Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/0xKayala/NucleiFuzzer

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications
https://github.com/0xKayala/NucleiFuzzer

fuzzing-templates nuclei nuclei-templates nucleifuzzer

Last synced: 3 months ago
JSON representation

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

Host: GitHub
URL: https://github.com/0xKayala/NucleiFuzzer
Owner: 0xKayala
Created: 2023-05-22T16:21:15.000Z (over 1 year ago)
Default Branch: main
Last Pushed: 2024-09-08T15:34:17.000Z (3 months ago)
Last Synced: 2024-09-08T17:37:56.877Z (3 months ago)
Topics: fuzzing-templates, nuclei, nuclei-templates, nucleifuzzer
Language: Shell
Homepage: https://github.com/0xKayala/NucleiFuzzer
Size: 115 KB
Stars: 1,232
Watchers: 14
Forks: 185
Open Issues: 1
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml

Awesome Lists containing this project

awesome-hacking-lists - 0xKayala/NucleiFuzzer - NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications (Shell)

README

NucleiFuzzer = Nuclei + Paramspider

`NucleiFuzzer` is an automation tool that combines `ParamSpider` and `Nuclei` to enhance web application security testing. It uses `ParamSpider` to identify potential entry points and `Nuclei` fuzzing templates to scan for vulnerabilities. `NucleiFuzzer` streamlines the process, making it easier for security professionals and web developers to detect and address security risks efficiently. Download `NucleiFuzzer` to protect your web applications from vulnerabilities and attacks.

**Note:** `Nuclei` + `Paramspider` = `NucleiFuzzer`

**Important:** Make sure the tools `Nuclei`, `httpx` & `Paramspider` are installed on your machine and executing correctly to use the `NucleiFuzzer` without any issues.

### Tools included:
[ParamSpider](https://github.com/0xKayala/ParamSpider) `git clone https://github.com/0xKayala/ParamSpider.git`

[Nuclei](https://github.com/projectdiscovery/nuclei) `git clone https://github.com/projectdiscovery/nuclei.git`

### Templates:
[Fuzzing Templates](https://github.com/0xKayala/fuzzing-templates) `git clone https://github.com/0xKayala/fuzzing-templates.git`

## Screenshot
![image](https://github.com/0xKayala/NucleiFuzzer/assets/16838353/d29d18e2-e5b4-4f5f-b1fd-351167fa7c31)

## Output
![image](https://github.com/0xKayala/NucleiFuzzer/assets/16838353/16c8eac9-6924-4196-ae71-70e98057e47c)
![image](https://github.com/0xKayala/NucleiFuzzer/assets/16838353/2b204838-d3ed-4408-9920-ba99a9c528a2)
![image](https://github.com/0xKayala/NucleiFuzzer/assets/16838353/22943a3d-7fde-4d6b-a84a-62dc9793bdbc)
![image](https://github.com/0xKayala/NucleiFuzzer/assets/16838353/304f8113-6b65-4ae8-8d23-34bcee750b73)

## Usage

```sh
nf -h
```

This will display help for the tool. Here are the options it supports.

```console
NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc. vulnerabilities in Web Applications

Usage: /usr/bin/nf [options]

Options:
-h, --help Display help information
-d, --domain Domain to scan for XSS, SQLi, SSRF, Open-Redirect..etc vulnerabilities
-f, --file File containing multiple domains/URLs to scan
```

## Installation:

To install `NucleiFuzzer`, follow these steps:

```
git clone https://github.com/0xKayala/NucleiFuzzer.git && cd NucleiFuzzer && sudo chmod +x install.sh && ./install.sh && nf -h && cd ..
```

## Examples:

Here are a few examples of how to use NucleiFuzzer:

- Run `NucleiFuzzer` on a single domain:

```sh
nf -d example.com
```

- Run `NucleiFuzzer` on multiple domains from a file:

```sh
nf -f file.txt
```

## Practical Demonstration:

For a Practical Demonstration of the NucleiFuzzer tool see the below video 👇

[](https://www.youtube.com/embed/2K2gTCHt6kg)