You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While running nuclei scan with public / private template, many times some payload (xss/lfi/rce) triggers WAF on the target system which results into:
Vulnerability is not being acutally checked
User is not informed / aware of it.
Solution?
As a user, I'm interested in knowing which host:template scan resulted into WAF trigger for the further review / manual testing / template improvements.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Problem
While running nuclei scan with public / private template, many times some payload (
xss
/lfi
/rce
) triggers WAF on the target system which results into:Solution?
As a user, I'm interested in knowing which
host:template
scan resulted into WAF trigger for the further review / manual testing / template improvements.Beta Was this translation helpful? Give feedback.
All reactions