Skip to content

[ENHANCEMENT] ensure every nuclei template have description #13703

@ErikOwen

Description

@ErikOwen

Is there an existing issue for this?

  • I have searched the existing issues and discussions.

Enhancement Description

It would be helpful if every template had a description that explains what a finding from the template represents.

Use Case / Problem

Currently some templates do not have a description, and when a template that does not have a description produces a match against a target, I do not have enough context to understand what the finding represents, making it hard for me to understand the underlying vulnerability.

Proposed Solution

This is a good use case for leveraging generative AI to populate the description field for all templates that are currently missing a description:

code/privilege-escalation/linux/rw-shadow.yaml
code/privilege-escalation/linux/rw-sudoers.yaml
code/privilege-escalation/linux/writable-etc-passwd.yaml
dast/vulnerabilities/cmdi/python-code-injection.yaml
dast/vulnerabilities/crlf/cookie-injection.yaml
dast/vulnerabilities/crlf/crlf-injection.yaml
dast/vulnerabilities/lfi/lfi-keyed.yaml
# and 1500 other templates

Alternatives Considered

N/A

Additional Context

N/A

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions