Dependencies - Security-Tools-Alliance/rengine-ng GitHub Wiki
Here's a list of tools used in reNgine-ng based on the tasks.py and Dockerfile analysis:
Subdomain Discovery Tools
- Amass
- Description: In-depth DNS enumeration and network mapping
- Modes: Active and Passive scanning
- GitHub: OWASP/Amass
- Sublist3r
- Description: Fast subdomain enumeration tool using various sources
- GitHub: aboul3la/Sublist3r
- Subfinder
- Description: Fast passive subdomain discovery tool
- GitHub: projectdiscovery/subfinder
- OneForAll
- Description: Powerful subdomain integration tool
- GitHub: shmilylty/OneForAll
- CTFR
- Description: Abuse Certificate Transparency logs for subdomain enumeration
- GitHub: UnaPibaGeek/ctfr
- tlsx
- Description: Fast TLS grabber focused on TLS based data collection
- GitHub: projectdiscovery/tlsx
- Netlas
- Description: Internet intelligence tool for gathering domain information
- Website: netlas.io
Web Crawling & Directory Discovery
- Gospider
- Description: Fast web spider written in Go
- GitHub: jaeles-project/gospider
- hakrawler
- Description: Simple, fast web crawler
- GitHub: hakluke/hakrawler
- ffuf
- Description: Fast web fuzzer
- GitHub: ffuf/ffuf
- katana
- Description: Next-generation crawling and spidering framework
- GitHub: projectdiscovery/katana
Vulnerability Scanning
- nuclei
- Description: Fast and customizable vulnerability scanner
- GitHub: projectdiscovery/nuclei
- dalfox
- Description: Parameter Analysis and XSS Scanning tool
- GitHub: hahwul/dalfox
- CMSeeK
- Description: CMS Detection and Exploitation suite
- GitHub: Tuhinshubhra/CMSeeK
Port Scanning & Network Tools
- naabu
- Description: Fast port scanner written in go
- GitHub: projectdiscovery/naabu
- httpx
- Description: Fast and multi-purpose HTTP toolkit
- GitHub: projectdiscovery/httpx
URL Discovery & Analysis
- gau
- Description: Get All URLs from various sources
- GitHub: lc/gau
- waybackurls
- Description: Fetch all URLs from Wayback Machine
- GitHub: tomnomnom/waybackurls
- unfurl
- Description: URL parameter extractor
- GitHub: tomnomnom/unfurl
Visual Reconnaissance
- EyeWitness
- Description: Website screenshots, source code, and server headers
- GitHub: FortyNorthSecurity/EyeWitness
OSINT Tools
- theHarvester
- Description: E-mails, subdomains and names harvester
- GitHub: laramies/theHarvester
- Infoga
- Description: Email OSINT tool
- GitHub: GiJ03/Infoga
WAF Detection
- wafw00f
- Description: Web Application Firewall Detection Tool
- GitHub: EnableSecurity/wafw00f