Nuclei Demos

CVE Exploit

• Download the exploit template

wget https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/master/cves/2021/CVE-2021-41174.yaml

• Run Grafana docker

docker run -d -p 3000:3000 grafana/grafana-enterprise:8.1.0

• Exploit the vulnerability

nuclei -t CVE-2021-41174.yaml -u http://localhost:3000

GitHub workflow

Local test

• Run app

docker run -d -p 5050:5050 we45/vul_flask

• Test urls

http GET http://localhost:5050

• Test with nuclei template

nuclei -t api-scan.yaml -u http://localhost:5050

• Test for template injection

nuclei -t template-injection.yaml -u http://localhost:5050

Infra Scan

• Download the Kube API Scan template

wget https://raw.githubusercontent.com/sharathkramadas/k8s-nuclei-templates/main/kube-api-scan.yaml

• Test for unauthenticated urls

nuclei -t kube-api-scan.yaml -u https://<ip>:6443

References

• https://twitter.com/pdnuclei/status/1457121459399053316
• https://github.com/projectdiscovery/nuclei-templates/tree/master/cves/2021
• https://github.com/grafana/grafana/security/advisories/GHSA-3j9m-hcv9-rpj8
• https://nuclei.projectdiscovery.io/templating-guide/operators/matchers/
• https://blog.escape.tech/devsecops-part-iii-scanning-live-web-applications/