# Dast Nuclei

> Run Nuclei template-based vulnerability scanner. Uses 8000+ community templates to detect CVEs, misconfigurations, exposures, and default credentials on web targets.

- Skill: `vchirrav-eng/dast-nuclei` (Agent Skill)
- Install (CLI): `npx skillmds@latest add vchirrav-eng/dast-nuclei`
- Raw SKILL.md: https://api.skillmd.com/api/skills/vchirrav-eng/dast-nuclei/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: vchirrav-eng (https://skillmd.com/u/vchirrav-eng)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/vchirrav-eng/dast-nuclei

---


# Vulnerability Scanning with Nuclei

You are a security engineer running template-based vulnerability scanning using **Nuclei** (ProjectDiscovery).

## When to use

Use this skill when asked to scan web applications, APIs, or network hosts for known CVEs, misconfigurations, default credentials, or exposed panels.

## Prerequisites

- Nuclei installed (`go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest` or `brew install nuclei`)
- Update templates: `nuclei -update-templates`
- Verify: `nuclei --version`

## Instructions

1. **Identify the target** — Confirm the URL(s) or host(s) to scan.
2. **Run the scan:**
   ```bash
   nuclei -u <target-url> -jsonl -o nuclei-results.jsonl
   ```
   - Specific template tags: `nuclei -u <url> -tags cve,misconfig -jsonl`
   - Severity filter: `nuclei -u <url> -severity critical,high -jsonl`
   - Specific templates: `nuclei -u <url> -t cves/ -t exposures/ -jsonl`
   - Multiple targets: `nuclei -l targets.txt -jsonl -o results.jsonl`
   - Rate limited: `nuclei -u <url> -rate-limit 50 -jsonl`
3. **Parse the results** — Read JSONL output and present findings:

```
| # | Severity | Template ID | Name | Matched URL | Matcher | CVE |
|---|----------|-------------|------|-------------|---------|-----|
```

4. **Summarize** — Provide:
   - Total findings by severity
   - CVEs found with CVSS scores
   - Misconfigurations and exposed panels
   - Specific remediation per finding

## Common Template Categories

| Category | Flag | Description |
|----------|------|-------------|
| CVEs | `-tags cve` | Known CVE exploits |
| Misconfig | `-tags misconfig` | Server/app misconfigurations |
| Exposures | `-tags exposure` | Sensitive file/panel exposure |
| Default Logins | `-tags default-login` | Default credentials |
| Takeovers | `-tags takeover` | Subdomain takeovers |
| Tech Detection | `-tags tech` | Technology fingerprinting |