Path to this page:
./
security/nuclei,
Fast and customizable vulnerability scanner
Branch: CURRENT,
Version: 3.2.8nb5,
Package name: nuclei-3.2.8nb5,
Maintainer: leotNuclei is used to send requests across targets based on a template,
leading to zero false positives and providing fast scanning on a large
number of hosts. Nuclei offers scanning for a variety of protocols,
including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless etc.
With powerful and flexible templating, Nuclei can be used to model all
kinds of security checks.
Master sites:
Filesize: 2213.803 KB
Version history: (Expand)
- (2024-09-06) Updated to version: nuclei-3.2.8nb5
- (2024-08-11) Updated to version: nuclei-3.2.8nb4
- (2024-07-03) Updated to version: nuclei-3.2.8nb3
- (2024-06-13) Updated to version: nuclei-3.2.8nb2
- (2024-06-01) Updated to version: nuclei-3.2.8nb1
- (2024-05-27) Updated to version: nuclei-3.2.8
CVS history: (Expand)
2024-09-06 20:49:02 by Benny Siegert | Files touched by this commit (180) | |
Log message:
Revbump all Go packages after go122 update
|
2024-08-11 17:57:15 by Benny Siegert | Files touched by this commit (176) | |
Log message:
Revbump all Go packages after update
|
2024-07-03 08:59:36 by Benny Siegert | Files touched by this commit (169) | |
Log message:
Revbump all Go packages after go122 security update
|
2024-06-13 15:47:13 by Benny Siegert | Files touched by this commit (169) | |
Log message:
Revbump all Go packages after go122 update
|
2024-06-01 16:03:06 by Benny Siegert | Files touched by this commit (168) |
Log message:
Revbump all Go packages, default Go version is now 1.22.
|
2024-05-27 22:34:03 by Leonardo Taccari | Files touched by this commit (3) |
Log message:
nuclei: Update to 3.2.8
Changes:
v3.2.8
- Bug Fixes
v3.2.7
- Added support for multiple search query in templates to run with
`-uncover` option
- Added `-scan-name` input support for pdcp result upload
- Bug Fixes
v3.2.6
- Fixed goroutine leaks causing spike in memory uses
- Added `-profile` and `-profile-list` option to run template using
template profile
- Added template tags list (`-tgl`) option
- Added fuzzing output enhancements
v3.2.5
- Added query variable to read param values
- Added SRV query in dns protocol
- Added response read timeout flag for network request
- Added networkpolicy to httpx probes
- Added context vars in code and multi protocol
- Added nuclei stats / chart utils
- Added support for context cancellation to engine (SDK)
- Added support for user provided catalog (SDK)
- Added embedded api for settings control in CLI modality (WIP)
- Added initial refactor for speed control (WIP)
- Bug fixes
v3.2.4
- Fixed an issue for templates with dynamic extractor + payloads edgecase
- Bug fixes
v3.2.3
- Added `-dast` option to run all and only dast (fuzz) templates
- Added `pre-condition` attribute in Code and DAST templates
- Bug fixes
|
2024-04-05 21:14:14 by Benny Siegert | Files touched by this commit (161) | |
Log message:
Revbump all Go packages after go121 update
|
2024-03-24 21:44:59 by Leonardo Taccari | Files touched by this commit (3) |
Log message:
nuclei: Update to 3.2.2
Changes:
v3.2.2
## What's Changed
* Fixed `panic: assignment to entry in nil map` and create default map
v3.2.1
## What's Changed
* Added memguardian + various optimizations
* Fixed overriding the predefined ratelimiter
* Fixed issue with javascript protocol
* Updated templates loader/parser caches (refactor)
v3.2.0
## What's Changed
### New Features
* Added fuzzing support in http protocol
* Added authenticated scaning support
* Added `-fuzz` option for loading fuzzing templates
* Added Gitea reporting
* Added transparent memoization via func annotation
* Added issue tracker JSONL output + CLI summary
* Added `self-contained` request at http request level
* Added `-payload-concurrency` option
* Added `disable-unsigned-templates` option
* Added ldap protocol enhancements
### Bug Fixes
* Fixed issue to purge cache on global callback set
* Fixed network layer should not have forceful read
* Fixed workflow to publish docs
* Fixed `stop-at-first-match` issue in http protocol
* Fixed header nil check
* Fixed issue to use maxsize in template
* Fixed issue to validate code template in workflows
* Fixed issue with temp file cleanup
* Fixed issue with nuclei loading ignored templates
* Fixed multiple bugs
### Other Changes
* Added more granular, issue tracker level filtering
* Added callback support to StandardWriter
* switched dependency for kerberos js module (ropnop/gorkb5 -> jcmturner/gokrb5)
* use system resolver first with system-resolvers
* javascript bindings + docs generation enhancements
v3.1.10
## What's Changed
* Fixed concurrent map writes in tmplexec package
* Added more `NetworkConfig` options to the SDK
v3.1.9
## What's Changed
* Added hybrid tech detection (wappalyzer + tech templates) with automatic scan \
(`-as`)
* Added projectdiscovery/useragent
* Added passive option support in SDK
* Fixed issue with long running scans at the end of scan
* Fixed issue in javascript protocol with connection pooling
v3.1.8
## What's Changed
* Fixed multiple memory leaks and optimizations
* Fixed issue with not resolving hosts from `/etc/hosts` file
* Fixed issue of array iteration in flow
* Fixed panic in smb javascript template
* Fixed an issue with case sensitive dns interaction with interactsh
* Fixed issue with reporting with optional support of `-or` option
* Fixed issue with mysql module in JavaScript
v3.1.7
## What's Changed
* Added support to upload result to existing pdpc scan using `-scan-id` option
* Fixed issue with pdcp result upload with large output file
* Fixed issue with pdcp result upload when using with env variable
v3.1.6
## What's Changed
* Added `GetServiceTicket` method to the kerberos module
* Added `GetKerberoastableUsers` method in ldap module
* Added support to dump resume files when a runner hangs
* Fixed multiple memory leaks + optimizations
* Fixed timeout issue + added custom timeout support in js protocol
* Fixed variables merge order in code templates
* Fixed issue with dynamic extractors in flow
* Fixed panic in interactsh process interaction ( nil check on compiled operators)
* Fixed panic error + support offlinehttp in flow templates
v3.1.5
## What's Changed
### Other Changes
* Fixed a bug introduced in previous version
v3.1.4
## What's Changed
### New Features
* Added `self-contained` input support to fuzzing templates
* Added support to include additional custom tags with `-as` option
* Added internal matchers (to hide match results in flow) using `internal: true`
* Added exclude list support to layer 4 via fastdialer
### Bug Fixes
* Fixed issue with dynamic extracted variable to make it reusable
* Fixed early exit issue for non zero status code in code protocol
* Fixed missing results issue in flow based template
### Other Changes
* deprecate(remove): file write in extractor using `to` attribute for security
reasons
* Using network policy everywhere
|