kmcquade / nerdbug

Full Nuclei automation script with logic explanation.

nerdbug - Hunt while you are sleeping

An automation tool that downloads CHAOS project discovery data every hour compares it with the master domain list, identifies new domains, runs Nuclei on it and automatically provides you with the final result via Telegram push notifications. Cron job automation is already implemented.

• Requirements: Go Language, Python 3.+, jq

• Tools used - You must need to install these tools to use this script
  

  • httpx
  • anew
  • nuclei
  • chaospy
  • notify

  Make sure these tools are downloaded and binaries are copied in the /usr/bin folder.

• Installation

  apt install jq
  git clone https://github.com/iamthefrogy/nerdbug.git && cd nerdbug/ 
  chmod +x cron.sh
  chmod +x nerdbug.sh
  
  When you install the chaospy tool, place the binary in the nerdbug folder.

• Usage

  1. First time users - Download the chaos data into text file and save it as alltargets.txtls. Plenty of methods out there for this.
  
  2. Set the integer value within the cron.sh file. It is a number of hours you want to automate this script in the background. Currently set to 3600 seconds means an hour. (SCREEN).    
  
  3. Open nerdbug.sh and insert your telegram bot token and chat id value within the 'token' and 'chat_id' variable which is currently set as << enter API key >> and << enter chat id >>
  
  screen -S nerdbug
  
  ./cronjob.sh
  
  exit screen

Thanks to the authors of the tools used in this script.

Warning: This is just a research project. Kindly use it with caution and at your own risk.