So in this lesson, we are going to learn about nuclei excluding
templates.
Now sometimes you do not want to run specific set
of templates on a Target. You can
exclude that based on a flag, which is hyphen exclude templates
or hyphen e t
you can also exclude specific tags that
you don't want to run on a Target.
Let's say if you don't want to test a target for xss,
you can specify hyphen e
tags as excesses and it will not
run all the excesses based templates on a
specific given Target.
You can also exclude severity to be done on a
Target.
For instance. I am not interested in identifying the
informational based vulnerabilities on a Target. I'm
only interested in identifying all the vulnerabilities apart
from info.
You can mention that in the exclude severity filter.
So it's the Practical time and let's quickly see how you can
do this practically.
The first thing that I'm going to do is I'm going to run nuclei quickly
on our Target just HTTP colon
slash slash test PHP Dot.
well in web.com
now
we are going to specify the template path.
This time I want to exclude a template. So
I'm going to say e t
we can also see this over here. So I'm going to say exclude
templates, which is by the flank,
which is ET. So you exclude a
template. You can also exclude a template directory as
well.
So I'm going to say Don't run this specific
template, which is nuclei hyphen templates.
Technologies
nginx
nginx version Dot. Yml.
and hit enter
now nuclei will by default
run all the templates apart from
the template which is nginx detect.
As you can see over here test php.wellenweb.com is
running nginx, but we are not able
to see that here in the output.
Y because we have excluded the template
from the scam.
Let's use the second feature which is exclude severity.
You can see we got a PHP detect the
template that we also created recently, but
the severity is info.
So I'm going to exclude the severity This Time by hyphen es.
I'm going to say I do not want informational severity
issues.
So previously we had around 4,058 template
that we ran but this
time it got reduced to 2617 templates
only.
Which means we are not running the template that
have informational severity.
Let's run eat access. Well this time so
I'm going to say etags Don't run.
exercise based
templates this time
run every other template apart from excesses
so you can see it has started running this templates.
But it is excluding xss-based tags
from the scan.
So I hope you guys understood how you can use the exclude filters into
nuclei while you are scanning your targets for
the pugmody programs. Thank you.