Hello everyone and welcome to this lesson.
So now we are going to learn about nuclei config
or configuration.
So what exactly is nucleic config? This can be
super useful for you? If you want to set some
configuration that should run by default when
you start using nuclei.
What does that mean? If you would to
save specific options, that could
be a Target that could be at template if you
want to exclude severity a specific templates need
to be done Etc. You can set that into
a configuration file and nuclei will always
read that file to execute itself. Isn't
that awesome? Yes.
The default path of the nuclear configuration file
is inside your home directory inside a
DOT config hidden directory nuclei called
as config Dot. Yml.
Let us see this quickly in the Practical time.
So I'm on to my terminal right now, and I'm going
to open my configuration file now.
So I'm going to say Nano.
The users in my system. The current user
is Rohit. I'm going to go inside the config hidden
folder.
For nuclei and I'm going to edit this
file, which is config Dot yaml.
For your system, you might need to change the username
that could be specific for your system.
Now when I hit enter you can see this is the nuclear configuration
file. You can specify the target you
can specify the list.
New templates automatic scan template URLs templates
workflows Etc. And that's really awesome.
So let's try to play with this the target URLs or
host to scan you can see currently this
field is been commented with a hash.
You have to remove that.
And I'm going to specify a Target here right now.
Let's say for instance. I'm going to use this target to
show the request that we are going to send.
I'm going to add this target over here.
And let's save this file.
Now I do not need to specify
any specific Target. I'm just
going to send a request right now.
Let us just simplify a template for ease because we
do not want to send a lot of requests to this specific Target.
Let's say Technologies nginx and nginx version
detect.yeml.
Let's hit enter. Let's go to the
Target and see what happened over here.
And you can see indeed there was a request which
came over here request was for nginx detection
that has come over here.
Let's try to send more requests from the Technologies folder or
the technology Spath and let's hit enter.
You can see 312 templates have
been loaded successfully. There is a
issue that has been found under the technology detection.
Let's go here and see what exactly is happening and
you can see a lot of request has been
coming over here as we can. See this is because
of the templates that have been running on this specific Target, which
can be seen from here as well. And this will keep
keep on increasing. Let me just reload this and we
would see more request coming over here in just a
matter of time which you can see over here this confirms
that nuclear is currently running and scanning those
templates on the given Target. So I
hope you guys understood I'm going to
stop this right now and we are going to go back to
over.
Configuration file to see the specific
Target that we hard coded
in our configuration file to run.
You can also add a list of
templates that needs to be done. For example, our PHP
detect.yml template the path
can be specified here, which means every time
this template would run when you
start nuclei by default on any Target. Let's
say you have identified a new issue.
You can quickly create a template for that issue Supply a
bunch of host that contains your domain name subdomain names
that would be tested automatically against this
template. Keep in mind you can supply as
many as list of templates that you want with the
help of comma as well.
I hope you guys understood how effective the nuclei
configuration can be and you should definitely
use it and Implement into your methodology. Thank
you.