JSON schema for Nuclei Template YAML files. Json Format

Use this form to visualize JSON schema for Nuclei Template YAML files..

id - id of the template

.info

_

info.name - name of the template

info.description - description of the template

info.severity - severity of the template

.info.metadata - additional metadata for the template

_

.info.classification

_

info.classification.cvss-metrics - cvss metrics for the template

info.classification.cvss-score - cvss score for the template

info.remediation - remediation steps for the template

requests http requests to make

#	matchers-condition	id	name	attack	method	body	race_count	max-redirects	pipeline-concurrent-connections	pipeline-requests-per-connection	Actions
{{$index+1}}.	{{row['matchers-condition']}}	{{row.id}}	{{row.name}}	{{row.attack}}	{{row.method}}	{{row.body}}	{{row.race_count}}	{{row['max-redirects']}}	{{row['pipeline-concurrent-connections']}}	{{row['pipeline-requests-per-connection']}}

dns dns requests to make

#	matchers-condition	id	name	type	class	retries	recursion	Actions
{{$index+1}}.	{{row['matchers-condition']}}	{{row.id}}	{{row.name}}	{{row.type}}	{{row.class}}	{{row.retries}}	{{row.recursionSelected.DisplayText}}

file file requests to make

#	matchers-condition	id	max-size	no-recursive	Actions
{{$index+1}}.	{{row['matchers-condition']}}	{{row.id}}	{{row['max-size']}}	{{row['no-recursiveSelected'].DisplayText}}

network network requests to make

#	id	attack	read-size	matchers-condition	Actions
{{$index+1}}.	{{row.id}}	{{row.attack}}	{{row['read-size']}}	{{row['matchers-condition']}}

headless headless requests to make

#	id	matchers-condition	Actions
{{$index+1}}.	{{row.id}}	{{row['matchers-condition']}}

workflows list of workflows to execute

#	template	Actions
{{$index+1}}.	{{row.template}}

matchers-condition - condition between the matchers

id - id for the http request

name - name for the http request

attack - attack is the payload combination

method - method is the http request method

body - body is the http request body

matchers matchers to run on response

#	type	condition	part	negative	name	encoding	Actions
{{$index+1}}.	{{row.type}}	{{row.condition}}	{{row.part}}	{{row.negativeSelected.DisplayText}}	{{row.name}}	{{row.encoding}}

extractors extractors to run on response

#	name	type	group	attribute	part	internal	Actions
{{$index+1}}.	{{row.name}}	{{row.type}}	{{row.group}}	{{row.attribute}}	{{row.part}}	{{row.internalSelected.DisplayText}}

path path(s) for the http request

#	Values	Actions
{{$index+1}}.

raw HTTP Requests in Raw Format

#	Values	Actions
{{$index+1}}.

.payloads - payloads for the http request

_requests

.headers - headers to send with the http request

_requests

race_count - number of times to repeat request in race condition

max-redirects - maximum number of redirects to follow

pipeline-concurrent-connections - number of pipelining connections

pipeline-requests-per-connection - number of requests to send per pipelining connections

threads - threads for sending requests

max-size - maximum http response body size

cookie-reuse - optional cookie reuse enable

redirects - follow http redirects

pipeline - perform HTTP 1.1 pipelining

unsafe - use rawhttp non-strict-rfc client

race - perform race-http request coordination attack

req-condition - preserve request history

stop-at-first-match - stop at first match

type - type of matcher

condition - condition between matcher variables

part - part of response to match

negative - negative specifies if match reversed

name - name of the matcher

encoding - encoding for word field

status status to match

#	Values	Actions
{{$index+1}}.

size acceptable size for response

#	Values	Actions
{{$index+1}}.

words words to match in response

#	Values	Actions
{{$index+1}}.

regex regex to match in response

#	Values	Actions
{{$index+1}}.

binary binary patterns to match in response

#	Values	Actions
{{$index+1}}.

dsl dsl expressions to match in response

#	Values	Actions
{{$index+1}}.

name - name of the extractor

type - type of the extractor

group - group to extract from regex

attribute - optional attribute to extract from xpath

part - part of response to extract data from

internal - mark extracted value for internal variable use

regex regex to extract from part

#	Values	Actions
{{$index+1}}.

kval kval pairs to extract from response

#	Values	Actions
{{$index+1}}.

json json jq expressions to extract data

#	Values	Actions
{{$index+1}}.

xpath html xpath expressions to extract data

#	Values	Actions
{{$index+1}}.

matchers-condition - condition between the matchers

id - id of the dns request

name - hostname to make dns request for

type - type of dns request to make

class - class of DNS request

retries - retries for dns request

recursion - recurse all servers

matchers matchers to run on response

#	type	condition	part	negative	name	encoding	Actions
{{$index+1}}.	{{row.type}}	{{row.condition}}	{{row.part}}	{{row.negativeSelected.DisplayText}}	{{row.name}}	{{row.encoding}}

extractors extractors to run on response

#	name	type	group	attribute	part	internal	Actions
{{$index+1}}.	{{row.name}}	{{row.type}}	{{row.group}}	{{row.attribute}}	{{row.part}}	{{row.internalSelected.DisplayText}}

matchers-condition - condition between the matchers

id - id of the request

max-size - max size data to run request on

no-recursive - do not perform recursion

matchers matchers to run on response

#	type	condition	part	negative	name	encoding	Actions
{{$index+1}}.	{{row.type}}	{{row.condition}}	{{row.part}}	{{row.negativeSelected.DisplayText}}	{{row.name}}	{{row.encoding}}

extractors extractors to run on response

#	name	type	group	attribute	part	internal	Actions
{{$index+1}}.	{{row.name}}	{{row.type}}	{{row.group}}	{{row.attribute}}	{{row.part}}	{{row.internalSelected.DisplayText}}

extensions extensions to match

#	Values	Actions
{{$index+1}}.

denylist extensions to deny match

#	Values	Actions
{{$index+1}}.

id - id of the request

attack - attack is the payload combination

host host to send requests to

#	Values	Actions
{{$index+1}}.

.payloads - payloads for the network request

_network

read-size - size of network response to read

matchers-condition - condition between the matchers

inputs inputs for the network request

#	data	type	read	name	Actions
{{$index+1}}.

matchers matchers to run on response

#	type	condition	part	negative	name	encoding	Actions
{{$index+1}}.	{{row.type}}	{{row.condition}}	{{row.part}}	{{row.negativeSelected.DisplayText}}	{{row.name}}	{{row.encoding}}

extractors extractors to run on response

#	name	type	group	attribute	part	internal	Actions
{{$index+1}}.	{{row.name}}	{{row.type}}	{{row.group}}	{{row.attribute}}	{{row.part}}	{{row.internalSelected.DisplayText}}

id - id of the request

matchers-condition - condition between the matchers

steps list of actions for headless request

#	name	description	action	Actions
{{$index+1}}.

matchers matchers to run on response

#	type	condition	part	negative	name	encoding	Actions
{{$index+1}}.	{{row.type}}	{{row.condition}}	{{row.part}}	{{row.negativeSelected.DisplayText}}	{{row.name}}	{{row.encoding}}

extractors extractors to run on response

#	name	type	group	attribute	part	internal	Actions
{{$index+1}}.	{{row.name}}	{{row.type}}	{{row.group}}	{{row.attribute}}	{{row.part}}	{{row.internalSelected.DisplayText}}

.args - arguments for headless action

_steps

template - template/directory to execute

matchers name based template result matchers

#	type	condition	part	negative	name	encoding	Actions
{{$index+1}}.	{{row.type}}	{{row.condition}}	{{row.part}}	{{row.negativeSelected.DisplayText}}	{{row.name}}	{{row.encoding}}

subtemplates subtemplate based result matchers

#	template	Actions
{{$index+1}}.	{{row.template}}

template - template/directory to execute

matchers name based template result matchers

#	type	condition	part	negative	name	encoding	Actions
{{$index+1}}.	{{row.type}}	{{row.condition}}	{{row.part}}	{{row.negativeSelected.DisplayText}}	{{row.name}}	{{row.encoding}}

subtemplates subtemplate based result matchers

#	template	Actions
{{$index+1}}.	{{row.template}}

ToolMatter

Your Apps in Action

Use this form to visualize JSON schema for Nuclei Template YAML files..

{{repoTitle.MainEntity}}

_

_

_

requests http requests to make

dns dns requests to make

file file requests to make

network network requests to make

headless headless requests to make

workflows list of workflows to execute

{{repoTitle.MainEntity}}

matchers matchers to run on response

extractors extractors to run on response

path path(s) for the http request

raw HTTP Requests in Raw Format

_requests

_requests

{{repoTitle.MainEntity}}

status status to match

size acceptable size for response

words words to match in response

regex regex to match in response

binary binary patterns to match in response

dsl dsl expressions to match in response

{{repoTitle.MainEntity}}

regex regex to extract from part

kval kval pairs to extract from response

json json jq expressions to extract data

xpath html xpath expressions to extract data

{{repoTitle.MainEntity}}

matchers matchers to run on response

extractors extractors to run on response

{{repoTitle.MainEntity}}

matchers matchers to run on response

extractors extractors to run on response

extensions extensions to match

denylist extensions to deny match

{{repoTitle.MainEntity}}

host host to send requests to

_network

inputs inputs for the network request

matchers matchers to run on response

extractors extractors to run on response

{{repoTitle.MainEntity}}

{{repoTitle.MainEntity}}

steps list of actions for headless request

matchers matchers to run on response

extractors extractors to run on response

{{repoTitle.MainEntity}}

_steps

{{repoTitle.MainEntity}}

matchers name based template result matchers

subtemplates subtemplate based result matchers

{{repoTitle.MainEntity}}

matchers name based template result matchers

subtemplates subtemplate based result matchers