Vulnerability Scanner

2 months ago 33

BOOK THIS SPACE FOR AD

ARTICLE AD

Scanning

I will be running a scan against a single host that contains vulnerabilities. The test URL is (http://honey.scanme.sh/) If you want to scan multiple hosts, you can. To see all the available flags type the following.

Single Host Scan
nuclei -u http://honey.scanme.sh/

Multiple Hosts Scan
nuclei -l staging-apps.txt

All Available Flags
nuclei -h

The following snippet shows the structure and example output result. The template ID is the YAML rule. The protocol and severity are evident. The output displays the impacted host, and if extractors are configured in the YAML rule, it will also display an extracted value.

Structure
[template-id] [protocol] [severity] output (impacted host, extracted value*)

Example
[mida-eframework-xss] [http] [high] http://honey.scanme.sh/MUP/

Summary

The Nuclei tool is an open-source vulnerability scanner that uses YAML rules to detect vulnerabilities. If you are interested in contributing to the project or wish to join the Discord you can.

Read Entire Article