nuclei-templates not used by nuclei package

[noraj]

Also right now our package nuclei-templates is pretty useless and not needed as a dependency of nuclei. Why? Because since 2.4.0 nuclei is auto-downloading and updating the templates to ~/nuclei-templates and is not aware of what we deployed at /usr/share/nuclei-templates.

$ nuclei

                     __     _                                                                                                                                                                                                                
   ____  __  _______/ /__  (_)                                                                                                                                                                                                               
  / __ \/ / / / ___/ / _ \/ /                                                                                                                                                                                                                
 / / / / /_/ / /__/ /  __/ /                                                                                                                                                                                                                 
/_/ /_/\__,_/\___/_/\___/_/   2.6.3                                                                                                                                                                                                          

                projectdiscovery.io                                                                                                                                                                                                          

[WRN] Use with caution. You are responsible for your actions.                                                                                                                                                                                
[WRN] Developers assume no liability and are not responsible for any misuse or damage.                                                                                                                                                       
[INF] nuclei-templates are not installed, installing...                                                                                                                                                                                      
[INF] Successfully downloaded nuclei-templates (v8.9.3) to /home/noraj/nuclei-templates. GoodLuck!
[WRN] Found 2 templates with runtime error (use -validate flag for further examination)

So to make the nuclei-templates install system wide taken into account by nuclei we should complexify the install steps :

• Define a config.yml file (cf. https://nuclei.projectdiscovery.io/nuclei/get-started/#nuclei-config)
  • Add disable-update-check: true to disable automatic nuclei/templates update check
  • Add templates: \n - /usr/share/nuclei-templates
• Create a wrapper nuclei -config /usr/share/nuclei/config.yaml "$@"

So the templates would not be downloaded once per user and making the user home messy.

[dualfade]

You are correct. Sorry; mis-read this.

This is not needed.

[D3vil0p3r]

@noraj should it go in remove list?

[noraj]

should it go in remove list?

No. nuclei PKGBUILD should be updated instead. In a way to use nuclei-templates as described above.

[D3vil0p3r]

Just to summarize:

• Remove nuclei-templates as dependency in nuclei
• config.yml should contain only those two mentioned lines? The mentioned link is not consistent anymore. It is the updated one: https://docs.projectdiscovery.io/tools/nuclei/running#nuclei-config

[noraj]

Remove nuclei-templates as dependency in nuclei

The idea is quite the contrary. It's to make nuclei really use nuclei-templates

[D3vil0p3r]

Also right now our package nuclei-templates is pretty useless and not needed as a dependency of nuclei.

Ok... I misled this statement

[D3vil0p3r]

https://github.com/BlackArch/blackarch/pull/4357