Nuclei

Nuclei runs thousands of community templates against a URL and tells you which CVEs or insecure settings it detects. It is great for quickly identifying the CVE of a product you do not know.

Platform: Linux · Windows · macOS (Go)
Official site: github.com/projectdiscovery/nuclei
On HTB: 2 machines

Install

sudo apt install nuclei

Nuclei cheat sheet

Your values Saved in this browser and applied to every cheatsheet.

Domain

4 commands

Usage

Update the templates

nuclei -ut

Full scan of a site

nuclei -u http://box.htb

Only critical and high CVEs

nuclei -u http://box.htb -tags cve -severity critical,high

Several URLs from a file

nuclei -l urls.txt -o resultados.txt

HTB machines where Nuclei is used

Taken from the chapters of IppSec videos where Nuclei shows up. The ▶ link jumps to the minute of that part.

Hide the ones I have done

Reactor

easy linux

▶ Public CVE exploitation (foothold)

Soulmate

easy linux

▶ Public CVE exploitation (foothold)

Guides that use Nuclei

Exploiting a public CVE: finding, reading and fixing exploits from searchsploit and GitHub 4 min read From a version number to a shell: identify the software, search searchsploit, GitHub and nuclei, read the exploit before running it and fix the broken ones.