🔝 How to use Nuclei for vulnerability scanning
Nuclei is a tool developed by Project Discovery team, as they say it is a Fast and customizable vulnerability scanner based on simple YAML based DSL.
It is similar to Nmap NSE script engine but much more easy to develop as only uses YAML files.
First of all, in order to install nuclei you need to download the nuclei executable or compile from the original sources: https://github.com/projectdiscovery/nuclei
Once ready, this is some quick list of commands to execute:
Search for sensitive API disclosures:
nuclei -u $URL -t exposures/apis/
Look all plugins under exposures:
Scan for WordPress vulnerabilities:
nuclei -u $URL -t vulnerabilities/wordpress/