58 lines
1.4 KiB
Nix
58 lines
1.4 KiB
Nix
|
{
|
||
|
|
lib,
|
||
|
|
buildGoModule,
|
||
|
|
fetchFromGitHub,
|
||
|
|
versionCheckHook,
|
||
|
|
}:
|
||
|
|
|
||
|
|
buildGoModule rec {
|
||
|
|
pname = "nuclei";
|
||
|
|
version = "3.4.10";
|
||
|
|
|
||
|
|
src = fetchFromGitHub {
|
||
|
|
owner = "projectdiscovery";
|
||
|
|
repo = "nuclei";
|
||
|
|
tag = "v${version}";
|
||
|
|
hash = "sha256-lFyp5VXEX0nK83p2LmWdhNoQKvNtgln1GG3OpZEXaL8=";
|
||
|
|
};
|
||
|
|
|
||
|
|
vendorHash = "sha256-cDK0xP3vHRVBeFK2dKDnaCNge7EBKkMcrYen12XI7G0=";
|
||
|
|
|
||
|
|
proxyVendor = true; # hash mismatch between Linux and Darwin
|
||
|
|
|
||
|
|
subPackages = [ "cmd/nuclei/" ];
|
||
|
|
|
||
|
|
nativeInstallCheckInputs = [ versionCheckHook ];
|
||
|
|
|
||
|
|
ldflags = [
|
||
|
|
"-w"
|
||
|
|
"-s"
|
||
|
|
];
|
||
|
|
|
||
|
|
# Test files are not part of the release tarball
|
||
|
|
doCheck = false;
|
||
|
|
|
||
|
|
doInstallCheck = true;
|
||
|
|
|
||
|
|
versionCheckProgramArg = "-version";
|
||
|
|
|
||
|
|
meta = {
|
||
|
|
description = "Tool for configurable targeted scanning";
|
||
|
|
longDescription = ''
|
||
|
|
Nuclei is used to send requests across targets based on a template
|
||
|
|
leading to zero false positives and providing effective scanning
|
||
|
|
for known paths. Main use cases for nuclei are during initial
|
||
|
|
reconnaissance phase to quickly check for low hanging fruits or
|
||
|
|
CVEs across targets that are known and easily detectable.
|
||
|
|
'';
|
||
|
|
homepage = "https://github.com/projectdiscovery/nuclei";
|
||
|
|
changelog = "https://github.com/projectdiscovery/nuclei/releases/tag/v${version}";
|
||
|
|
license = lib.licenses.mit;
|
||
|
|
maintainers = with lib.maintainers; [
|
||
|
|
fab
|
||
|
|
Misaka13514
|
||
|
|
];
|
||
|
|
mainProgram = "nuclei";
|
||
|
|
};
|
||
|
|
}
|