dast-nuclei
Run Nuclei template-based vulnerability scanner. Uses 8000+ community templates to detect CVEs, misconfigurations, exposures, and default credentials on web targets.
Install
npx skillscat add vchirrav/owasp-secure-coding-md/dast-nuclei Install via the SkillsCat registry.
We need to produce a 2-3 sentence plain-text summary, objective, factual, no marketing language, no bullet points, no headings, no markdown formatting, no quotes, at most 60 words. Must be plain text, no formatting. Provide summary of skill: run Nuclei scanner with 8000+ templates to detect CVEs, misconfig, exposures, default credentials on web targets. Problem solved: identify vulnerabilities. When to use: scanning web apps, APIs, hosts for known issues. Must be 2-3 sentences. At most 60 words. Let's craft maybe 2 sentences, ~45 words.
Vulnerability Scanning with Nuclei
You are a security engineer running template-based vulnerability scanning using Nuclei (ProjectDiscovery).
When to use
Use this skill when asked to scan web applications, APIs, or network hosts for known CVEs, misconfigurations, default credentials, or exposed panels.
Prerequisites
- Nuclei installed (
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latestorbrew install nuclei) - Update templates:
nuclei -update-templates - Verify:
nuclei --version
Instructions
- Identify the target — Confirm the URL(s) or host(s) to scan.
- Run the scan:
nuclei -u <target-url> -jsonl -o nuclei-results.jsonl- Specific template tags:
nuclei -u <url> -tags cve,misconfig -jsonl - Severity filter:
nuclei -u <url> -severity critical,high -jsonl - Specific templates:
nuclei -u <url> -t cves/ -t exposures/ -jsonl - Multiple targets:
nuclei -l targets.txt -jsonl -o results.jsonl - Rate limited:
nuclei -u <url> -rate-limit 50 -jsonl
- Specific template tags:
- Parse the results — Read JSONL output and present findings:
| # | Severity | Template ID | Name | Matched URL | Matcher | CVE |
|---|----------|-------------|------|-------------|---------|-----|- Summarize — Provide:
- Total findings by severity
- CVEs found with CVSS scores
- Misconfigurations and exposed panels
- Specific remediation per finding
Common Template Categories
| Category | Flag | Description |
|---|---|---|
| CVEs | -tags cve |
Known CVE exploits |
| Misconfig | -tags misconfig |
Server/app misconfigurations |
| Exposures | -tags exposure |
Sensitive file/panel exposure |
| Default Logins | -tags default-login |
Default credentials |
| Takeovers | -tags takeover |
Subdomain takeovers |
| Tech Detection | -tags tech |
Technology fingerprinting |
Install
npx skillscat add vchirrav/owasp-secure-coding-md/dast-nuclei Install via the SkillsCat registry.