mirror of
https://github.com/yogeshojha/rengine.git
synced 2026-10-20 15:21:30 +02:00
Yogesh OjhaandClaude Fable 5.1
695c4803bb
Every stage config field is a decision; rate, concurrency, timeout and retries come from a per-tool intensity profile the stage reads as its transport. 173 fields become 83: 41 transport values, 40 constants and the dead ones leave the models, and the builder groups by capability with support stages as checkboxes and advanced fields behind one disclosure. Aggressive now changes what a tool is handed. Every project carries a built-in Default engine, seeded on project creation and on first list, undeletable: stage defaults, subfinder as the only passive source, vulnerability scan on with nuclei. From the tracing review: tool args can no longer restate a flag the stage set, the session check obeys the probe scheme, excluded scope reaches every stage that reads addresses, hosts or paths, the sitemap and source-map providers throttle at the transport rate, the blind tier obeys its switch, the fuzzing lanes split the budget, and the removed private-address and evidence switches are back as advanced fields. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pq4xYJbgW5euUa9sCWBKFw
37 lines
1.1 KiB
Python
37 lines
1.1 KiB
Python
"""The built-in engine every project starts with."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from shared.enums.scan import Intensity
|
|
|
|
DEFAULT_ENGINE_NAME = "Default"
|
|
DEFAULT_ENGINE_DESCRIPTION = (
|
|
"Subdomain discovery on subfinder, port scan, HTTP probe, screenshots, "
|
|
"URL discovery and a nuclei vulnerability scan at Normal intensity. Built in."
|
|
)
|
|
DEFAULT_ENGINE_INTENSITY = Intensity.NORMAL.value
|
|
SUBDOMAIN_STAGE = "subdomain_discovery"
|
|
VULNERABILITY_STAGE = "vulnerability_scan"
|
|
DEFAULT_PASSIVE_SOURCES: tuple[str, ...] = ("subfinder",)
|
|
DEFAULT_VULN_SCANNERS: tuple[str, ...] = ("nuclei",)
|
|
|
|
|
|
def default_engine_stages() -> dict[str, dict]:
|
|
"""Only the settings that differ from the stage defaults."""
|
|
return {
|
|
SUBDOMAIN_STAGE: {"passive_tools": list(DEFAULT_PASSIVE_SOURCES)},
|
|
VULNERABILITY_STAGE: {"enabled": True, "scanners": list(DEFAULT_VULN_SCANNERS)},
|
|
}
|
|
|
|
|
|
__all__ = [
|
|
"DEFAULT_ENGINE_DESCRIPTION",
|
|
"DEFAULT_ENGINE_INTENSITY",
|
|
"DEFAULT_ENGINE_NAME",
|
|
"DEFAULT_PASSIVE_SOURCES",
|
|
"DEFAULT_VULN_SCANNERS",
|
|
"SUBDOMAIN_STAGE",
|
|
"VULNERABILITY_STAGE",
|
|
"default_engine_stages",
|
|
]
|