Hello everyone and welcome to this lesson.
So now we are going to identify and see
how nuclear I was able to detect that the
target is running nginx version, which is 1.19.0.
To do that I can see the specific template that was
used for detecting the nginx version.
So I'm going to run that specific template only which is
inside the Technologies path.
Let's go ahead and see the nginx version template
which can be seen over here nginx version
Dot yaml.
I'm going to specify hyphen debug and hyphen
V and hit enter.
By specifying hyphen debug. I am able
to see exactly what is the HTTP request that
has been sent to the Target. And what is the HTTP response
that has been received from the target?
Let me scroll up and let's inspect the HTTP
request first.
You can see HTTP get based request was
sent you can also read it from here. HTTP request sent
for that specific Target.
We can see we received a 200 okay response which
has been highlighted due to the template which
we are going to quickly look right now.
You can also see the server is nginx 1.19.0
so
we can confirm from here now that the HTTP response
that has been received from this specific Target
contains the engine X version 1.19.0 which
has been identified and given us.
You can also see there are two things which have
been highlighted over here. The first is the status which
is the status code which was matched which is 200. Okay
and a regex1 which is nginx version
1.19.0.
Let us go on the Target and let us quickly go
to the inspect.
Let's go to the network Tab and reload this target.
Let's click on the first request and let's try to
inspect the request and the response that has been
sent.
Here you can see the request headers and here you can see the response
headers as well.
If you look very carefully you can see the exact same information can
be found here as well.
That means nuclei was successfully able to identify nginx
version from the header which
is server and was able to Rejects and
extract the exact version which is 1.19.0
which gives us the output in front
of our screen as can. We seen over here.
We are going to understand how nuclei did
this with the help of the template which is nginx version
dot yaml in the
future course of action.
Wherein we are also going to understand that how you can also modify
these templates and write your own templates
for matching more specific reach
access from the HTTP response that
you get from your target.
So that's it for this lesson. Thank you.