ProjectDiscovery
Replies: 6 comments 5 replies
-
|
It looks like you're using Nuclei 2.8.3, however, Nuclei 2.8.6 is the latest release version, I'd upgrade to that and try again. |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
Have you fixed to detect the vulnerability with juice shop web? If so, please help me how to do it. Thank you |
Beta Was this translation helpful? Give feedback.
-
|
I wish I could say I could reproduce the behavior, but my template testing ground shows nuclei appears to be working as intended...
|
Beta Was this translation helpful? Give feedback.
-
|
the diffrence is thatt you are loading fuzzing templates in first. i am just giving a target and let all templates scan. just do a test with all templates with "./nuclei - target www.domain.com". and upload the result. |
Beta Was this translation helpful? Give feedback.
-
|
Second screenshot is 2583 templates from the 9.3.4 release minus the boring info/low severity ones. I have nothing more to add. Someone else should chime in. |
Beta Was this translation helpful? Give feedback.
-
|
@vikisec nuclei find vulnerability based on the template you were running, and I don't see the target website has any vulnerability that can be detected from the default set of nuclei templates; some of them can be found using fuzzing templates, and you can write more custom template to find more. |
Beta Was this translation helpful? Give feedback.
-
|
actually i tested on "http://testphp.vulnweb.com/" for target practise, this website had a lot of vulnerrabilities. i scanned it before(few months ago) and find vulnerabilities. now i also test on "https://juice-shop.herokuapp.com/#/" it also had same vulnerabilities but not finding anything on nuclei. but when i scan now all these websites are showing clean output in nuclei . i am sure something wrong with nuclei & thats why i reported. |
Beta Was this translation helpful? Give feedback.
-
|
@vikisec when I go to https://juice-shop.herokuapp.com/#/ there is no application there - just the generic Heroku page. It's possible that it was part of Heroku's free tier and thus is gone now. |
Beta Was this translation helpful? Give feedback.
-
|
I encountered the same situation as @vikisec |
Beta Was this translation helpful? Give feedback.
-
|
Have you solved it yet @vikisec |
Beta Was this translation helpful? Give feedback.
-
nuclei is not finding security vulnerabilities in a vulnerrable website. tried it with different websites but same result. refer the screen shot attached below
Beta Was this translation helpful? Give feedback.
All reactions