nuclei icon indicating copy to clipboard operation
nuclei copied to clipboard

Allow passive mode to be run on responses exported from other tools

Open tomdottom opened this issue 7 months ago • 1 comments

Please describe your feature request:

Currently a passive scan can be performed on a response saved in a .txt file, or a directory of .txt files:

nucliei -passive -target ./responses/

It would useful to be able to run passive mode against responses stored in other supported formats, for example a burp export:

nuclie -passive -target burp-export.xml -input-mode burp

Describe the use case of this feature:

This would be use of use in situations such as:

  • Security audits where active scanning & fuzzing are out of scope and request/response data is collected by recording manual interaction with services, ie. when testing critical prod systems
  • Automated export and passive scans of assets produced by other tools

tomdottom avatar Jul 17 '24 12:07 tomdottom