usage projects - Security-Tools-Alliance/rengine-ng GitHub Wiki
Projects
reNgine-ng 2.1 introduces powerful project management features that enable you to efficiently organize your web application reconnaissance efforts while maintaining strict access control. With this feature, you can create distinct project spaces, each tailored to a specific purpose, such as personal bug bounty hunting, client engagements, or any other specialized recon task.
Each project has its own:
- Dashboard with specific metrics and insights
- Separate targets and scan results
- Dedicated user access control
- Independent data isolation
While sharing across all projects:
- Scan engines and configurations
- Global tools settings
- System-wide configurations
The project-based access control allows administrators to:
- Assign specific users to projects
- Restrict user access to authorized projects only
- Manage user permissions at project level
- Monitor project access and activities
It's like having multiple secure instances of reNgine-ng running, with complete data isolation between projects and granular user access control. This ensures that sensitive reconnaissance data remains accessible only to authorized team members.
What is shared across projects?
- Scan Engines
- Tools and configurations
- Interesting Keywords
- Wordlist
What is not shared across projects?
- Targets
- Any scan related data such as Subdomains, Endpoints, Vulnerabilities etc
- Dashboard and Insights
Adding Projects
You will be prompted with an onboarding page once reNgine-ng is installed.
At least one project is required to run reNgine-ng. Later, if you wish to add new projects, you can click on 'Create New Project' from top menu
Switching Between the Projects
If there are multiple projects and you wish to switch between them, lick on Projects menu, and click on the project name. You will be welcomed with the project's separate dashboard.
User creation/update with projects to assign
Project creation/update with users to assign
If user try to access a non assign project it returns a 403 page
Project display is restricted to their assigned projects for user