search

yogeshojha / rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
https://yogeshojha.github.io/rengine/
GNU General Public License v3.0
7.53k stars 1.14k forks source link

feat: allow adding (custom) vulnerability tools to reNgine #1130

Open sivakumar-velmurugan opened 11 months ago

sivakumar-velmurugan commented 11 months ago

Is there an existing feature or issue for this?

Expected feature

Currently we only have option for adding custom subdomain tools. I can't install a tool which does OSINT on github recon called secret-scanner.

Alternative solutions

It will be good, if a user can add a custom OSINT, vulnerability scanning tool and to see it's output in dashboard

Anything else?

No response

github-actions[bot] commented 11 months ago

👋 Hi @sivakumar-velmurugan, Issues is only for reporting a bug/feature request. Please read documentation before raising an issue https://rengine.wiki For very limited support, questions, and discussions, please join reNgine Discord channel: https://discord.gg/azv6fzhNCE Please include all the requested and relevant information when opening a bug report. Improper reports will be closed without any response.

psyray commented 11 months ago

Good one, but more tools need more tests to process output. I didn't have yet look into the custom tool implementation to say what it could be possible or not, and where are the difficulty here. @yogeshojha What is restricting the use of custom tools to the subdomain enumeration ?