Skip to content

[BUG] networking services on HTTP ports are never scanned #7323

@chovanecadam

Description

@chovanecadam

Is there an existing issue for this?

  • I have searched the existing issues.

Current Behavior

When running nuclei on a target example:80, network and javascript templates ignore the provided port and instead use the port specified in the template. This behavior cannot be changed for the whole scan. As a result, SSH servers and other network services running on port 80 (and similar) are hidden from Nuclei and never scanned.

Expected Behavior

Nuclei scans the target on the provided port if requested.

Steps To Reproduce

nuclei -verbose -t network/cves/2001/CVE-2001-1473.yaml -target TARGET:80
# [WRN] [CVE-2001-1473] Could not make network request for (147.251.125.30:22) : could not connect to server: cause="context cancelled before establishing connection" address=147.251.125.30:22 chain="context deadline exceeded"

Relevant log output

Environment

- OS: Arch
- Nuclei: v3.7.1
- Go: go1.22.2 linux/amd64

Anything else?

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions