_blank"><img src=" alt="License" /></a>&nbsp;<a href="#" target="_blank"><img src=" alt="" /></a></p>

<p align="center">
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
</p>

<p align="center">
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
</p>

<p align="center">
<a href=" target="_blank"><img src=" alt="" /></a>&nbsp;
</p>

<p align="center">
<a href=" target="_blank" rel="noopener">
<img style="width: 282px; height: 56px" src=" alt="Open 源码 Security Index - Fastest Growing Open 源码 Security Projects" width="282" height="56" /> </a>
</p>
<h4>reNgine 2.2.0 is released!</h4>
<p>
reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration 工具, ability to upload multiple nuclei and gf patterns, support for regex in out of scope subdomain config, additional pdf report template and many more.
<b>Check out <a href=" new in reNgine 2.2.0!</a></b>
</p>

<h4>What is reNgine?</h4>
reNgine is your ultimate web application reconnaissance suite, designed to supercharge the recon process for security pros, pentesters, and bug bounty hunters. It is go-to web application reconnaissance suite that's designed to simplify and streamline the reconnaissance process for all the needs of security professionals, penetration testers, and bug bounty hunters. With its highly configurable engines, data correlation capabilities, continuous monitoring, 数据库-backed reconnaissance data, and an intuitive user interface, reNgine redefines how you gather critical information about your target web applications.

Traditional reconnaissance tools often fall short in terms of configurability and efficiency. reNgine addresses these shortcomings and emerges as an excellent alternative to existing commercial tools.

reNgine was created to address the limitations of traditional reconnaissance tools and provide a better alternative, e some commercial offerings. Whether you're a bug bounty hunter, a penetration tester, or a corporate security team, reNgine is your go-to solution for automating and enhancing your information-gathering efforts.
</p>

Watch reNgine 2.0-jasper release trailer here!

!-----------------------------------------------------

Documentation

Detailed documentation a at

!-----------------------------------------------------

Table of Contents

* About reNgine
* Workflow
* Features
* Enterprise Support
* Quick Installation
* Installation Video
* Community-Curated
* Screenshots
* What's new in reNgine
* Contributing
* reNgine Support
* Support and Sponsoring
* Reporting Security
* License

!-----------------------------------------------------

About reNgine

reNgine is not an ordinary reconnaissance suite; it's a 游戏-changer! We' the traditional workflow with groundbreaking features that is sure to ease your reconnaissance 游戏. reNgine redefines the art of reconnaissance with highly configurable scan engines, recon data correlation, continuous monitoring, GPT powered Report, Project Management and role based access control etc.

🦾&nbsp;&nbsp; reNgine has ad reconnaissance capabilities, harnessing a range of open-源码 tools to deliver a comprehensive web application reconnaissance experience. With its intuitive User Interface, it excels in subdomain discovery, pinpointing IP addresses and open ports, collecting endpoints, conducting directory and file fuzzing, capturing screenshots, and performing scans. To summarize, it does end-to-end reconnaissance. With WHOIS identification and WAF detection, it offers deep insights into target domains. Additionally, reNgine also identifies misconfigured S3 buckets and find interesting subdomains and URLS, based on specific keywords to helps you identify your next target, making it a go-to 工具 for efficient reconnaissance.

🗃️&nbsp; &nbsp; Say goodbye to recon data chaos! reNgine seamlessly integrates with a 数据库, pro you with unmatched data correlation and organization. Forgot the hassle of grepping through json, txt or cs. Plus, our custom query language lets you filter reconnaissance data effortlessly using natural language like operators such as filtering all ali with http_status=200 and also filter all subdomains that are alive and has admin in name http_status=200&name=admin

🔧&nbsp;&nbsp; reNgine offers unparalleled flexibility through its highly configurable scan engines, based on a YAML-based configuration. It offers the freedom to create and customize recon scan engines based on any kind of requirement, users can tailor them to their specific objectives and preferences, from thread management to timeout settings and rate-limit configurations, e is customizable. Additionally, reNgine offers a range of pre-configured scan engines right out of the box, including Full Scan, Passive Scan, Screenshot Gathering, and the OSINT Scan 引擎. These ready-to-use engines eliminate the need for extensi setup, aligning perfectly with reNgine's core mission of simplifying the reconnaissance process and enabling users to effortlessly access the right reconnaissance data with minimal effort.

💎&nbsp;&nbsp;Subscans: Subscan is a 游戏-changing feature in reNgine, setting it apart as the only open-源码 工具 of its kind to offer this capability. With Subscan, waiting for the entire pipeline to complete is a thing of the past. Now, users can swiftly respond to newfound disco during reconnaissance. Whether you' upon an intriguing subdomain and wish to conduct a focused port scan or want to del with a assessment, reNgine has you covered.

📃&nbsp;&nbsp; PDF Reports: In addition to its robust reconnaissance capabilities, reNgine goes the extra mile by simplifying the report generation process, recognizing the crucial role that PDF reports play in the realm of end-to-end reconnaissance. Users can effortlessly generate and customize PDF reports to suit their exact needs. Whether it's a Full Scan Report, Report, or a concise reconnaissance report, reNgine provides the flexibility to choose the report type that best communicates your findings. Moreover, the level of customization is unparalleled, allowing users to select report colors, fine-tune executi, and even add personalized touches like company names and footers. With GPT integration, your reports aren't just a report, with remediation steps, and impacts, you get 360-degree view of the you'.

🔖&nbsp; &nbsp; Say Hello to Projects! reNgine 2.0 introduces a powerful addition that enables you to efficiently organize your web application reconnaissance efforts. With this feature, you can create distinct project spaces, each tailored to a specific purpose, such as personal bug bounty hunting, 客户端 engagements, or any other specialized recon task. Each projects will ha dashboard and all the scan results will be separated from each project, while scan engines and configuration will be shared across all the projects.

⚙️&nbsp; &nbsp; Roles and Permissions! In reNgine 2.0, we' your web application reconnaissance to a whole new level of control and security. Now, you can assign distinct roles to your team members—Sys Admin, Penetration Tester, and Auditor—each with precisely defined permissions to tailor their access and actions within the reNgine ecosystem.

- 🔐 Sys Admin: Sys Admin is a superuser that has permission to modify system and scan related configurations, scan engines, create new users, add new tools etc. Superuser can initiate scans and subscans effortlessly.
- 🔍 Penetration Tester: Penetration Tester will be allowed to modify and initiate scans and subscans, add or update targets, etc. A penetration tester will not be allowed to modify system configurations.
- 📊 Auditor: Auditor can only view and download the report. An auditor can not change any system or scan related configurations nor can initiate any scans or subscans.

🚀&nbsp;&nbsp; GPT Report Generation: Get ready for the future of penetration testing reports with reNgine's groundbreaking feature: "GPT-Powered Report Generation"! With the power of OpenAI's GPT, reNgine now provides you with detailed descriptions, remediation strategies, and impact assessments that read like they were written by a human security expert! But that's not all! Our GPT-dri go the extra mile by scouring the web for related news articles, blogs, and references, so you have a 360-degree view of the you'. With reNgine 2.0 re your penetration testing 游戏 and impress your clients with reports that are not just informative but engaging and comprehensive with detailed analysis on impact assessment and remediation strategies.

🥷&nbsp;&nbsp; GPT-Powered Attack Surface Generation: With reNgine 2.0, reNgine seamlessly integrates with GPT to identify the attacks that you can likely perform on a subdomain. By making use of reconnaissance data such as page title, open ports, subdomain name etc. reNgine can advise you the attacks you could perform on a target. reNgine will also provide you the rationale on why the specific attack is likely to be successful.

🧭&nbsp;&nbsp;Continuous monitoring: Continuous monitoring is at the core of reNgine's mission, and it's robust continuous monitoring feature ensures that their targets are under constant scrutiny. With the flexibility to schedule scans at regular intervals, penetration testers can effortlessly stay informed about their targets. What sets reNgine apart is its seamless integration with popular notification channels such as Discord, Slack, and onnaissance data.

!-----------------------------------------------------

Workflow

<img src="

!-----------------------------------------------------

Features

* Reconnaissance:
* Subdomain Discovery
* IP and Open Ports Identification
* Endpoints Discovery
* Directory/Files fuzzing
* Screenshot Gathering
* Scan
* Nuclei
* Dalfox XSS Scanner
* CRLFuzzer
* Misconfigured S3 Scanner
* WHOIS Identification
* WAF Detection
* OSINT Capabilities
* Meta info Gathering
* Employees Gathering
* Email Address gathering
* Google Dorking for sensitive info and urls
* Projects, create distinct project spaces, each tailored to a specific purpose, such as personal bug bounty hunting, 客户端 engagements, or any other specialized recon task.
* Perform Ad Query lookup using natural language alike and, or, not operations
* Highly configurable YAML-based Scan Engines
* Support for Parallel Scans
* Support for Subscans
* Recon Data
* GPT Description, Impact and Remediation generation
* GPT Attack Surface Generator
* Multiple Roles and Permissions to cater a team's need
* Customizable Alerts/Notifications on Slack, Discord, and
* Automatically report to HackerOne
* Recon Notes and Todos
* Clocked Scans (Run reconnaissance exactly at X Hours and Y minutes) and Periodic Scans (Runs reconnaissance every X minutes/- hours/days/week)
* Proxy Support
* Screenshot Gallery with Filters
* Powerful recon data filtering with autosuggestions
* Recon Data changes, find new/remo/endpoints
* Tag targets into the Organization
* Smart Duplicate endpoint remo on page title and content length to cleanup the reconnaissance data
* Identify Interesting Subdomains
* Custom GF patterns and custom Nuclei Templates
* Edit 工具-related configuration files (Nuclei, Subfinder, Naabu, amass)
* Add external tools from GitHub/Go
* Interoperable with other tools, Import/Export Subdomains/Endpoints
* Import Targets via IP and/or CIDRs
* Report Generation
* Toolbox: Comes bundled with most commonly used tools during penetration testing such as whois lookup, CMS detector, C, etc.
* Identification of related domains and related TLDs for targets
* Find actionable insights such as Most Common , Most Common CVE ID, Most Target/Subdomain, etc.
* You can now use local LLMs for Attack surface identification and description (NEW: reNgine 2.1.0)
* BountyHub, a central hub to manage your hackerone targets

!-----------------------------------------------------

<p align="center">
<h3>Enterprise Support</h3>
</p>

<p align="center">
<a href=" target="_blank">
<img src=" alt="HailBytes - Enterprise reNgine Support" height="60"/>
</a>
</p>

<p align="center">
Official enterprise-grade support, deployment, and maintenance services for reNgine are a through <a href="
</p>

<p align="center">
You can also find the deep di on how to use and install reNgine from here <a href=" Deep Dive by HailBytes</a>
</p>

!-----------------------------------------------------

Quick Installation

Quick Setup for Ubuntu/VPS

1. Clone the repository

1. Configure the en

Ensure you change the POSTGRES_PASSWORD for security.

1. (Optional) For non-interacti, set admin credentials in .env

If you need to carry out a non-interacti, you can setup the login, email and password of the web interface admin directly from the .env file (instead of manually setting them from prompts during the installation process). This option can be interesting for automated installation (, , etc.).

* DJANGO_SUPERUSER_USERNAME: web interface admin username (used to login to the web interface).

* DJANGO_SUPERUSER_EMAIL: web interface admin email.

* DJANGO_SUPERUSER_PASSWORD: web interface admin password (used to login to the web interface).

1. Adjust Celery worker scaling in .env

MAX_CONCURRENCY: This parameter specifies the maximum number of reNgine's concurrent Celery worker processes that can be spawned. In this case, it's set to 80, meaning that the application can utilize up to 80 concurrent worker processes to execute tasks concurrently. This is useful for handling a high of scans or when you want to scale up processing power during periods of high demand. If you have more CPU cores, you will need to increase this for maximised performance.

MIN_CONCURRENCY: On the other hand, MIN_CONCURRENCY specifies the minimum number of concurrent worker processes that should be maintained, e periods of lower demand. In this example, it's set to 10, which means that even when there are fewer tasks to process, at least 10 worker processes will be kept running. This helps ensure that the application can respond promptly to incoming tasks without the o of repeatedly starting and stopping worker processes.

These settings allow for dynamic scaling of Celery workers, ensuring that the application efficiently manages its workload by adjusting the number of concurrent workers based on the workload's size and complexity.

Here is the ideal value for MIN_CONCURRENCY and MAX_CONCURRENCY depending on the number of RAM your machine has:

* 4GB: MAX_CONCURRENCY=10
* 8GB: MAX_CONCURRENCY=30
* 16GB: MAX_CONCURRENCY=50

This is just an ideal value which de ha and tried out and works! But feel free to play around with the .
Maximum number of scans is determined by factors, your 网络 bandwidth, RAM, number of CPUs a. etc

1. Run the installation script:

For non-interacti: sudo ./install.sh -n

*Note: If needed, run chmod +x install.sh to grant execution permissions.*

reNgine can now be accessed from < or if you're on the VPS <

Unless you are on de branch, please do not access reNgine via any ports

Installation on Other Platforms

For Mac, Windows, or other systems, refer to our detailed installation guide

Installation Video Tutorial

If you encounter any issues during installation or prefer a guide, one of our community members has created an excellent installation video for Kali Linux installation. You can find it here:

Please note: This is community-curated content and is not owned by reNgine. The installation process may change, so please refer to the official documentation for the most up-to-date instructions.

Updating

1. To update reNgine, run:

If update.sh lacks execution permissions, use:

!-----------------------------------------------------

Community-Curated

reNgine has a community that often creates helpful content about installation, features, and usage. Below is a collection of community-curated that you might find useful. Please note that these are not official reNgine content, and the information they contain may become outdated as reNgine e.

Always refer to the official documentation for the most up-to-date and accurate information. If you' a video about reNgine and would like it featured here, please send a pull request updating this table.

| Video Title | Language | Publisher | Date | Link |
|-------------|----------|----------|------|------|
| reNgine Installation on Kali Linux | English | Secure the Cyber World | 2024-02-29 | Watch |
| Resultados do ReNgine - Automação para Recon | Portuguese | Guia Anônima | 2023-04-18 | Watch |
| reNgine Introduction | Moroccan Arabic | Th3 Hacker News Bdarija | 2021-07-27 | Watch |
| Automated recon? ReNgine - Hacker Tools | English | Intigriti | 2021-08-24 | Watch |

We appreciate the community's contributions in creating these resources.

!-----------------------------------------------------

Screenshots

Scan Results


General Usage

<img src="

Initiating Subscan

<img src="

Recon Data filtering

<img src="

Report Generation

<img src="

Toolbox

<img src="

Adding Custom tool in Tools Arsenal

<img src="

!-----------------------------------------------------

Contributing

We welcome contributions of all sizes! The open-源码 community thrives on collaboration, and your input is in. Whether you're fixing a typo, improving UI, or adding new features, every contribution matters.

How you can contribute:
* Code impro
* Documentation updates
* Bug reports and fixes
* New feature suggestions and implementations
* UI/UX enhancements

To get started:

1. Check our Contributing Guide
2. Pick an open issue or propose a new one
3. Fork the repository and create your branch
4. Make your changes and submit a pull request

Remember, no contribution is too small. Your efforts help make reNgine better for e!

!-----------------------------------------------------

Submitting issues

When submitting issues, provide as much information as possible to help de resolve the problem quickly. Follow these steps to gather detailed debug information:

1. Enable Debug Mode:
- Edit web/entrypoint.sh in the project root
- Add export DEBUG=1 at the top of the file:

- Restart the web container: docker-compose restart web

2. View Debug Output:
- Run make logs to see the full stack trace
- Check the browser's de console for XHR requests with 500 errors

3. Example Debug Output:

4. Submit Your Issue:
- Include the full stack trace in your GitHub issue
- Describe the steps to reproduce the problem
- Mention any relevant system information

5. Disable Debug Mode:
- Set DEBUG=0 in web/entrypoint.sh
- Restart the web container

By pro this detailed information, you significantly help de identify and fix issues more efficiently.

!-----------------------------------------------------

First-time Open Source contributors

reNgine is an open-源码 project that welcomes contributors of all experience levels, including beginners. If you' contributed to open 源码 before, we encourage you to start here!

* We're proud to support your first Pull Request (PR)
* Check our open issues for starter-friendly tasks
* Don't hesitate to ask questions in our community channels

Your contribution, no matter how small, is to us.

!-----------------------------------------------------

reNgine Support

Before seeking support:

* Please carefully read the README and documentation at rengine.wiki.
* Most common questions and issues are addressed there.

If you still need assistance:

* Do not use GitHub issues for support requests.
* Join our community-maintained Discord channel.

Please note:
* The Discord channel is maintained by the community.
* While we strive to help, there's no guarantee of support or response time.
* For confirmed bugs or feature requests, consider opening a GitHub issue.

!-----------------------------------------------------

Support and Sponsoring

reNgine is a passion project de in my free time, alongside my day job. Your support helps keep this project alive and growing. Here's how you can contribute:

* Add a GitHub Star to the project.
* Share about reNgine on social media or in blog posts
* Nominate me for GitHub Stars?
* Use my DigitalOcean referral link to get $100 credit (I receive $25)

Your support, whether through donations or simply giving a star, tells me that reNgine is to you. It motivates me to continue improving and adding features to make reNgine the go-to 工具 for reconnaissance.

Thank you for your support!

!-----------------------------------------------------

Reporting Security

We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your contributions.

To report a security , please follow these steps:

1. Do Not disclose the publicly on GitHub issues or any other public forum.

2. Go to the Security tab of the reNgine repository.

3. Click on "Report a " to open GitHub's private reporting form.

4. Provide a detailed description of the , including:
- Steps to reproduce
- Potential impact
- Any suggested fixes or mitigations (if you have them)

5. I will review your report and respond as quickly as possible, usually within 48-72 hours.

6. Please allow some time to in and address the before disclosing it to others.

We are committed to working with security researchers to and address any potential reported to us. After fixing the issue, we will publicly acknowledge your responsible disclosure, unless you prefer to remain anonymous.

Thank you for helping to keep reNgine and its users safe!

!-----------------------------------------------------

License

Distributed under the GNU GPL v3 License. See LICENSE for more information.

!-----------------------------------------------------

<p align="right"><i>Note: Parts of this README were written or refined using AI language models.</i></p>

项目信息

开发语言：HTML

Star 数：8868

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕reNgine is an automated reconnaissance 框架 for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a 数据库, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。