Skip to content

host-spray intensive memory usage #5453

@JoshuaMart

Description

@JoshuaMart

Nuclei Version : 3.3.0
OS : Ubuntu 24.04
Golang Version : 1.22.5

Hi,
Following https://docs.projectdiscovery.io/tools/nuclei/mass-scanning-cli I wanted to do a test using the -ss host-spray option, but I observed intensive use of RAM compared to template-spray.

For my test, I'm using a list of 5000 URLs (urls.txt file)

With the following command, RAM consumption is stable at about 600MB

nuclei -l urls.txt -c 20 -bs 30 -rl 600 -severity high,critical

With the following command, RAM increases progressively until it crashes :

nuclei -l urls.txt -c 20 -bs 30 -rl 600 -severity high,critical -ss host-spray

Note: Using fewer URLs or smaller values for -c, -bs and -rl just “slows down” the rate at which RAM consumption increases.

Following https://github.com/projectdiscovery/utils/tree/main/pprof I've made an export : pprof.zip with the following configuration : (I stopped Nuclei when the RAM reached about 2.5Gb)

export PPROF=1
export MEM_PROFILE_DIR=/tmp/memprofile
export CPU_PROFILE_DIR=/tmp/cpuprofile
export PPROF_TIME=10s
export MEM_PROFILE_RATE=4096

Please let me know if I can add any further information.
Regards,
Jomar

Metadata

Metadata

Assignees

Labels

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions