search

projectdiscovery / nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.
https://docs.projectdiscovery.io/tools/nuclei
MIT License
19.54k stars 2.42k forks source link

Output results only provide the issues/vulnerabilities found - Full list of results including tests executed with no issues found is needed #5157

Open bhictor opened 3 months ago

bhictor commented 3 months ago

Feature request: We would like to have a way to indicate Nuclei that output files should contain all the execution results (not just the issues/findings). This would require also the addition of a new field for the test status in order to know the tests with issues and the ones without. This feature would be specially useful in the json output, but I consider that for consistency should be a feature extensible for all the the output formats. Use case of this feature: A file containing all the tests executed it is needed because if there is no evidence of execution of a test we cannot control the test coverage and mantain a test execution log. In our particular project, we are interested in consuming the test execution outcome from Nuclei (for example the json output) and integrate automatically the results in a Test Management Tool like Xray.

Could you please consider this feature? We think it would be really useful for the Teams interested in using Nuclei integrated with Test Management Tools. Thanks!

GeorginaReeder commented 3 months ago

Thanks so much for your feature request @bhictor , we'll take a look into it!

We also have a Discord server, which you’re more than welcome to join. It's a great place to connect with fellow contributors and stay updated with the latest developments!

ehsandeep commented 3 months ago

@bhictor this is already supported in both format, cli and jsonl as well.

   -ms, -matcher-status  display match failure status

when -ms option is used, it shows both matched and failed matches.