Nucleimonst3r Offensive Security Tool 2024-02-25

[Baron]

Nucleimonst3r

​

Description​

Nucleimonst3r is a high-speed vulnerability scanner designed for Bug Bounty Hunters and Red Teamers who need to quickly and efficiently identify potential targets for attack. The tool fetches URLs for a given domain and filters them based on specific extensions. The filtered URLs are then checked using the httpx tool and the results are saved in a file named “httpx_output.txt”. This output is used by nuclei to scan the URLs for vulnerabilities using a prompt that will ask you what templates you want to run with some combination and a ‘Hail Mary’ option that lets you use all templates which get updated every time you run the tool. The templates are located at /root/nuclei-templates/.

The tool offers several options for customizing the scan, including the ability to specify a custom path for saving results and to display statistics about the running scan. The statistics can be displayed in the terminal or written to an output file in JSONL(ines) format. The user can also specify the number of seconds to wait between showing a statistics update.

Features:​

• Advanced Scanning Techniques: Nucleimonst3r is equipped with advanced scanning techniques that allow you to perform deep, comprehensive scans of your target website. The tool can be configured to look for specific vulnerabilities and security weaknesses, making it easy to identify potential threats and remediate them before they can be exploited.

• Dynamic Template Generation: Nucleimonst3r includes an innovative feature that allows you to dynamically generate custom scanning templates based on the characteristics of your target website. This makes it possible to tailor the scan to your specific needs, ensuring that you get the most relevant and accurate results.

• Real-Time Scan Statistics: Nucleimonst3r provides real-time scan statistics that give you detailed information about the progress of the scan. You can see how many URLs have been scanned, how many vulnerabilities have been found, and how much time the scan has taken, all in real-time.

• Comprehensive Report Generation: Nucleimonst3r generates comprehensive reports of the scan results, which can be used to review and analyze the findings. These reports include detailed information about the vulnerabilities that were found, including their severity and potential impact.

• Integration with Other Tools: Nucleimonst3r integrates with other tools, such as httpx and waybackurls, to provide a complete solution for website security testing. This integration makes it easy to combine the strengths of these tools to get the best results, and helps streamline the security testing process.

Requirements​

To use Nucleimonst3r, you need to have the following tools installed:

• nuclei: Nucleimonst3r requires nuclei to be installed on the system. To install nuclei on Kali Linux, use the following command:

go install github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest

• httpx: Nucleimonst3r also requires httpx to be installed on the system. To install httpx on Kali Linux, use the following command:

go install github.com/projectdiscovery/httpx/cmd/httpx@latest

• waybackurls: can be installed: go install github.com/tomnomnom/waybackurls@latest

To install the required tools and ensure that the location of templates is set to /root/nuclei-templates/, the user should follow these steps:

• Install Go on the system by following the instructions at https://golang.org/doc/install.
• Clone the nuclei and httpx repositories from GitHub.
• Build and install nuclei and httpx using the above-mentioned commands.
• Install figlet and lolcat,toilet for the cool Rainbow Colors! pip install lolcat and apt-get install figlet, apt-get install toilet
• Create a folder named “nuclei-templates” in the /root/ directory and copy the required templates to this folder.

Installation​

git clone https://github.com/blackhatethicalhacking/Nucleimonst3r.git

cd Nucleimonst3r

chmod +x Nucleimonst3r.sh

./Nucleimonst3r.sh

• The script will prompt you to provide the domain
• Then it will ask you to choose templates

Screenshot​

Main Menu