Hello everyone. So in this lesson we are
going to understand what are the commands of nuclei that
you can run onto your terminal?
As you can see when you supply nuclei hyphen H,
which is the help menu, you would be able to see the flags
that you can use along with the nuclear tool.
So what are the basic things that you require for nuclei to
run on any Target?
You can specify templates along with the
new clay command for any specific template that
you want to run onto that URL to do
that. You need to specify hyphen T in the template
path.
If you don't do that nuclei will
by default start running all the templates on the target.
That isn't a good practice because it could
create an overwhelming amount of request on the
Target that we do not want to do initially.
The second option is the workflows through which you can specify the
workflows that you want to run onto a Target that we
would see on the later part of this lesson.
So it's the Practical time and let's quickly jump
on and run nuclei on one specific URL.
So I'm onto my terminal and I'm going
to supply nuclei to a Target.
To do that. I'm going to say nuclei hyphenu and
the target name.
For testing purposes. I'm going to use test PHP
dot Woolen web.com.
Keep in mind nuclei takes the
target as a input with a protocol that means
you need to supply if the target runs HTTP or
https without which
the tool wouldn't run.
Now I'm also going to specify a specific
template or a folder or a path
of the specific templates for a category.
As we know that we have downloaded the nuclei templates
locally. I'm going to specify a path
of Technology template that I want to run onto this
specific Target and hit enter.
When I do that, this is the output that
you would see onto your screen.
As you can see nuclei has successfully detected these
three findings, which can be seen in front
of you.
This is the timestamp. This is the specific finding
which is for HTTP type.
The vulnerability that has been identified is of
informational category or informational severity.
identified on which specific Target
so we can see it was PHP which was detected on
this Target and the version of PHP is 5.6.40.
We can also see engine X is also directed on
this specific Target and the version of nginx,
which has been found is nginx 1 Point 19.0.
I'm going to stop this now.
So this is the quick and the simplest way of running
nuclei onto any specific Target.
Now we need to see how did nuclei identified
that this specific Target is running
nginx. Also. How did
it identify that it is running nginx version 1.19.0
To do that we need to inspect and see the
template that has identified this specific
issue.
We are going to see the specific template now and understand
how come nuclei was able to detect successfully the
specific version as well.
So this is it for this lesson. We'll jump onto
the next lesson and understand in depth. Thank you.