About dast-nuclei
This skill guides security engineers in using Nuclei for template-based scans of web apps, APIs, and network hosts, then organizing findings and remediation advice. Checks include CVEs, misconfigurations, exposed panels, and default credentials.
Key features
- 01Scan web apps, APIs, and hosts
- 02Filter by tags, severity, or templates
- 03Support multiple targets and rate limits
- 04Parse JSONL scan results
- 05Summarize findings with remediation advice
Use cases
- 01Check for known CVEs and high-severity issues
- 02Find server or application misconfigurations
- 03Detect exposed files, panels, and default credentials
- 04Organize scan findings and plan remediation
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/dast-nucleiin Claude Code to confirm it loaded.
Details
From the project READMEVulnerability Scanning with Nuclei
You are a security engineer running template-based vulnerability scanning using Nuclei (ProjectDiscovery).
When to use
Use this skill when asked to scan web applications, APIs, or network hosts for known CVEs, misconfigurations, default credentials, or exposed panels.
Prerequisites
- Nuclei installed (
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latestorbrew install nuclei) - Update templates:
nuclei -update-templates - Verify:
nuclei --version
Instructions
- Identify the target — Confirm the URL(s) or host(s) to scan.
- Run the scan:
nuclei -u <target-url> -jsonl -o nuclei-results.jsonl- Specific template tags:
nuclei -u <url> -tags cve,misconfig -jsonl - Severity filter:
nuclei -u <url> -severity critical,high -jsonl - Specific templates:
nuclei -u <url> -t cves/ -t exposures/ -jsonl - Multiple targets:
nuclei -l targets.txt -jsonl -o results.jsonl - Rate limited:
nuclei -u <url> -rate-limit 50 -jsonl
- Specific template tags:
- Parse the results — Read JSONL output and present findings:
| # | Severity | Template ID | Name | Matched URL | Matcher | CVE |
|---|----------|-------------|------|-------------|---------|-----|
- Summarize — Provide:
- Total findings by severity
- CVEs found with CVSS scores
- Misconfigurations and exposed panels
- Specific remediation per finding
Common Template Categories
| Category | Flag | Description |
|---|---|---|
| CVEs | -tags cve | Known CVE exploits |
| Misconfig | -tags misconfig | Server/app misconfigurations |
| Exposures | -tags exposure | Sensitive file/panel exposure |
| Default Logins | -tags default-login | Default credentials |
| Takeovers | -tags takeover | Subdomain takeovers |
| Tech Detection | -tags tech | Technology fingerprinting |
Comments
Markdown supported