Vulnerability Scanners

Nuclei

Nuclei is a fast, customizable vulnerability scanner that uses templates to automate security testing across web applications and networks. It is open-source based on YAML-written templates (/home/x7331/.local/nuclei-templates).

Nuclei expects a socket to be passed, thus, a port scan needs to precede it:

# Update db
nuclei -ut

# List templates
nuclei -tl

# Specify a target host
nuclei -u <target-ip>

# Specify a target file
nuclei -l <file>

# Run with a custom template
nuclei -u <target-ip> -t <template-name>

# Run with tags
nuclei -u <target-ip> -tags apache,git

Nuclei has a -silent parameter which shows only the findings in the output which makes parsing the output easier:

Nikto