Nuclei is a vulnerability scanner that leverages simple YAML-based templates. It allows design of custom vulnerability detection scenarios that mimic real-world conditions.
- Nuclei (GitHub)
- Nuclei Overview (ProjectDiscovery)
- Nuclei templates (GitHub)
Installation
Requires Golang. See Go/Golang Cheat Sheet.
git clone https://github.com/projectdiscovery/nuclei.git
cd nuclei/cmd/nuclei
go build
sudo mv nuclei /usr/local/bin/
nuclei -version
Usage
Executing nuclei on multiple targets (urls, hosts, ips, cidrs, asn):
nuclei -l targets.txt
Examples
nuclei -l targets.burp -im burp
nuclei -l openapi.yaml -im openapi
nuclei -u https://ginandjuice.shop/
nuclei -w workflows/wordpress-workflow.yaml -severity critical,high -list http_urls.txt