Nuclei is a tool that allows you to scan web targets for various vulnerabilities and ...

npub1mvv…h9zg

2023-09-22 16:31:35

Nuclei is a tool that allows you to scan web targets for various vulnerabilities and misconfigurations using predefined templates¹. Here are 10 powerful one-liners that you can use with Nuclei to find interesting and potentially exploitable issues:
Scan for all CVEs in a target list: cat targets.txt | nuclei -t cves/ -o results.txt

Scan for all exposed panels in a target list: cat targets.txt | nuclei -t exposed-panels/ -o results.txt

Scan for all subdomain takeovers in a target list: cat targets.txt | nuclei -t subdomain-takeover/ -o results.txt

Scan for all XSS vulnerabilities in a target list: cat targets.txt | nuclei -t xss/ -o results.txt

Scan for all SSRF vulnerabilities in a target list: cat targets.txt | nuclei -t ssrf/ -o results.txt

Scan for all SQL injection vulnerabilities in a target list: cat targets.txt | nuclei -t sqli/ -o results.txt

Scan for all open redirects in a target list: cat targets.txt | nuclei -t redirects/ -o results.txt

Scan for all misconfigured CORS policies in a target list: cat targets.txt | nuclei -t cors/ -o results.txt

Scan for all prototype pollution vulnerabilities in a target list: cat targets.txt | nuclei -t prototype-pollution/ -o results.txt

Scan for all RCE vulnerabilities in a target list: cat targets.txt | nuclei -t rce/ -o results.txt

Author Public Key

npub1mvvap0qnz3l32cphwz9876r3mnm0pz2f4704hsww7fyqkgxxzq2q4dh9zg

Seen on

Show more details

Published at

2023-09-22 16:31:35

Kind type

1 Short Text Note

Event JSON

{ "id": "0e61c1d22f7e839ef8343f24b3be5f36822017baf8999e13392a932b48da8084", "pubkey": "db19d0bc13147f156037708a7f6871dcf6f08949af9f5bc1cef2480b20c61014", "created_at": 1695400295, "kind": 1, "tags": [ [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "r", "targets.txt" ], [ "r", "results.txt" ], [ "zapraiser", "50" ] ], "content": "Nuclei is a tool that allows you to scan web targets for various vulnerabilities and misconfigurations using predefined templates¹. Here are 10 powerful one-liners that you can use with Nuclei to find interesting and potentially exploitable issues:\nScan for all CVEs in a target list: cat targets.txt | nuclei -t cves/ -o results.txt\n\n\nScan for all exposed panels in a target list: cat targets.txt | nuclei -t exposed-panels/ -o results.txt\n\n\nScan for all subdomain takeovers in a target list: cat targets.txt | nuclei -t subdomain-takeover/ -o results.txt\n\n\nScan for all XSS vulnerabilities in a target list: cat targets.txt | nuclei -t xss/ -o results.txt\n\n\nScan for all SSRF vulnerabilities in a target list: cat targets.txt | nuclei -t ssrf/ -o results.txt\n\n\nScan for all SQL injection vulnerabilities in a target list: cat targets.txt | nuclei -t sqli/ -o results.txt\n\n\nScan for all open redirects in a target list: cat targets.txt | nuclei -t redirects/ -o results.txt\n\n\nScan for all misconfigured CORS policies in a target list: cat targets.txt | nuclei -t cors/ -o results.txt\n\n\nScan for all prototype pollution vulnerabilities in a target list: cat targets.txt | nuclei -t prototype-pollution/ -o results.txt\n\n\nScan for all RCE vulnerabilities in a target list: cat targets.txt | nuclei -t rce/ -o results.txt\n", "sig": "78850ca8931076eeb25112f1c1b4ff7a2dcf0568259ebfb14009aafe861b20a94c21038f5b231526a87420caa6cfcd2c6eaa2b9e6e7b5d89f89428c271fa5708" }