From 3a4e3849f84c9aa0b3dca62c7c41473befdecefd Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 12 Mar 2024 00:25:08 +0530 Subject: [PATCH 1/3] Added README.md for phishing templates --- http/osint/phishing/README.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 http/osint/phishing/README.md diff --git a/http/osint/phishing/README.md b/http/osint/phishing/README.md new file mode 100644 index 0000000000..20518f6801 --- /dev/null +++ b/http/osint/phishing/README.md @@ -0,0 +1,21 @@ +## Description + +This directory contains a collection of templates designed for the identification and analysis of phishing sites. These templates are specifically created to help OSINT analysts, threat researchers, and security professionals in discovering and studying phishing campaigns. + +## Usage + +The phishing templates are designed for targeted use and are not included in Nuclei's default scans. To incorporate these templates into your scan, you can specify them using the `-itags` flags as follows: + +```console +nuclei -u -tags phishing -itags phishing +``` + +For users interested in comprehensive Open Source Intelligence (OSINT) gathering, these phishing templates have been integrated into the OSINT scan profile. This enables a more detailed and focused analysis as part of broader security research efforts or investigative journalism. +To execute the OSINT scan configuration profile, which includes phishing checks among other templates, use the following command: + +```console +# Execute the OSINT scan configuration profile +nuclei -u -config ~/nuclei-templates/config/osint.yml +``` + +The integration of phishing templates into the OSINT scan profile allows for a more nuanced and in-depth approach to security research, aiding in the detection of emerging threats and the analysis of ongoing phishing campaigns. From d13f548fbed3617d0bee5f8fe1a4de6fec389e43 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 12 Mar 2024 00:27:13 +0530 Subject: [PATCH 2/3] Update and rename http/osint/README.md to http/osint/user-enumeration/README.md --- http/osint/{ => user-enumeration}/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename http/osint/{ => user-enumeration}/README.md (81%) diff --git a/http/osint/README.md b/http/osint/user-enumeration/README.md similarity index 81% rename from http/osint/README.md rename to http/osint/user-enumeration/README.md index 017c15efe2..bfe2b39739 100644 --- a/http/osint/README.md +++ b/http/osint/user-enumeration/README.md @@ -4,7 +4,7 @@ OSINT templates are available for conducting user enumeration across many websit ## Usage -The templates within the `osint` directory are **self-contained** and do NOT require URLs as input because the OSINT templates have pre-defined static URLs. Each template in this directory expects the user(name), email, or phone number or list of it to be supplied as input using the `V`/`var` flag through the Nuclei engine. +The templates within the `u` directory are **self-contained** and do NOT require URLs as input because the OSINT templates have pre-defined static URLs. Each template in this directory expects the user(name), email, or phone number or list of it to be supplied as input using the `V`/`var` flag through the Nuclei engine. ```bash # Running OSINT templates against a single user to test From afc48a77e8f2efb795d0ed0e687cb2da6c89016e Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 12 Mar 2024 00:37:56 +0530 Subject: [PATCH 3/3] Create README.md --- http/osint/README.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 http/osint/README.md diff --git a/http/osint/README.md b/http/osint/README.md new file mode 100644 index 0000000000..73681a3569 --- /dev/null +++ b/http/osint/README.md @@ -0,0 +1,16 @@ +## Description + +Nuclei-templates provide a comprehensive suite of security checks, including OSINT templates in this directory for user-enumeration and phishing templates for the identification and analysis of phishing sites. + +The **User Enumeration templates** are tailored for user enumeration across various websites, allowing Nuclei to verify user existence. They expect input such as username, email, or phone number through the `V`/`var` flag. + +The **Phishing templates** are crafted for detecting and analyzing phishing sites. These templates are essential for OSINT analysts, threat researchers, and security professionals to uncover and study phishing campaigns. + +## Usage + +These templates are specifically added to help OSINT analysts, threat researchers therefore, we have added them to the OSINT scan profile [here](https://github.com/projectdiscovery/nuclei-templates/blob/main/config/osint.yml). +Users can execute the OSINT scan configuration profile with the following command: + +```console +nuclei -u -config ~/nuclei-templates/config/osint.yml +```