projectdiscovery / nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Home Page:https://docs.projectdiscovery.io/tools/nuclei

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

input-mode JSONL with headless/fuzzing not working

bizibabe opened this issue · comments

commented

Hello,

I don't understand why I have a URL parsing error.

nuclei -t dom-xss.yaml -l test_get_dom_xss.jsonl -im jsonl -dast -headless --debug

image

My jsonl :

{
    "timestamp": "2024-06-27T22:04:25.560192+00:00",
    "url": "https://mim.giize.com/domxss.html?input=ddd",
    "request": {
      "header": {
        "Host": "mim.giize.com",
        "User-Agent": "test",
        "Content-Type": "application/x-www-form-urlencoded"
      },
      "raw": "GET /domxss.html?input=ddd HTTP/1.1\r\nHost: mim.giize.com\r\nUser-Agent: test\r\nContent-Type: application/x-www-form-urlencoded\r\n\r\n"
    }
  }

You can use this template : https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/vulnerabilities/xss/dom-xss.yaml