Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bug: theHarvester not picking up api-keys configured in Tool Settings #1451

Open
1 task done
b1k3 opened this issue Oct 4, 2024 · 1 comment
Open
1 task done

bug: theHarvester not picking up api-keys configured in Tool Settings #1451

b1k3 opened this issue Oct 4, 2024 · 1 comment
Labels
bug Something isn't working

Comments

@b1k3
Copy link

b1k3 commented Oct 4, 2024

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

When running a scan Harvester is not picking up any API keys configured within the Tool Setting page of the application

Expected Behavior

When configuring the settings for theHarvester within Tool Settings of the GUI and then running a scan it should utilise the API keys provided.

Steps To Reproduce

  1. Log into reNgine GUI
  2. Go to Settings > Tools Settings.
  3. Double Click on the configuration for theHarvester
  4. Enter the yaml configuration as required:
apikeys:
  bevigil:
    key:

  binaryedge:
    key:

  bing:
    key:

  bufferoverun:
    key:

  censys:
    id:
    secret:

  criminalip:
    key:

  fullhunt:
    key:

  github:
    key:

  hunter:
    key:

  hunterhow:
    key:

  intelx:
    key:

  netlas:
    key:

  onyphe:
    key:

  pentestTools:
    key:

  projectDiscovery:
    key:

  rocketreach:
    key:

  securityTrails:
    key: <key goes here>

  shodan:
    key:

  tomba:
    key:
    secret:

  virustotal:
    key: <key goes here>
  1. Click Save Changes
  2. Configure Target
  3. Run Scan (Tested OSINT Scan)

Environment

- reNgine: 2.2.0
- OS: Ubuntu 24.04
- Python: 3.12.3
- Docker Engine: 27.3.1
- Docker Compose: N/A
- Browser: Chrome 129.0.6668.70

Anything else?

When the scan runs and theHarvester is run, it attempts to pick up the api-keys.yaml file from /root/.theHarvester/api-keys.yaml as per screenshot below:

image

When connecting to the celery container and checking the file, no keys are saved in this file.

Connecting to the celery docker container rengine-celery-1 using sudo docker exec -it rengine-celery-1 /bin/bash, I located that the file in the below location /usr/src/github/theHarvester/api-keys.yaml is the file updated by the GUI.

As a work around I've copied the /usr/src/github/theHarvester/api-keys.yaml to the one in the /root/.theHarvester/ location.

@b1k3 b1k3 added the bug Something isn't working label Oct 4, 2024
Copy link
Contributor

github-actions bot commented Oct 4, 2024

Hey @b1k3! 👋 Thanks for flagging this bug! 🐛🔍

You're our superhero bug hunter! 🦸‍♂️🦸‍♀️ Before we suit up to squash this bug, could you please:

📚 Double-check our documentation: https://rengine.wiki
🕵️ Make sure it's not a known issue
📝 Provide all the juicy details about this sneaky bug

Once again - thanks for your vigilance! 🛠️🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant