nuclei
nuclei copied to clipboard
Request ability to match based of server supported ALPN
Please describe your feature request:
https://datatracker.ietf.org/doc/html/rfc7301
Nuclei currently supports forcing http2, but it would be very useful to be able to build templates that allow us to supply our own ALPN values (such as http2) and to match based on ALPN.
Describe the use case of this feature:
Scan a host for a specific http2 vulnerability without forcing all requests to be sent with http2. Create matches for other vulnerabilities related to ALPN