Web & API
nuclei
Template-based vulnerability scanner for known issues on in-scope web, API, and network services.
What it is
nuclei runs community and custom YAML templates for CVEs, misconfig, and exposures. Select templates that match the stack; do not dump the entire catalog at a production host. Custom templates belong in the engagement repo so findings are reproducible.
Reach for it when
After inventory, to check for known CVEs and safe misconfig checks on web, API, external, or cloud-facing services.
Watch-outs
Some templates are intrusive (DoS, default-cred sprays, file writes). Pin a template set the RoE allows, rate-limit, and review findings before you file them — template FPs are common. Never run unreviewed third-party templates that execute payloads.
Typical invocation
nuclei -l recon/httpx.txt -tags misconfig,cve -rate-limit 20 -o scans/nuclei.json
Authorized assessments only. Stay inside the rules of engagement.
Pin to a kit
Open an engagement first.
Related
- httpx
HTTP probe to confirm live web services, titles, status codes, and tech from a host list.
- Burp Suite
Intercepting proxy and scanner for authorized web and API testing, mapping, and manual review.
- katana
Crawler for JavaScript-heavy web apps and APIs to build an authorized URL inventory.
- Trivy
Scanner for container images, filesystems, IaC, and cloud misconfig in authorized build and landing-zone reviews.