Nuclei 介绍

在Nuclei-POC的GitHub仓库中，模板被组织在不同的目录中，每个目录包含了针对特定类型的安全漏洞或特定CMS（内容管理系统）的POC模板。以下是一些适合不同CMS的Nuclei-POC模板文件的例子：

1. WordPress: 目录下可能包含针对WordPress核心或插件的CVE漏洞的模板。
2. Joomla: 目录下可能包含针对Joomla核心或扩展的CVE漏洞的模板。
3. Drupal: 目录下可能包含针对Drupal核心或模块的CVE漏洞的模板。
4. Magento: 目录下可能包含针对Magento核心或插件的CVE漏洞的模板。

要查找特定CMS的模板，您可以在Nuclei-POC的GitHub仓库中使用搜索功能，或者直接浏览相关目录。每个模板文件通常都会在文件头部的注释中说明它适用于哪些版本的CMS或特定的漏洞。Nuclei-POC的官方GitHub仓库地址是：

 

https://github.com/projectdiscovery/nuclei-templates

在使用这些模板进行安全测试时，请确保您有权扫描目标系统，并遵守所有相关的法律和道德准则。在生产环境中部署此类工具之前，应进行充分的安全评估和风险管理。

 

Here are some examples how to use the templates:

• To scan for all known vulnerabilities in WordPress, you can run the following command:

nuclei -t github/topscoder/nuclei-wordfence-cve -u https://target.com

 

• To scan for a CVE specific vulnerability, you can run the following command:

nuclei -t github/topscoder/nuclei-wordfence-cve -template-id cve-2023-32961 -u https://target.com

 

• To scan only for critical vulnerabilities, you can run the following command:

nuclei -t github/topscoder/nuclei-wordfence-cve -severity critical -u https://target.com

 

• To scan only for WordPress core vulnerabilities, you can run the following command:

nuclei -t github/topscoder/nuclei-wordfence-cve -tags wp-core -u https://target.com

 

• To scan only for WordPress plugin vulnerabilities, you can run the following command:

nuclei -t github/topscoder/nuclei-wordfence-cve -tags wp-plugin -u https://target.com

 

• To scan only for WordPress theme vulnerabilities, you can run the following command:

nuclei -t github/topscoder/nuclei-wordfence-cve -tags wp-theme -u https://target.com

 

• To go wild, you can combine and combine and combine:

nuclei -t github/topscoder/nuclei-wordfence-cve -tags wp-plugin,wp-theme -severity critical,high

 

• To go even wilder, you can use the template condition flag (-tc) that allows complex expressions like the following ones:

nuclei -t github/topscoder/nuclei-wordfence-cve -template-condition "contains(to_lower(name),'cross-site scripting') || contains(to_upper(name),'XSS')" -u https://target.com
nuclei -t github/topscoder/nuclei-wordfence-cve -template-condition "contains(to_lower(name),'sql injection') || contains(to_lower(description),'sql injection')" -u https://target.com
nuclei -t github/topscoder/nuclei-wordfence-cve -template-condition "contains(to_lower(name),'file inclusion') || contains(to_lower(description),'file inclusion')" -u https://target.com
nuclei -t github/topscoder/nuclei-wordfence-cve -template-condition "contains(to_upper(name),'CSRF') || contains(to_upper(description),'CSRF')" -u https://target.com