ProjectDiscovery
-
|
Hello all? Actually, I'm relatively new to Penetration Testing and in love with Nuclei(I also have started to write my own templates, this project is a love). But my only doubt is, how can I use Nuclei when in an Internal Environment as past won't be available due to no Internet. Like I do I create a standalone server for Nuclei so it works in the same way. Thank You! |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 4 replies
-
|
@umar98 You can still use the nuclei in the internal network by disabling version update check with -duc, -disable-update-check disable automatic nuclei/templates update check
-ni, -no-interactsh disable interactsh server for OAST testing, exclude OAST based templates
-sr, -system-resolvers use system DNS resolving as error fallback
-r, -resolvers string file containing resolver list for nucleiI believe this should be sufficient to run nuclei in the internal environment, but let me know if this doesn't work for you. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for the Great tip. Though I have a question if we disable the interactsh server, then as the description states the OAST-based Templates and templates that reply on input to be verified, how will they be executed? |
Beta Was this translation helpful? Give feedback.
-
|
Since you mentioned you are looking to use nuclei in an environment where you don't have access to the external internet using public interactsh is also not possible and possibly you can set up self-hosted interactsh server which is accessible in your network and can be used using |
Beta Was this translation helpful? Give feedback.
-
|
Exactly what I was looking for. Thank You. (I might also be pinging you again if I need any help. xD) Once again, Thanks! |
Beta Was this translation helpful? Give feedback.
-
|
Feel free to join the discord server - https://discord.gg/projectdiscovery |
Beta Was this translation helpful? Give feedback.
@umar98 You can still use the nuclei in the internal network by disabling version update check with
-ducflag; also you need to disable use of public interactsh server with-niflag and last, you can make use of-srflag to use system resolver to resolve your internal hosts, if that doesn't work, you can also consider using-rflag to provider internal dns server to resolve internal hosts.