nuclei icon indicating copy to clipboard operation
nuclei copied to clipboard

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the int...

Results 695 nuclei issues
Sort by recently updated
recently updated
newest added

### Proposed Change In Nuclei , we use map data type to store all variables and different types of variables at that . and for every request we create new...

Priority: Medium
Type: Enhancement

### Nuclei version: v3.1.1 ### Current Behavior: Duplicate query parameter when receive from input ![image](https://github.com/projectdiscovery/nuclei/assets/43785370/7ac8a53e-31b1-4151-9cad-8deb3d7d68ba) ### Expected Behavior: Only one parameter nothing ### Steps To Reproduce: Template: ```yaml id: fuzz-header-multiple...

Type: Bug

### Please describe your feature request: The function core.Execute should take a [`context.Context`](https://pkg.go.dev/context#Context) parameter and cancel the execution when the context is cancelled. https://github.com/projectdiscovery/nuclei/blob/1f9a065713924b28b203e2108fc76d7a1ec49068/v2/pkg/core/executors.go#L208 The current CLI implementation bypass this...

Type: Enhancement
sdk

New feature requests: 1. in yaml file,Extract the dictionary and push it into the queue for scanning the same domain name. 2. in yaml file,Extract new targets and add them...

Type: Enhancement

when I run a very simple template that contains python code it stores wrong output from the code, I use the `urlparse` from `urllib.parse` python package. here is my template:...

Type: Bug

### Nuclei version: Preliminary tests indicate that the issue exists in versions 2.9.0 to 2.9.13. However, versions 2.8.x and older have not been tested. ### Current Behavior: The len(body_2) cannot...

Type: Bug

#### Start a web server as target with: ``` bash python3 -m http.server 21 -b 127.0.0.1 ``` #### Start nuclei ``` bash nuclei -ss host-spray -duc

Type: Bug
Investigation

- Refactored the `Parse` function in `pkg/protocols/http/raw/raw.go` to simplify the URL parsing and modification logic. - Created a `cloned` variable to clone the input URL for further modifications. - Removed...

## Proposed changes - #3386 ### test ```console ✗ go run . -t ~/nuclei-templates/http/token-spray -v __ _ ____ __ _______/ /__ (_) / __ \/ / / / ___/ /...

Support stdIn to continuously input targets and execute tasks one by one instead of waiting for stdin to close. in some specific cases We integrate more intelligently with nuclei So...

Type: Enhancement