feral oxide
Nuclei allow automatic scan :
-as, -automatic-scan automatic web scan using wappalyzer technology detection to tags mapping
Is it possible to extract the technology detected? And not run the others templates, just use nuclei as a wappalyzer cli.
mental epoch
Use httpx with tech detect that's exactly what that does.
But running technology templates in nuclei do a far more thorough check
feral oxide
Thanks @mental epoch I was checking the wappalyzergo https://github.com/projectdiscovery/wappalyzergo but I suppose it is the one used in httpx
mental epoch
It is
feral oxide
Technology templates in nuclei are run by default? So is it best to just run a nuclei full scan and collect the technology informations, since I suppose it also rely on httpx > wappalyzergo?
mental epoch
It depends on how you are using it. I run specific template sets for different use. If I'm fingerprinting tech I run tech stuff. If in looking for issues I run those. My scope is to big to just throw everything at everything.
There are a lot more tech checks in nuclei than httpx. If you rely on the -as you will limit your findings but it is faster
feral oxide
I usually just cut in five my nuclei scans (critical, high, medium, low and info), so running info can be done first to collect technologies and I can run the rest in parallel of others tools.