search

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
https://docs.projectdiscovery.io/tools/nuclei
MIT License
20.55k stars 2.5k forks source link

How Search Using All Categories #706

Closed secfb closed 3 years ago

secfb commented 3 years ago

I want to scan with all the template on the nuclei-template. But some categories don't exactly work. Is there a way to fix this problem? Am I using the Nuclei tool incorrectly?

xargs -a nuclei.txt -L1 -I@ bash -c "nuclei -c 40 -l httpx.txt -t ~/nuclei-templates/@/ -o @_result.txt"

Categories that don't work.

headless
helpers
miscellaneous
workflows
iot
fuzzing

2

nuclei.txt

cves
vulnerabilities
exposed-panels
misconfiguration
exposures
headless
helpers
miscellaneous
takeovers
technologies
default-logins
workflows
network
iot
fuzzing
dns
geeknik commented 3 years ago

Please read this article about nuclei template exclusion. You will need to either update the .nuclei-ignore file in your nuclei-templates directory or create a custom configuration file for nuclei which doesn't exclude the tags you mentioned. You can also add the tags to your command line using the -tags flag.

For example: nuclei -t nuclei-templates/headless -tags headless -headless -target https://www.google.com/

Good luck out there.

secfb commented 3 years ago

@geeknik I know how to use it as you mentioned. It is already easy to browse as a single category. I want to scan all categories at the same time.

geeknik commented 3 years ago

I want to scan all categories at the same time.

Okay, well, I gave you links to all of the resources to enable you to do just that, so I'm not sure what else I can do to help.

ehsandeep commented 3 years ago

@secfb As geeknik mentioned, those templates are excluded as default for a reason mentioned in the linked URL, if you still want to run them, you can overwrite default ignore list with custom config file, for example:-

cat test.yaml
tags: 
  - "iot"
  - "misc"
  - "revision"

And run a scan with nuclei -config test.yaml -t miscellaneous