reNgine
GPL-3.0๐ธ Web Scanning ยท Python
reNgine is an automated web application reconnaissance framework that combines multiple scanning engines into a single, correlated workflow with a web-based dashboard. It orchestrates subdomain enumeration (Subfinder, Amass), port scanning (Naabu), HTTP probing (httpx), screenshot capture (Aquatone), directory brute-forcing (ffuf), vulnerability scanning (Nuclei), and JavaScript analysis into configurable scan pipelines. What sets reNgine apart from simple tool wrappers is its correlation engine โ it cross-references findings across all scan stages, deduplicates results, and presents a unified view of the target's attack surface. The platform supports scheduled scans for continuous monitoring, custom scan engine configurations, and Slack/Discord notifications for new findings. With over 8,500 GitHub stars, reNgine has become a popular choice for bug bounty hunters and security teams who want automated recon without building their own pipeline infrastructure.
Installation
$ docker compose up -dUse Cases
- Continuous web application reconnaissance
- Automated vulnerability discovery for bug bounties
- Attack surface monitoring with scheduled scans
Tags
Details
- Category
- ๐ธ Web Scanning
- Language
- Python
- Repository
- yogeshojha/rengine
- License
- GPL-3.0
- Platforms
- ๐งlinux๐macos๐ชwindows
Links
Community Reviews
Alternatives & Comparisons
More in Web Scanning
httpx
GoFast multi-purpose HTTP toolkit. Probes for running HTTP servers with retries and fallbacks.
Nikto
PerlClassic web server scanner. Tests for dangerous files, outdated server software, and version-specific problems.
Gobuster
GoDirectory/file, DNS, and vhost busting tool. Brute-forces URIs, DNS subdomains, virtual host names, and S3 buckets.
Feroxbuster
RustFast, recursive content discovery tool written in Rust. Like gobuster on steroids with auto-recursion.
Burp Suite Community
JavaWeb vulnerability scanner and proxy. Intercept, modify, and replay HTTP/S traffic for web app testing.
ffuf
GoFast web fuzzer written in Go. Fuzz anything - URLs, headers, POST data - with blazing speed.