retour aux outils back to tools Ducklings

Nuclei

Scanner de vulnérabilités rapide basé sur des templates. Immense bibliothèque communautaire couvrant CVEs, mauvaises configurations et expositions. Fast template-based vulnerability scanner. Enormous community library of templates covering CVEs, misconfigs, and exposures.

↗ https://github.com/projectdiscovery/nuclei

Overview

Nuclei uses YAML-based templates to detect vulnerabilities, exposures, and misconfigurations. The community template library (nuclei-templates) contains thousands of checks covering CVEs, default credentials, exposed panels, and more.

Common Usage

Update templates

nuclei -update-templates

Scan a single target

nuclei -u https://target.com

Scan from a list of URLs

nuclei -l urls.txt

Use specific tags

nuclei -u https://target.com -tags cve,exposure,default-login

Severity filter

nuclei -u https://target.com -severity critical,high

Specific template

nuclei -u https://target.com -t cves/2021/CVE-2021-44228.yaml

Scan a directory of templates

nuclei -u https://target.com -t ~/nuclei-templates/exposures/

Rate limiting

nuclei -l urls.txt -rate-limit 100 -concurrency 25

# Output to file
nuclei -l urls.txt -o results.txt
nuclei -l urls.txt -json -o results.json

Useful Template Categories

Category	Path
CVEs	`cves/`
Exposed panels	`exposed-panels/`
Exposures	`exposures/`
Default credentials	`default-logins/`
Misconfigurations	`misconfiguration/`
Network	`network/`

Help / Man page

nuclei [flags]

TARGET:
  -u URL          Single target URL
  -l FILE         File of target URLs
  -resume FILE    Resume scan from saved state

TEMPLATES:
  -t PATH         Template/directory/URL to use
  -nt             Use new templates only
  -tags TAGS      Filter by tags (comma-separated)
  -etags TAGS     Exclude templates with these tags
  -author AUTHOR  Filter by author

FILTERING:
  -severity SEV   Filter: info,low,medium,high,critical
  -es SEV         Exclude severity

PERFORMANCE:
  -c N            Concurrency (default: 25)
  -rate-limit N   Max requests/second (default: 150)
  -timeout N      Timeout in seconds (default: 10)
  -retries N      Request retries (default: 1)

OUTPUT:
  -o FILE         Output file
  -json           JSON output
  -silent         Only show findings
  -v              Verbose

HTTP:
  -H HEADER       Custom header
  -proxy URL      HTTP proxy

Vue d’ensemble

Nuclei utilise des templates YAML pour détecter les vulnérabilités, expositions et mauvaises configurations. La bibliothèque communautaire (nuclei-templates) contient des milliers de vérifications couvrant les CVEs, les credentials par défaut, les panneaux exposés et plus encore.

Utilisation courante

# Mettre à jour les templates
nuclei -update-templates

# Scanner une cible unique
nuclei -u https://target.com

# Scanner depuis une liste d'URLs
nuclei -l urls.txt

# Utiliser des tags spécifiques
nuclei -u https://target.com -tags cve,exposure,default-login

# Filtre de sévérité
nuclei -u https://target.com -severity critical,high

# Template spécifique
nuclei -u https://target.com -t cves/2021/CVE-2021-44228.yaml

# Scanner un répertoire de templates
nuclei -u https://target.com -t ~/nuclei-templates/exposures/

# Limitation de débit
nuclei -l urls.txt -rate-limit 100 -concurrency 25

# Sortie vers fichier
nuclei -l urls.txt -o results.txt
nuclei -l urls.txt -json -o results.json

Catégories de templates utiles

Catégorie	Chemin
CVEs	`cves/`
Panneaux exposés	`exposed-panels/`
Expositions	`exposures/`
Credentials par défaut	`default-logins/`
Mauvaises configurations	`misconfiguration/`
Réseau	`network/`

Aide / Page de manuel

nuclei [flags]

TARGET:
  -u URL          Single target URL
  -l FILE         File of target URLs
  -resume FILE    Resume scan from saved state

TEMPLATES:
  -t PATH         Template/directory/URL to use
  -nt             Use new templates only
  -tags TAGS      Filter by tags (comma-separated)
  -etags TAGS     Exclude templates with these tags
  -author AUTHOR  Filter by author

FILTERING:
  -severity SEV   Filter: info,low,medium,high,critical
  -es SEV         Exclude severity

PERFORMANCE:
  -c N            Concurrency (default: 25)
  -rate-limit N   Max requests/second (default: 150)
  -timeout N      Timeout in seconds (default: 10)
  -retries N      Request retries (default: 1)

OUTPUT:
  -o FILE         Output file
  -json           JSON output
  -silent         Only show findings
  -v              Verbose

HTTP:
  -H HEADER       Custom header
  -proxy URL      HTTP proxy