Shulou(Shulou.com)05/31 Report--

Editor to share with you what Nuclei is, I believe that most people do not know much about it, so share this article for your reference, I hope you will learn a lot after reading this article, let's go to understand it!

Nuclei is a very fast and easy-to-use scanning tool that helps researchers perform configurable target scanning tasks based on templates and provides a large number of extensible interfaces to assist in use.

Nuclei can send requests across targets based on templates, can achieve zero false positives, and can help researchers perform effective scanning of known paths. The main usage scenario of Nuclei is the initial stage of network reconnaissance, which can help researchers quickly check whether there are security vulnerabilities in known and easy-to-detect targets. The tool uses the retryablehttp-go library to handle various errors and retransmits automatically when the Web application firewall is shielded, which is also one of the core modules of the tool. We have also specially opened up a special resource library to maintain various types of scanning templates, and we welcome all the leaders in the community to contribute.

Function introduction

Simple and modular code for easy use and development

Fast and fully configurable, using a template-based engine

Error event / special case handling retransmission

WAF processing

Intelligent matching to realize zero false positives scanning

The tool uses nuclei-h

The above command displays help for the tool, and here are the common options for the tool:

The option label description information uses the sample-c concurrent requests (default is 10) nuclei-c 100lil URL list of templates to run nuclei-l urls.txt-t template input file nuclei-t git-core.yaml-t to cross-host detection template input file nuclei-t "path/*.yaml"-nC output does not use highlight color nuclei-nC-o to save the output result file ( (optional) nuclei-o output.txt-silent shows only the number of failed nuclei-silent-retries retry requests found in the output (default 1) number of seconds to wait before nuclei-retries 1-timeout times out (default is 5) nuclei-timeout 5Muv display detailed output nuclei-v-version display Nuclei version nuclei-version-proxy-url proxy URLnuclei-proxy-url http://user:pass@this.is.a.proxy:8080-proxy-socks -url Agent Socks URLnuclei-proxy-socks-url socks5://user:pass@this.is.a.proxy.socks:9050 tool installation

Code installation

The installation of the tool is actually very simple, you can choose the precompiled source code according to your platform in the Releases page of the GitHub library of the project, then use the tar command to extract the code and move the extracted code to your own $PATH path. The commands used are as follows:

> tar-xzvf nuclei-linux-amd64.tar > mv nuclei-linux-amd64 / usr/bin/nuclei > nuclei- h

Source installation

Nuclei requires the target device to successfully configure the Go v1.13 + environment, and then run the following command to obtain the project code:

> GO111MODULE=on go get-u-v github.com/projectdiscovery/nuclei/cmd/nuclei

To update Nuclei, you can use the-u option and the go get command.

Nuclei operation

Run Nuclei using a single template.

The following command scans the hosts listed in the urls.txt file and returns matching results:

> nuclei-l urls.txt-t git-core.yaml-o results.txt

You can also pass a list of target hosts as standard input (STDIN). The following command can also scan the hosts listed in the urls.txt file and return matching results:

> cat urls.txt | nuclei-t git-core.yaml-o results.txt

Run Nuclei using multiple templates.

The following command will be able to use all the templates in the path-to-templates directory to scan the hosts listed in the urls.txt file and return matching results:

> nuclei-l urls.txt-t "path-to-templates/*.yaml"-o results.txt

Use sub-scanners and other similar tools to run Nuclei automatically.

> subfinder-d hackerone.com-silent | httprobe | nuclei-t "path-to-templates/*.yaml"-o results.txt

Custom template

Nuclei supports automatic delivery and execution of multiple template tasks through .yaml files. If you need to develop custom templates, please refer to this [document].

Tool screenshot

The above is all the content of this article "what is Nuclei?" thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.