nuclei
nuclei copied to clipboard
Input parameter for specifying the network interface to use
Please describe your feature request:
An input parameter similar to nmap or masscan that specifies the network interface to scan from. e.g. nmap -e eth0, masscan -e eth0
-interface, -i string network Interface to use for scan
Describe the use case of this feature:
On systems with multiple network interfaces it could be necessary to specify the proper interface to use to hit the desired targets.
Notes
Can be done with https://pkg.go.dev/net#DialTCP by specifying a specific interface ip
In general, leaving the source IP selection to the operative system is recommended. The mentioned nmap and masscan are different use cases, as they manipulate raw packets at a lower network level, whereas nuclei rely on system calls that have automatic network routing.
I opened this issue because my use case for needing this option is the same as with nmap and masscan. Nmap, masscan, and nuclei all perform poorly when "automatically" determining the proper interface to route traffic through when the scanning system has multiple interfaces and most often if one of them is a VPN tunnel. Having the option to specify the interface has been very useful.
@rwincey this is now supported in the latest release - https://github.com/projectdiscovery/nuclei/releases/tag/v2.7.7