Security-Tools-Alliance / rengine-ng

reNgine-ng is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface.
GNU General Public License v3.0
12 stars 6 forks source link

bug(scan): Dalfox too long and heavy on target #60

Open psyray opened 2 months ago

psyray commented 2 months ago

Is there an existing issue for this?

Current Behavior

While testing issues, I launched a Vuln scan on testphp.vulnweb.com. It contains DalFox in the default Full Scan Engine.

It runs for more than 1h30 and it did not finish yet. I try top stop scan, Dalfox continues.

So we need to test this part and look for the problem.

Maybe we should remove those long waiting scan to leave the user make a choice. Or we should set a less resource intensive default config for Dalfox, which catch result faster

image

image

Expected Behavior

Dalfox should run fast and should stop when aborted from GUI

Steps To Reproduce

Run vulnerability scan contained in the Full Scan default engine Beware of the target !!!

Environment

- reNgine: 2.0.5
- OS: Debian 12
- Python: 
- Docker Engine: 
- Docker Compose: 
- Browser:

Anything else?

To end Dalfox task, you need to find the root celery process id and kill it using root user.