daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update compliance.yml

patch-4
Parth Malhotra 2024-06-25 12:56:29 +05:30 committed by GitHub
parent 702ebcf4bb
commit e9f93a9806
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 34 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
profiles/compliance.yml
View File

@ -1,9 +1,36 @@
# This is a configuration file for the compliance template profile.
# Additional configuration profiles can be created for different types of nuclei scans.
# They should be placed under the 'config' directory at:
# https://github.com/projectdiscovery/nuclei-templates
# Here is an example of how to use a config profile:
# nuclei -config config/compliance.yml -list target_list_to_scan.txt
# Nuclei Configuration Profile for Compliance Detection
#
# This configuration file is specifically tailored for detecting compliance-related issues using Nuclei.
#
# Purpose:
# This profile is focused on identifying a wide range of security issues to ensure compliance with various security standards and best practices. It includes templates for detecting misconfigurations, vulnerabilities, exposures, and other security risks.
#
# Included Templates:
# This configuration references specific templates tagged with various security-related tags to cover comprehensive compliance scanning:
# - misconfig: Templates for detecting misconfigurations.
# - cve: Templates for detecting Common Vulnerabilities and Exposures.
# - exposure: Templates for detecting sensitive information exposures.
# - default-login: Templates for detecting default login credentials.
# - xss: Templates for detecting Cross-Site Scripting vulnerabilities.
# - lfi: Templates for detecting Local File Inclusion vulnerabilities.
# - edb: Templates for vulnerabilities listed in the Exploit Database.
# - rce: Templates for detecting Remote Code Execution vulnerabilities.
# - sqli: Templates for detecting SQL Injection vulnerabilities.
# - unauth: Templates for detecting unauthorized access vulnerabilities.
# - ssrf: Templates for detecting Server-Side Request Forgery vulnerabilities.
# - redirect: Templates for detecting open redirection vulnerabilities.
# - disclosure: Templates for detecting sensitive information disclosure.
# - takeover: Templates for detecting subdomain takeover vulnerabilities.
# - traversal: Templates for detecting directory traversal vulnerabilities.
# - generic: Templates for detecting generic security issues.
# - deserialization: Templates for detecting deserialization vulnerabilities.
# - ssl: Templates for detecting SSL/TLS related issues.
# - keys: Templates for detecting exposed keys.
# - token: Templates for detecting exposed tokens.
#
# Running this profile
# You can run this profile using the following command:
# nuclei -profile compliance -u https://example.com
tags:
- misconfig
@ -26,4 +53,4 @@ tags:
- deserialization
- ssl
- keys
- token
- token