Cyber Risks · PortSwigger Research

Nuclei Burp Integration

Summary: A third-party Burp extension by author Dbrwsky, version 0.4.1 and last updated 22 June 2023, runs the Nuclei Scanner directly from Burp and converts its JSON results into Burp issues. Users send a URL from the target field or Burp history via Extensions > Nuclei, and Nuclei templates carrying the network tag must be disabled for the extension to work properly.

Key Takeaway: PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, so the scanner output landing in your Issues tab comes from code the vendor does not stand behind.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related