nuclei
nuclei copied to clipboard
Problem in url list process in nuclei
Nuclei version: 2.7.5
Current Behavior:
I think your amazing "nuclei" tool got some problem when pipe url list, because: when you give url list (for example a list which contains 500 URLs) after process url's, it dose not return any information!
but when you pip URLs one by one ( echo "https://google.com" | nuclei ) to nuclei, it work !?
Steps To Reproduce:
N.B: Urls.txt file contain 500 line or more...
- cat urls.txt | nuclei
- it doesn't return any result in almost
- but! if you run :
echo "https://google.com" | nuclei - nuclei work correctly
@Huntlikepro
What do you mean by doesn't return any result? Is there any error message you've received? Have you tried running the scan with -verbose output and/or -json? Could you share a screenshot maybe with the command you've used, together with the output?
Edit:3
I have now tinkered like mad on this issue by running Nuclei with many different parameters:
nuclei -l mylist.txt -es info,low -retries 1-3 -bs 1-35 -c 1-35
- First of all i did not have any hits, i resolved this by editing the version of
/root/.config/nuclei/.templates-config.jsonand rerun thenuclei- the hash updated and now i sporadically find things when running against a list of hosts. - Then i started to tinker with the
-retries -bs -c, started with default values and ran 20-25 scan of each untill i hit the numbers that gave the most results for me (which seems to be-bs 10).
mylist.txt contains 170 subdomains but no matter what i do not get any consistency when running a list, EVERY run i get different amount of results. No matter the combinations. So, i cant really trust running a list through nuclei, running each domain individually gives me same result each time tho but is timeconsuming.
Note that i have no errors when running with -verbose
Edit:4
Well, my theory worked somewhat until i started testing running 1 single domain over and over. Getting different result each time:

This makes me believe its due to the amount of templates loaded (i run all default as you can see).
Any advice welcome.
Usually, this is related to network stability. I'm unable to reproduce the issue against google.com. Would it be possible to share one of the domains generating different results each time (e.g., via discord to @pdteam) so that we can investigate?
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.