v9.8.0
projectdiscovery/nuclei-templatesv9.8.0Mar 24, 2024by princechaddha
AI Summary
This release focuses on expanding network vulnerability detection capabilities through the introduction of the JavaScript (JS) protocol. It adds 85 new templates, including network enumeration modules for MySQL, SMB, Redis, and POP3, alongside 8 new CVEs.
Key Highlights
- Expanded network vulnerability detection via the new JS protocol.
- Added 85 new templates including MySQL, SMB, Redis, and POP3 enumeration.
- Increased total template count to over 8,000.
- Added 8 new CVEs (2023 and 2024).
New Features
- JS protocol templates for network enumeration (MySQL, SMB, Redis).
- Network vulnerability detection templates.
- Expansion of LDAP and Kerberos related checks.
- Templates for default credentials and misconfigurations.
Full Release Notes
### 🔥 Release Highlights 🔥 We're thrilled to share that with the launch of Nuclei Templates version 9.8.0, we've broadened our scope in network security checks. Our template library now boasts over 8,000 entries, encompassing more than 7,202 templates for web applications. This collection includes 2,200 web-related CVEs and features more than 850 templates aimed at identifying web vulnerabilities. With the help of active community contributions, we have been adding all the latest web CVEs and vulnerabilities in the wild. While we continue to do so, we are focused on expanding our template offerings to include network vulnerabilities, providing the most comprehensive scanning. With this release, we're inviting contributors to aid us in enriching our network vulnerability detection, facilitated by the new JS protocol. This makes it simpler to incorporate network checks through the newly introduced JS modules. For guidance on crafting JS templates, check out our documentation [here](https://docs.projectdiscovery.io/templates/protocols/javascript/introduction). Next, we are aiming to expand coverage of LDAP and Kerberos related checks. We are looking forward to getting more contributions from the community ### What's Changed #### New Templates Added: `85` | CVEs Added: `8` | First-time contributions: `5` - http/cves/2023/CVE-2023-49785.yaml by @high 🔥 - http/cves/2023/CVE-2023-5830.yaml by @Mbb5546 - http/cves/2023/CVE-2023-5914.yaml by @DhiyaneshDK - http/cves/2023/CVE-2023-6114.yaml by @DhiyaneshDk - http/cves/2023/CVE-2023-6567.yaml by @iamnoooob,@rootxharsh,@pdresearch 🔥 - http/cves/2024/CVE-2024-1212.yaml by @DhiyaneshDK 🔥 - http/cves/2024/CVE-2024-1698.yaml by @DhiyaneshDk - http/cves/2024/CVE-2024-27954.yaml by @iamnoooob,@rootxharsh,@pdresearch 🔥 - javascript/audit/mysql/mysql-load-file.yaml by @pussycat0x - javascript/enumeration/mysql/mysql-default-login.yaml by @DhiyaneshDk,@pussycat0x,@ritikchaddha - javascript/enumeration/mysql/mysql-info.yaml by @pussycat0x - javascript/enumeration/mysql/mysql-show-databases.yaml by @DhiyaneshDk - javascript/enumeration/mysql/mysql-show-variables.yaml by @DhiyaneshDk - javascript/enumeration/mysql/mysql-user-enum.yaml by @pussycat0x - javascript/enumeration/pop3/pop3-capabilities-enum.yaml by @pussycat0x - javascript/enumeration/redis/redis-info.yaml by @DhiyaneshDK - javascript/enumeration/redis/redis-require-auth.yaml by @DhiyaneshDK - javascript/enumeration/rsync/rsync-version.yaml by @DhiyaneshDK - javascript/enumeration/smb/smb-default-creds.yaml by @pussycat0x - javascript/enumeration/smb/smb-enum-domains.yaml by @DhiyaneshDK - javascript/enumeration/smb/smb-os-detect.yaml by @pussycat0x - javascript/enumeration/smb/smb-version-detect.yaml by @pussycat0x - javascript/enumeration/smb/smb2-server-time.yaml by @DhiyaneshDK - javascript/misconfiguration/mysql/mysql-empty-password.yaml by @DhiyaneshDk - http/vulnerabilities/esafenet/esafenet-mysql-fileread.yaml by @DhiyaneshDk - http/vulnerabilities/idoc/idocview-2word-fileupload.yaml by @DhiyaneshDK - http/vulnerabilities/idoc/idocview-lfi.yaml by @DhiyaneshDK - http/vulnerabilities/landray/landray-eis-ws-infoleak.yaml by @Fur1na - http/vulnerabilities/other/office365-indexs-fileread.yaml by @DhiyaneshDK - http/vulnerabilities/other/ups-network-lfi.yaml by @Kazgangap - http/default-logins/ispconfig-default-login.yaml by @pussycat0x - http/misconfiguration/installer/posteio-installer.yaml by @ritikchaddha - http/exposures/files/generic-db.yaml by @Michal Mikolas (nanuqcz) - http/exposed-panels/bynder-panel.yaml by @righettod - http/exposed-panels/c2/ares-rat-c2.yaml by @pussycat0x - http/exposed-panels/c2/caldera-c2.yaml by @pussycat0x - http/exposed-panels/c2/hack5-cloud-c2.yaml by @pussycat0x - http/exposed-panels/c2/pupyc2.yaml by @pussycat0x - http/exposed-panels/c2/supershell-c2.yaml by @pussycat0x - http/exposed-panels/cisco/cisco-expressway-panel.yaml by @righettod - http/exposed-panels/emqx-panel.yaml by @righettod - http/exposed-panels/fortinet/forticlientems-panel.yaml by @h4sh5 - http/exposed-panels/fortinet/fortiwlm-panel.yaml by @EgemenKochisarli - http/exposed-panels/neocase-hrportal-panel.yaml by @righettod - http/exposed-panels/osnexus-panel.yaml by @Charles D. - http/exposed-panels/posteio-admin-panel.yaml by @ritikchaddha - http/exposed-panels/skeepers-panel.yaml by @righettod - http/exposed-panels/softether-vpn-panel.yaml by @bhutch - network/detection/wing-ftp-detect.yaml by @ritikchaddha - ssl/c2/venomrat.yaml by @pussycat0x - http/osint/phishing/kakao-login-phish.yaml by @hahwul - http/osint/phishing/naver-login-phish.yaml by @hahwul - http/technologies/directus-detect.yaml by @ricardomaia - http/technologies/microsoft/aspnet-version-detect.yaml by @lucky0x0d,@PulseSecurity.co.nz - http/technologies/microsoft/aspnetmvc-version-disclosure.yaml by @lucky0x0d,@PulseSecurity.co.nz - http/technologies/wing-ftp-service-detect.yaml by @ritikchaddha - dns/soa-detect.yaml by @rxerium - dns/spf-record-detect.yaml by @rxerium - dns/txt-service-detect.yaml by @rxerium - file/keys/dependency/dependency-track.yaml by @DhiyaneshDK - file/keys/docker/dockerhub-pat.yaml by @DhiyaneshDK - file/keys/doppler/doppler-audit.yaml by @DhiyaneshDK - file/keys/doppler/doppler-cli.yaml by @DhiyaneshDK - file/keys/doppler/doppler-scim.yaml by @DhiyaneshDK - file/keys/doppler/doppler-service-account.yaml by @DhiyaneshDK - file/keys/doppler/doppler-service.yaml by @DhiyaneshDK - file/keys/dropbox/dropbox-access.yaml by @DhiyaneshDK - file/keys/huggingface/huggingface-user-access.yaml by @DhiyaneshDK - file/keys/linkedin/linkedin-client.yaml by @DhiyaneshDK - file/keys/linkedin/linkedin-secret.yaml by @DhiyaneshDK - file/keys/newrelic/newrelic-api-service.yaml by @DhiyaneshDK - file/keys/newrelic/newrelic-license-non.yaml by @DhiyaneshDK - file/keys/newrelic/newrelic-license.yaml by @DhiyaneshDK - file/keys/odbc/odbc-connection.yaml by @DhiyaneshDK - file/keys/okta/okta-api.yaml by @DhiyaneshDK - file/keys/particle/particle-access.yaml by @DhiyaneshDK - file/keys/react/reactapp-password.yaml by @DhiyaneshDK - file/keys/react/reactapp-username.yaml by @DhiyaneshDK - file/keys/salesforce/salesforce-access.yaml by @DhiyaneshDK - file/keys/thingsboard/thingsboard-access.yaml by @DhiyaneshDK - file/keys/truenas/truenas-api.yaml by @DhiyaneshDK - file/keys/twitter/twitter-client.yaml by @DhiyaneshDK - file/keys/twitter/twitter-secret.yaml by @DhiyaneshDK,@gaurang,@daffainfo - file/keys/wireguard/wireguard-preshared.yaml by @DhiyaneshDK - file/keys/wireguard/wireguard-private.yaml by @DhiyaneshDK B636160776167737022757F6025667965636562702C6C6967702275667275637024627F636379644022757F602E6F602C656E6E61686360237564716C607D65647D29656C63657E60256864702E6960222C6C61402D654720286364716342202567616373756D602F64702E6F63727560702473727966602568645 🐛 ## New Contributors * @EgemenKochisarli made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9353 * @s-kali made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9357 * @Facucuervo87 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9254 * @h4sh5 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9350 * @Kazgangap made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9395 **Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.7.8...v9.8.0