security enabled verified low v1.0.0

nuclei

Fast, template-based vulnerability scanner from ProjectDiscovery that uses YAML templates to scan for CVEs, misconfigurations, and security issues.

📋 Live Preview 
nuclei {flags} {target}
📎 flags 📎 target 
nuclei {flags} {target}

Sandbox: execFile · Timeout: 600s

Capabilities

web.scan.vulnerability
security.scan.cve
web.scan.misconfiguration
security.scan.automated
network.discovery.vulnerability

Parameters

Name Type Required Default Description Aliases
target string No - Single target URL -u, --target
list string No - File with list of targets -l, --list
templates string No - Template or directory of templates to run -t, --templates
severity string No - Filter by severity (info, low, medium, high, critical) -s, --severity
tags string No - Filter by template tags -tags
flag-json boolean No - Output as JSON lines -j, --json
flag-o string No - Output file path -o, --output
flag-rate-limit integer No - Maximum requests per second -rl, --rate-limit
flag-bulk-size integer No - Max targets to process in parallel -bs, --bulk-size
flag-stats boolean No - Display scan statistics -stats
flag-verbose boolean No - Verbose output -v, --verbose

Artifacts

TypeDescriptionMIMESchemaTrust
report.jsonNuclei scan results as JSONapplication/json-verified
report.txtNuclei scan results as texttext/plain-verified

Contract

Inputs

network.target.url

Single target URL

network.target.domain.list

File with list of targets

network.target.ip

Target IP address

Outputs

report.json

Scan findings in JSON format

report.txt

Scan findings in text format

Side effects: network_trafficnetwork_traffic

Workflow Edges

Produces

report.jsonreport.txt

Consumes

network.target.urlnetwork.target.domain.listnetwork.target.ip

Resource Profile

ResourceValue
CPUmedium
Memory256 MB
Networkhigh
Disk I/Olow

Examples

Scan a single target with all templates

nuclei -u https://example.com

Run only CVE templates on a target

nuclei -u https://example.com -t cves/

Scan multiple targets from a file

nuclei -l urls.txt -json -o results.json

Filter by severity

nuclei -u https://example.com -severity critical,high

Scan using specific tags

nuclei -u https://example.com -tags rce,oauth

Pipeline from httpx

subfinder -d example.com | httpx -silent | nuclei -t cves/ -json

Documentation

nuclei — Template-Based Vulnerability Scanner

nuclei is a fast vulnerability scanner from ProjectDiscovery that sends requests across targets using customizable YAML templates, enabling rapid and extensible scanning for CVEs, misconfigurations, exposed panels, and security issues.

Template Categories

Directory Purpose
cves/ CVE-identified vulnerabilities
exposed-panels/ Admin/login panels
misconfiguration/ Security misconfigurations
technologies/ Technology fingerprinting
default-logins/ Default credentials

Pipeline Scanning

# Full recon pipeline
subfinder -d target.com | httpx -silent | nuclei -t cves/ -json

# Scan from live hosts only
cat live-hosts.txt | nuclei -t ~/nuclei-templates/ -severity critical,high

Common Scans

# Scan a single URL
nuclei -u https://example.com

# Run specific template categories
nuclei -u https://example.com -t cves/ -t misconfiguration/

# Output results
nuclei -l targets.txt -json -o scan-results.json

Related Tools

httpxkatanasubfindernikto

References