mirror of
https://github.com/yogeshojha/rengine.git
synced 2026-10-20 23:31:31 +02:00
Yogesh Ojha
c6796a4713
The built-in engine drops subfinder-and-crtname-only discovery for the stage defaults plus the nuclei scan. Port scan, zone transfer and bruteforce default off; the passive tool set is subfinder and crtname. worker-scans gets a 512m /dev/shm, and the unused MCP capability-chips component is removed. Claude-Session: https://claude.ai/code/session_01Bb4u8p34euie1YFzb7qCPu
32 lines
923 B
Python
32 lines
923 B
Python
"""The built-in engine every project starts with."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from shared.enums.scan import Intensity
|
|
|
|
DEFAULT_ENGINE_NAME = "Default"
|
|
DEFAULT_ENGINE_DESCRIPTION = (
|
|
"Subdomain discovery on subfinder and crt.name, HTTP probe, screenshots, "
|
|
"response mining and a nuclei vulnerability scan at Normal intensity. Built in."
|
|
)
|
|
DEFAULT_ENGINE_INTENSITY = Intensity.NORMAL.value
|
|
VULNERABILITY_STAGE = "vulnerability_scan"
|
|
DEFAULT_VULN_SCANNERS: tuple[str, ...] = ("nuclei",)
|
|
|
|
|
|
def default_engine_stages() -> dict[str, dict]:
|
|
"""Only the settings that differ from the stage defaults."""
|
|
return {
|
|
VULNERABILITY_STAGE: {"enabled": True, "scanners": list(DEFAULT_VULN_SCANNERS)},
|
|
}
|
|
|
|
|
|
__all__ = [
|
|
"DEFAULT_ENGINE_DESCRIPTION",
|
|
"DEFAULT_ENGINE_INTENSITY",
|
|
"DEFAULT_ENGINE_NAME",
|
|
"DEFAULT_VULN_SCANNERS",
|
|
"VULNERABILITY_STAGE",
|
|
"default_engine_stages",
|
|
]
|