nuclei-scan

Nuclei Scan — Template-Based Vulnerability Assessment

Run template-based vulnerability scanning using Nuclei against an authorized target.

Decision Loop: In-the-Loop (target approval required before scanning)

Safety — MUST Confirm Before Scanning

Before executing ANY scan:

1. Display the target and template set to the user
2. Ask for explicit confirmation: "ยืนยันการสแกนเป้าหมาย (Confirm scan target): <target>?"
3. Do NOT proceed without user approval

Arguments

Parse the user's input for:

• <target> — URL or IP (REQUIRED)
• --mode — Template selection mode (default: ncsa)
• --templates — Custom template path override

Scan Modes

Mode	Templates	Description
ncsa	scanner_configs/ncsa/*.yaml	NCSA Website Security Standard v1.0 templates (6 custom)
full	All community templates	Full Nuclei template library
critical	-s critical	Critical severity only
high	-s critical,high	Critical + High severity

NCSA Templates

If you have custom NCSA templates, set the NUCLEI_NCSA_TEMPLATES environment variable:

export NUCLEI_NCSA_TEMPLATES="/path/to/your/ncsa-templates/"

Check for existing NCSA templates:

ls -la ${NUCLEI_NCSA_TEMPLATES:-./scanner_configs/ncsa/}*.yaml 2>/dev/null || echo "No NCSA templates found — will use community templates"

Execution

After user confirmation, run:

NCSA_TEMPLATES="${NUCLEI_NCSA_TEMPLATES:-./scanner_configs/ncsa/}"

case "<mode>" in
  ncsa)
    nuclei -u "<target>" -t "${NCSA_TEMPLATES}" -jsonl -o /tmp/nuclei-output.jsonl 2>&1 | tee /tmp/nuclei-console.txt
    ;;
  full)
    nuclei -u "<target>" -jsonl -o /tmp/nuclei-output.jsonl 2>&1 | tee /tmp/nuclei-console.txt
    ;;
  critical)
    nuclei -u "<target>" -s critical -jsonl -o /tmp/nuclei-output.jsonl 2>&1 | tee /tmp/nuclei-console.txt
    ;;
  high)
    nuclei -u "<target>" -s critical,high -jsonl -o /tmp/nuclei-output.jsonl 2>&1 | tee /tmp/nuclei-console.txt
    ;;
esac