search

yogeshojha / rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
https://yogeshojha.github.io/rengine/
GNU General Public License v3.0
7.25k stars 1.1k forks source link

Feature - Github Subdomains/Endpoints #102

Closed uBadRequest closed 2 weeks ago

uBadRequest commented 4 years ago

Is your feature request related to a problem? Please describe. Github can contain subdomains and endpoints that can't be found anywhere else.

Describe the solution you'd like There are a number of tools that implement the ability to search Github for endpoints/subdomains such as https://github.com/gwen001/github-search

Also, you may need to provide the ability to add github tokens/API keys to other tools from the GUI.

tzmcrypto commented 4 years ago

The nuclei team has recently implemented @gwen001 tools into their pipeline. Since this tool uses subfinder, subdomains are already being pulled from github if the ~/.config/subfinder/config.yaml file is correctly set up and subfinder is updated to the latest version

danzee1 commented 4 years ago

Hi @thezoomerhacker & @yogeshojha there are tools like which needs to be integrated. 

https://github.com/Edu4rdSHL/findomain
https://github.com/Screetsec/Sudomy
https://github.com/shmilylty/OneForAll
tzmcrypto commented 4 years ago

Hi @attacker007 , I think I missed the point of your reply. This thread is requesting github implementation for subdomain enum + endpoints discovery.

danzee1 commented 4 years ago

Hi @thezoomerhacker I've just given information about subdomain enum tools which need to be integrated...

tzmcrypto commented 4 years ago

Got it. I think for that you can open a new thread on the issues page and mark it as "feature"

yogeshojha commented 3 years ago

@attacker007 Oneforall is implemented!

yogeshojha commented 3 years ago

I have announced bounty for finddomain and given instructions on how to implement. Let's wait until somebody sends a PR :smile:

psyray commented 8 months ago

@yogeshojha Does those tools still relevant ?