NucleiFuzzer is an automated tool that combines ParamSpider and Nuclei to enhance web application security auditing. It uses ParamSpider to detect potential entry points and Nuclei templates to scan for vulnerabilities.
NucleiFuzzer simplifies the procedure, making it easier for security professionals and web application developers to effectively identify and address security risks.
Note: Nuclei + Paramspider = NucleiFuzzer
Tools included:
ParamSpider git clone https://github.com/0xKayala/ParamSpider.git
Nuclei git clone https://github.com/projectdiscovery/nuclei.git
templates:
Fuzzing Templates git clone https://github.com/projectdiscovery/fuzzing-templates.git
Application Screenshots
Use
nucleifuzzer -h
NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc. vulnerabilities in Web Applications
Usage: /usr/local/bin/nucleifuzzer [options]
Options:
-h, --help Display help information
-d, --domain Domain to scan for XSS, SQLi, SSRF, Open-Redirect..etc vulnerabilities
Installation
- git clone https://github.com/0xKayala/NucleiFuzzer.git
- cd NucleiFuzzer
- sudo chmod +x install. Sh
- ./install.sh
- nuclearfuzzer -h
You can download it program from here.