Oct 4, 2022

Running Nuclei on Docker with Multipass

Here's the easiest way to run nuclei with Multipass.


PS> multipass launch docker -n tiger

PS> multipass shell tiger

ubuntu@tiger:~$ docker pull projectdiscovery/nuclei:latest

ubuntu@tiger:~$ docker images

ubuntu@tiger:~$ docker run -i -t bb2be5c37d25 --version

ubuntu@tiger:~$ docker run -i -t bb2be5c37d25 -update

ubuntu@tiger:~$ docker run -i -t bb2be5c37d25 -ut 

ubuntu@tiger:~$ echo  http://172.22.64.197 > urls.txt

ubuntu@tiger:~$ echo  http://172.22.64.197:8080 >> urls.txt

ubuntu@tiger:~$ git clone https://github.com/projectdiscovery/nuclei-templates

ubuntu@tiger:~$ cat urls.txt | docker run -v /home/ubuntu/nuclei-templates:/go/src/app/ -i projectdiscovery/nuclei  -t ./technologies/nginx/nginx-version.yaml  -t ./technologies/apache/apache-detect.yaml   > results.txt

ubuntu@tiger:~$ more results.txt
+-------+-------+---------+
| TOTAL | ADDED | REMOVED |
+-------+-------+---------+
|  4306 |    40 |       0 |
+-------+-------+---------+
[2022-10-04 10:16:00] [apache-detect] [http] [info] http://172.22.64.197:8080 [Apache/2.4.52 (Ubuntu)]
[2022-10-04 10:16:00] [nginx-version] [http] [info] http://172.22.64.197 [nginx/1.18.0] 

ubuntu@tiger:~$ cat urls.txt | docker run -v /home/ubuntu/nuclei-templates:/go/src/app/ -i projectdiscovery/nuclei  > result2.txt

ubuntu@tiger:~$ more result2.txt
[2022-10-04 10:28:00] [default-apache2-ubuntu-page] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:00] [apache-detect] [http] [info] http://172.22.64.197:8080 [Apache/2.4.52 (Ubuntu)]
[2022-10-04 10:28:00] [default-apache-test-all] [http] [info] http://172.22.64.197:8080 [Apache/2.4.52 (Ubuntu)]
[2022-10-04 10:28:00] [nginx-version] [http] [info] http://172.22.64.197 [nginx/1.18.0]
[2022-10-04 10:28:00] [default-nginx-page] [http] [info] http://172.22.64.197
[2022-10-04 10:28:02] [tech-detect:nginx] [http] [info] http://172.22.64.197
[2022-10-04 10:28:29] [openssh-detect] [network] [info] 172.22.64.197:22 [SSH-2.0-OpenSSH_8.9p1 Ubuntu-3]
[2022-10-04 10:28:30] [http-missing-security-headers:cross-origin-opener-policy] [http] [info] http://172.22.64.197:808
0
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-origin] [http] [info] http://172.22.64.197:80
80
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-expose-headers] [http] [info] http://172.22.64.197:
8080
[2022-10-04 10:28:30] [http-missing-security-headers:strict-transport-security] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:permissions-policy] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:x-frame-options] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:x-content-type-options] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:x-permitted-cross-domain-policies] [http] [info] http://172.22.64.
197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:referrer-policy] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:cross-origin-embedder-policy] [http] [info] http://172.22.64.197:8
080
[2022-10-04 10:28:30] [http-missing-security-headers:cross-origin-resource-policy] [http] [info] http://172.22.64.197:8
080
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-max-age] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-headers] [http] [info] http://172.22.64.197:8
080
[2022-10-04 10:28:30] [http-missing-security-headers:clear-site-data] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:content-security-policy] [http] [info] http://172.22.64.197:8080
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-credentials] [http] [info] http://172.22.64.1
97:8080
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-methods] [http] [info] http://172.22.64.197:8
080
[2022-10-04 10:28:30] [http-missing-security-headers:strict-transport-security] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:x-frame-options] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:x-content-type-options] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:x-permitted-cross-domain-policies] [http] [info] http://172.22.64.
197
[2022-10-04 10:28:30] [http-missing-security-headers:referrer-policy] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-origin] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-methods] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:cross-origin-embedder-policy] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-max-age] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-expose-headers] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-headers] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:content-security-policy] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:permissions-policy] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:clear-site-data] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:cross-origin-opener-policy] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:cross-origin-resource-policy] [http] [info] http://172.22.64.197
[2022-10-04 10:28:30] [http-missing-security-headers:access-control-allow-credentials] [http] [info] http://172.22.64.1
97
[2022-10-04 10:28:34] [options-method] [http] [info] http://172.22.64.197:8080 [HEAD,GET,POST,OPTIONS]
[2022-10-04 10:28:34] [openssh-detect] [network] [info] 172.22.64.197:22 [SSH-2.0-OpenSSH_8.9p1 Ubuntu-3]
[2022-10-04 10:28:41] [waf-detect:nginxgeneric] [http] [info] http://172.22.64.197/
[2022-10-04 10:28:41] [waf-detect:apachegeneric] [http] [info] http://172.22.64.197:8080/

 

Links: