Sandeep Singh
Sandeep Singh
### Please describe your feature request: Similar to https://github.com/projectdiscovery/nuclei/pull/2323, auto tagging can be extended to cover other well known sources for exploits to self-tagging template based on available information in...
### Please describe your feature request: Two new helper function as shared below: ```yaml # match if the string starts with any of the provided strings {{starts_with(body, "ports:", ...)}} #...
### Please describe your feature request: Helper function to support https://github.com/projectdiscovery/mapcidr#ip-formats ### Describe the use case of this feature: To write templates including IP in various formats to fuzz/bypass multiple...
### Nuclei version: dev,master Test template: ```yaml id: aws-ssrf info: name: AWS SSRF author: test severity: critical requests: - raw: - |+ GET http://169.254.169.254/ HTTP/1.1 Host: {{Hostname}} unsafe: true matchers:...
### Please describe your feature request: For **HTTP** protocol excluding `unsafe` requests, connection reuse could be used for performance improvements.
### Nuclei version: dev,latest ### Current Behavior: Using `setmethod` action to set arbitrary method to use. ### Expected Behavior: Error: `Invalid action type: setmethod` ### Steps To Reproduce: ```yaml id:...
New helpers for DNS resolution enable writing more complex nuclei templates. - [ ] resolve - [ ] resolve_all Helper example: ```yaml {{resolve ("hackerone.com")}} # Resolve hackerone.com, returns single IPv4...
### Discussed in https://github.com/projectdiscovery/nuclei-templates/discussions/4546 Originally posted by **AaronChen0** June 6, 2022 I want to scan only xss on wordpress sites. I try something like, `nuclei -tags wordpress -s medium -etags...
### Nuclei version: dev, latest ### Current Behavior: `ip:` field is missing in **json output** with **unsafe** templates. ### Expected Behavior: Populate `ip:` field as any other output ### Steps...
### Please describe your feature request: Currently, we read everything in memory with assumption of processing samller data, which might not be the case all the time and slows down...