Nuclei playground for live template validation/verification

projectdiscovery / nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

https://github.com/projectdiscovery/nuclei

MIT License

9.28k stars 2.64k forks source link

Nuclei playground for live template validation/verification #468

Open ehsandeep opened 4 years ago

ehsandeep commented 4 years ago

Is your feature request related to a problem? Please describe.

When writing or porting an exploit to nuclei templates, not necessarily we have a real target or can share the vulnerable targets with others.

Describe the solution you'd like

A Web UI, where one can submit response data in one form and nuclei template in 2nd form and click on the button to check if the template works (matched) or not along with the result.

This is also useful for debugging while writing new templates.

osamahamad commented 3 years ago

This one gonna be extremely useful!!

atdash commented 2 years ago

@ehsandeep What do we do with this story? @jessekelly881 votes we should create a separate site...

c-sh0 commented 1 year ago

Just a thought,🤔Considering a lot of software can be run locally via docker, While this may not be ideal for everyone, I found that having a local VirtualBox VM, running Docker instances of vulnerable software for nuclei testing, to be very useful. This allows full control over different configuration and testing scenarios. Maybe also consider updating the verbiage when opening a Template Contribution to include steps to reproduce locally where possible?