search

yogeshojha / rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
https://yogeshojha.github.io/rengine/
GNU General Public License v3.0
7.38k stars 1.12k forks source link

Subdomain enumeration taking 3 hours on small target #428

Closed ghost closed 3 years ago

ghost commented 3 years ago

Is there anyway to see whether the tool is running as it should? Been sat discovering subdomains for 3 hours on a target which I know has about 10 subdomains.

yogeshojha commented 3 years ago

This should not have happened, can you check where it is stuck?

Into project directory make logs

Can you also try stopping the scan and rescan them?

yogeshojha commented 3 years ago

I just ran a scan on a target on an entirely new machine, works well for me. Please rescan the target

ghost commented 3 years ago

I did make logs and can see that it was running fine and had found subdomains but nothing was reflected on the UI.

After cancelling and retrying scan I am now seeing results reflected on UI. I ran a quick scan this time and a full scan last time. I will try again on full scan.

ghost commented 3 years ago

Ok. Here was my issue.

I saw on the right after adding a target ‘quick scan’ so assumed this was some type of lighter faster scan, so had been selecting the target with the toggle on the left and then ‘scan multiple targets’. This was causing the scans not to reflect the results on the UI.

Starting the scan through quick scan works fine.