nuclei icon indicating copy to clipboard operation
nuclei copied to clipboard

Request ability to match based of server supported ALPN

Open yaabdala opened this issue 2 years ago • 0 comments

Please describe your feature request:

https://datatracker.ietf.org/doc/html/rfc7301

Nuclei currently supports forcing http2, but it would be very useful to be able to build templates that allow us to supply our own ALPN values (such as http2) and to match based on ALPN.

Describe the use case of this feature:

Scan a host for a specific http2 vulnerability without forcing all requests to be sent with http2. Create matches for other vulnerabilities related to ALPN

yaabdala avatar Oct 02 '23 17:10 yaabdala