Method run

modules/webscanner/nuclei.py:40–137

Run Nuclei scan on target.

(self, target: Target)

    async def run(self, target: Target) -> ScanResult:
        """Run Nuclei scan on target."""
        result = self.create_result(target)

        if not self.nuclei_available:
            result.errors.append("Nuclei not found. Install from https://github.com/projectdiscovery/nuclei")
            result.success = False
            result.complete()
            return result

        url = self._build_url(target)
        self.logger.info(f"Starting Nuclei scan on {url}")

        with tempfile.NamedTemporaryFile(suffix=".json", delete=False) as f:
            output_file = f.name

        try:
            cmd = [
                "nuclei",
                "-u", url,
                "-json-export", output_file,
                "-silent",
            ]

            # Add severity filter
            if self.severity_filter:
                cmd.extend(["-severity", ",".join(self.severity_filter)])

            # Add specific templates
            if self.templates:
                for t in self.templates:
                    cmd.extend(["-t", t])

            # Add tags
            if self.tags:
                cmd.extend(["-tags", ",".join(self.tags)])

            self.logger.info(f"Running: {' '.join(cmd)}")

            proc = await asyncio.create_subprocess_exec(
                *cmd,
                stdout=asyncio.subprocess.PIPE,
                stderr=asyncio.subprocess.PIPE,
            )

            stdout, stderr = await proc.communicate()

            # Parse results
            findings = []
            if os.path.exists(output_file) and os.path.getsize(output_file) > 0:
                with open(output_file) as f:
                    for line in f:
                        try:
                            finding = json.loads(line.strip())
                            findings.append(finding)
                        except json.JSONDecodeError:
                            continue

            result.raw_data["findings"] = findings