• Stars
    star
    1,287
  • Rank 36,546 (Top 0.8 %)
  • Language
    Shell
  • Created over 1 year ago
  • Updated 2 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

NucleiFuzzer = Nuclei + Paramspider

NucleiFuzzer is an automation tool that combines ParamSpider and Nuclei to enhance web application security testing. It uses ParamSpider to identify potential entry points and Nuclei's templates to scan for vulnerabilities. NucleiFuzzer streamlines the process, making it easier for security professionals and web developers to detect and address security risks efficiently. Download NucleiFuzzer to protect your web applications from vulnerabilities and attacks.

Note: Nuclei + Paramspider = NucleiFuzzer

Tools included:

ParamSpider git clone https://github.com/0xKayala/ParamSpider.git

Nuclei git clone https://github.com/projectdiscovery/nuclei.git

Templates:

Fuzzing Templates git clone https://github.com/projectdiscovery/fuzzing-templates.git

Screenshot

image

Output

image image

Usage

nucleifuzzer -h

This will display help for the tool. Here are the options it supports.

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc. vulnerabilities in Web Applications

Usage: /usr/local/bin/nucleifuzzer [options]

Options:
  -h, --help              Display help information
  -d, --domain <domain>   Domain to scan for XSS, SQLi, SSRF, Open-Redirect..etc vulnerabilities

Steps to Install:

  1. git clone https://github.com/0xKayala/NucleiFuzzer.git
  2. cd NucleiFuzzer
  3. sudo chmod +x install.sh
  4. ./install.sh
  5. nucleifuzzer -h

Made by Satya Prakash | 0xKayala \

A Security Researcher and Bug Hunter \

Connect with me:

0xkayala 0xkayala 0xkayala 0xkayala @0xkayala 0xkayala

Support me:

satyakayala



More Repositories

1

NucleiScanner

NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications
Shell
306
star
2

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
Python
120
star
3

Custom-Nuclei-Templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.
JavaScript
36
star
4

A-to-Z-Vulnerabilities

This is a Kind of Dictionary which contains all kinds of Web Application and Network Security Vulnerabilities and other security concepts in an Alphabetical Order
15
star
5

NetFuzzer

NetFuzzer is a comprehensive network security assessment tool for internal and external networks, including Firewalls, Routers, Switches, Active Directory, SMBs, Printers, etc.
Shell
13
star
6

JaelesFuzzer

JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications
Shell
12
star
7

OpenRedirector

OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications
Shell
10
star
8

Shodanizer

An advanced automation tool for optimizing Shodan scans, providing swift insights into potential vulnerabilities for both IP addresses and domains
Shell
8
star
9

Recon-Tools

Recon-Tools
Shell
2
star
10

Common-Protocols

A Dictionary of Common-Protocols such as TCP, UDP, ICMP and VoIP
2
star
11

NucleiFuzzing

NucleiFuzzing
Shell
2
star
12

httpXplorer

httpXplorer is a web-based application specifically designed for efficient URL management and analysis of the projectdiscovery's httpx tools results. It allows users upload the httpx JSON output file, analyze URLs, status codes, web technologies, other information, sort the URLs based on their status codes, and focus on specific subdomains.
HTML
2
star
13

BugBase

CTF
Python
1
star
14

Networking-Key-Terminology

Networking Key Terminologies
1
star
15

Subdomain-Enumeration

Subdomain Enumeration Automation script
Shell
1
star
16

VDP-and-Responsible-Disclosure-Database

This is the List of Websites that has VDP or Responsible Disclosure Programs along with the links that contain Hall of Fame
1
star
17

CVE-2023-33246

CVE-2023-33246 - Apache RocketMQ config RCE
Python
1
star
18

freeCodeCamp-Stock-Price-Checker

Freecodecamp - Stock Price Checker
JavaScript
1
star