> For the complete documentation index, see [llms.txt](https://appsecurity.gitbook.io/offensive/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://appsecurity.gitbook.io/offensive/appsec/pentest-ide/nuclei.md).

# Nuclei (Go)

Это сканнер, который конфигурируется yaml-файлами (те проверки, которые мы написали для детекта). По сути: говоришь какие проверки делать и запускаешь их по скопу

Подход как с YARA-правилами и ВПО.

git: <https://github.com/projectdiscovery/nuclei>

Дополнительный полезный материал на тему Nuclei:

* [Exploiting Race conditions with Nuclei](https://blog.projectdiscovery.io/exploiting-race-conditons/)
* [How to Scan Continuously with Nuclei?](https://dwisiswant0.medium.com/how-to-scan-continuously-with-nuclei-fcb7e9d8b8b9)
* [Nuclei - Fuzz all the things](https://blog.projectdiscovery.io/nuclei-fuzz-all-the-things/)
* [Interactsh](https://github.com/projectdiscovery/interactsh), [Intro](https://blog.projectdiscovery.io/interactsh-release/) to Interactsh, [Nuclei and Interactsh](https://blog.projectdiscovery.io/nuclei-interactsh-integration/)

## Usage

### Install

```
$ brew install nuclei
$ docker pull projectdiscovery/nuclei:latest
$ GO111MODULE=on go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei
```

### Update Templates

Сам репо с темплейтами: <https://github.com/projectdiscovery/nuclei-templates>

```
$ nuclei -update-templates
```

### Run

```
$ nuclei -h
$ cat urls.txt
https://example.com
$ nuclei -t cves/2021/some.yml -l urls.txt

```

## Tools

Запуск nuclei на лямбдах: <https://github.com/DevSecOpsDocs/nuclearpond>