← retour aux outils back to tools

# Nuclei

Scanner de vulnérabilités rapide basé sur des templates. Immense bibliothèque communautaire couvrant CVEs, mauvaises configurations et expositions. Fast template-based vulnerability scanner. Enormous community library of templates covering CVEs, misconfigs, and exposures.

↗ https://github.com/projectdiscovery/nuclei

## Overview

Nuclei uses YAML-based templates to detect vulnerabilities, exposures, and misconfigurations. The community template library (nuclei-templates) contains thousands of checks covering CVEs, default credentials, exposed panels, and more.

## Common Usage

Update templates

    nuclei -update-templates

Scan a single target

    nuclei -u https://target.com

Scan from a list of URLs

    nuclei -l urls.txt

Use specific tags

    nuclei -u https://target.com -tags cve,exposure,default-login

Severity filter

    nuclei -u https://target.com -severity critical,high

Specific template

    nuclei -u https://target.com -t cves/2021/CVE-2021-44228.yaml

Scan a directory of templates

    nuclei -u https://target.com -t ~/nuclei-templates/exposures/

Rate limiting

    nuclei -l urls.txt -rate-limit 100 -concurrency 25

    # Output to file
    nuclei -l urls.txt -o results.txt
    nuclei -l urls.txt -json -o results.json

## Useful Template Categories

Category | Path
--- | ---
CVEs | `cves/`
Exposed panels | `exposed-panels/`
Exposures | `exposures/`
Default credentials | `default-logins/`
Misconfigurations | `misconfiguration/`
Network | `network/`

Help / Man page

    nuclei [flags]

    TARGET:
      -u URL          Single target URL
      -l FILE         File of target URLs
      -resume FILE    Resume scan from saved state

    TEMPLATES:
      -t PATH         Template/directory/URL to use
      -nt             Use new templates only
      -tags TAGS      Filter by tags (comma-separated)
      -etags TAGS     Exclude templates with these tags
      -author AUTHOR  Filter by author

    FILTERING:
      -severity SEV   Filter: info,low,medium,high,critical
      -es SEV         Exclude severity

    PERFORMANCE:
      -c N            Concurrency (default: 25)
      -rate-limit N   Max requests/second (default: 150)
      -timeout N      Timeout in seconds (default: 10)
      -retries N      Request retries (default: 1)

    OUTPUT:
      -o FILE         Output file
      -json           JSON output
      -silent         Only show findings
      -v              Verbose

    HTTP:
      -H HEADER       Custom header
      -proxy URL      HTTP proxy

## Vue d’ensemble

Nuclei utilise des templates YAML pour détecter les vulnérabilités, expositions et mauvaises configurations. La bibliothèque communautaire (nuclei-templates) contient des milliers de vérifications couvrant les CVEs, les credentials par défaut, les panneaux exposés et plus encore.

## Utilisation courante

    # Mettre à jour les templates
    nuclei -update-templates

    # Scanner une cible unique
    nuclei -u https://target.com

    # Scanner depuis une liste d'URLs
    nuclei -l urls.txt

    # Utiliser des tags spécifiques
    nuclei -u https://target.com -tags cve,exposure,default-login

    # Filtre de sévérité
    nuclei -u https://target.com -severity critical,high

    # Template spécifique
    nuclei -u https://target.com -t cves/2021/CVE-2021-44228.yaml

    # Scanner un répertoire de templates
    nuclei -u https://target.com -t ~/nuclei-templates/exposures/

    # Limitation de débit
    nuclei -l urls.txt -rate-limit 100 -concurrency 25

    # Sortie vers fichier
    nuclei -l urls.txt -o results.txt
    nuclei -l urls.txt -json -o results.json

## Catégories de templates utiles

Catégorie | Chemin
--- | ---
CVEs | `cves/`
Panneaux exposés | `exposed-panels/`
Expositions | `exposures/`
Credentials par défaut | `default-logins/`
Mauvaises configurations | `misconfiguration/`
Réseau | `network/`

Aide / Page de manuel

    nuclei [flags]

    TARGET:
      -u URL          Single target URL
      -l FILE         File of target URLs
      -resume FILE    Resume scan from saved state

    TEMPLATES:
      -t PATH         Template/directory/URL to use
      -nt             Use new templates only
      -tags TAGS      Filter by tags (comma-separated)
      -etags TAGS     Exclude templates with these tags
      -author AUTHOR  Filter by author

    FILTERING:
      -severity SEV   Filter: info,low,medium,high,critical
      -es SEV         Exclude severity

    PERFORMANCE:
      -c N            Concurrency (default: 25)
      -rate-limit N   Max requests/second (default: 150)
      -timeout N      Timeout in seconds (default: 10)
      -retries N      Request retries (default: 1)

    OUTPUT:
      -o FILE         Output file
      -json           JSON output
      -silent         Only show findings
      -v              Verbose

    HTTP:
      -H HEADER       Custom header
      -proxy URL      HTTP proxy