Skip to content

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

License

Notifications You must be signed in to change notification settings

Webblitchy/rengine

 
 

reNgine++
More than just recon!

The only web application recon tool you will ever need!

Quickly discover the attack surface, and identify vulnerabilities using highly customizable and powerful scan engines. Enjoy peace of mind with reNgine's continuous monitoring, deeper reconnaissance, and open-source powered Vulnerability Scanner.

What is reNgine++ ?

reNgine++ is a fork of reNgine. Besides beeing a powerful web application reconnaissance suite and having a modern interface, it has a lot of features such as:

  • An internal network scanner, communicating to an internal agent installed inside a network
  • A state associated with each pentest to know which step is the next one
  • A full company report engine, highly customisable with latex templates*
  • Few bugs fixed

* Original reNgine provides a report engine too, but it is only for one scan and does not handle templates.

reNgine++ makes it easy for penetration testers and security auditors to gather reconnaissance data with bare minimal configuration.


How to use

Make an internal scan

  1. Install the internal agent in a local network by following the instructions in the project README
  2. Add the generated SSH key in the reNgine server
  3. Add the agent address from the menu Add or Import Targets
  4. Start a scan for example with the engine "Port scan only" with the new target created, from the Targets menu
  5. Results (such as Internal IPs) are shown in the Target Summary visible from the Scan History

Internal scan

Change a pentest status

  1. Go to the Organization menu
  2. Add a new organization
  3. From the organization list you can change the Testing status

Pentest status

Generate a global report

  1. Go to the Organization menu
  2. Click on Download Example Template
  3. Edit the template as you wish
  4. Create or edit an organization
  5. Import your new template by clicking on Import Latex template
  6. Do some scans
  7. From the Organization menu, download the report using the download button on the company line

Global report

Other

Despite these awesome new features, the interface and the mechanics remains the same hence the original documentation is still valid: rengine.wiki


Quick Installation

  1. Clone this repo

    git clone https://github.com/Webblitchy/rengine && cd rengine
  2. Run the installation script, Please keep an eye for any prompt, you will also be asked for username and password for reNgine.

    sudo chmod +x install.sh
    sudo ./install.sh

reNgine can now be accessed from https://127.0.0.1 or if you're on the VPS https://your_vps_ip_address


Screenshots from original rengine

Scan Results

General Usage

Initiating Subscan

Recon Data filtering

Report Generation

Toolbox

Adding Custom tool in Tools Arsenal


License

Distributed under the GNU GPL v3 License. See LICENSE for more information.

About

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Languages

  • JavaScript 38.0%
  • HTML 29.6%
  • Python 26.4%
  • CSS 3.8%
  • Jinja 0.7%
  • Shell 0.6%
  • Other 0.9%