All right, so the last lecture we talked about goes spider and hack crawlers.
Now we're going to get into nuclei and I'd like to think of this as an alternative to the EMAP scanners.
Right.
Just give you another way to run vulnerability scans against targets.
You scroll down here, you can see there's a bunch of templates.
You can use the controllers template, download the templates.
Yeah, here they are.
So you can see these are some of the templates that you can use.
And you can see there's a lot of templates here and a lot of this is active.
Right.
This committee was two hours ago, two hours, two days ago.
This is a project that has a lot of support and is actively being maintained by Project Discovery.
So one of the things about nuclear that's really nice is the takeover's template.
You can see there's just a ton of takeover templates here.
For example, if we click on one of these.
You can actually see what it's doing, this is related to subdomain takeover's, right?
You can see the reference and you can see what it's doing.
It's looking for a base here along the path and it's looking for these words, right, to find these
matches.
Then it's going to tell you that this is probably vulnerable.
So there's a lot of a lot of goodness in nuclei.
I really want to show you guys how to use it because it is becoming the premier tool for bug bounties
and, you know, performing tests.
So if you scroll down, you can see it tells you what you need to do, create a template, you know,
run along your targets and it might not be very obvious and how you do this.
So let me show you guys how to get started with nuclei.
First, we're going to grab the string to install nuclei.
And you can see once you get the template, you update the templates and then we simply pass in the
file of our targets and then we put the Tactix and the name of the template.
And if you want a a reminder of what those templates are, you can see here, here are all the templates
on this guitar page.
So if we went into this folder, you can see it's basically going to run, you know, all of these checks
against the target.
We've got a 20, 20, you can look at some of these Evey's, and you can see pretty much what it's doing.
So this is a Solondz scan.
So this is a really, really, really awesome project.
I love Nuclei and I'm glad that Project Discovery is really putting a lot of work behind it.
But let's go ahead and get started with it.
So that's fired off.
Right, that finished in a few seconds.
Do we have nuclei?
Yes, we do.
And now you can see everything we can do, right?
Nuclei, flags, and there's a lot of options.
I encourage you to really, you know, get used to this to get comfortable with it, because there's
a lot of functionality here.
But what we want to do, first of all, is just update the templates.
So I'm going to type pseudo nuclei Tarcutta to update the templates, update templates, downloading
updates, nuclei, community templates.
All right.
So I think I need to take off CEDO.
All right, sweet.
So we just added a few more to our repository.
That's great.
So now we can run nuclei, right?
You could type nuclei together, people that expects this contains all of our subdomains and then you
could run some templates to see if there's any of these that'll work.
Now, do the ports that start to get everything in sight, that's how it works, guys, so that's everything
we have for the bug bounty section.
You guys have an arsenal of tools that you need to get started to start, you know, getting some some
data that you can start to report to hacker one or bug crowd.
And now in the next lecture, we're really just going to get into the Web application penetration testing
piece, you know, getting back into our cyber range and running some attacks, getting you conversant
with your last top 10 and then getting into our active directory, writing attacks.
Right.
So I'll see you guys in the next couple of sections.
It's going to be a lot of fun.
And if you have any questions, just reach out and you know, I'll try to help you the best I can.
All right.
See you guys in a little bit.