yogeshojha/rengine
Rengine
Rengine is an automated reconnaissance framework and vulnerability management platform designed for attack surface monitoring. It functions as a centralized hub for discovering subdomains and open ports, gathering open-source intelligence, and tracking security flaws across target networks.
The system integrates large language models to analyze reconnaissance data and generate vulnerability descriptions and insights. It distinguishes itself through a plugin-based tool integration that wraps external security scanning binaries and a target mapping system that tracks changes to assets over time.
The platform provides capabilities for bug bounty program coordination, recurring scan scheduling, and role-based access control for security teams. It also includes tools for natural language data filtering, webhook-based event notifications, and template-driven security report generation.
Features
- Network and Web Reconnaissance - Automates the discovery of subdomains and open ports using configurable scan engines to map target attack surfaces.
- Attack Surface Management - Maps subdomains and open ports to identify and monitor all internet-facing assets for an organization.
- Reconnaissance Frameworks - Automates the discovery of subdomains, open ports, and attack surfaces using integrated security scanning tools.
- External Security Tool Integrations - Wraps external security scanning binaries in a consistent interface to pipeline data from diverse reconnaissance tools.
- OSINT Automation Frameworks - Implements a framework for automating intelligence gathering and metadata collection from public data sources.
- Attack Surface Mapping - Stores assets and their relationships in a structured database to track changes in attack surfaces over time.
- Infrastructure Reconnaissance - Schedules recurring scans to detect new subdomains and endpoints as they appear on a target network.
- OSINT Tools - Collects metadata and sensitive URLs through search engine queries and open-source intelligence methods.
- Vulnerability Management - Centralized hub for tracking security flaws, managing bug bounty targets, and generating professional reports.
- Vulnerability Scanning - Identifies security flaws and misconfigurations through the integration and execution of specialized scanning tools.
- Vulnerability Scanning Workflows - Runs specialized scanning tools and leverages LLMs to analyze flaws and generate security reports.
- Asset Delta Monitoring - Tracks additions or removals of subdomains and endpoints to identify changing attack surfaces.
- Security Analysis Models - Uses large language models to generate vulnerability descriptions and insights from reconnaissance data.
- Data Filtering - Ships a system for querying gathered assets using natural language operators and deduplicating results based on page content.
- Vulnerability Synthesis - Generates vulnerability descriptions and attack surface insights using large language models.
- Task Scheduling - Allows users to execute reconnaissance tasks at specific clock times or periodic intervals.
- Security Report Generation - Creates formatted security documentation of discovered vulnerabilities and reconnaissance data using customizable templates.
- Program Coordination - Syncs external targets into a central hub to organize reconnaissance and track vulnerability discovery.
- Target Synchronization - Synchronizes targets from external platforms into a centralized hub to organize and track asset discovery.
- LLM Contextual Integrations - Feeds reconnaissance data into large language models to synthesize vulnerability descriptions and surface insights.
- OSINT Frameworks - Web reconnaissance and vulnerability scanning platform.
- Automated Exploitation Frameworks - Automated reconnaissance framework for security assessment.
- Reconnaissance Tools - Automated reconnaissance framework for penetration testing.
- Security Tools - Automated reconnaissance framework for web application security.
- Open Source Intelligence - Automated reconnaissance framework for web application penetration testing.
- OSINT and Reconnaissance - Automated reconnaissance framework for web application penetration testing.
- Vulnerability Scanning and Auditing - Automated reconnaissance framework for web applications.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
