# NucleiFuzzer | Powerful Automation Tool For Detecting XSS, SQLi, SSRF, Open-Redirect, Etc.. Vulnerabilities In Web Applications

**URL:** <https://onehack.st/t/nucleifuzzer-powerful-automation-tool-for-detecting-xss-sqli-ssrf-open-redirect-etc-vulnerabilities-in-web-applications/255568>\
**Category:** Tools & Scripts\
**Tags:** hacking\
**Created:** [September 21, 2023, 12:13am UTC](https://onehack.st/t/nucleifuzzer-powerful-automation-tool-for-detecting-xss-sqli-ssrf-open-redirect-etc-vulnerabilities-in-web-applications/255568 "2023-09-21T00:13:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [September 21, 2023, 12:13am UTC](https://onehack.st/t/nucleifuzzer-powerful-automation-tool-for-detecting-xss-sqli-ssrf-open-redirect-etc-vulnerabilities-in-web-applications/255568/1 "2023-09-21T00:13:50Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/e/6/e689e3d34a5ef732f74c0a0a3098d7fc6980e34d.png)

# [NucleiFuzzer = Nuclei + Paramspider](https://github.com/0xKayala/NucleiFuzzer#nucleifuzzer--nuclei--paramspider)

`NucleiFuzzer` is an automation tool that combines `ParamSpider` and `Nuclei` to enhance web application security testing. It uses `ParamSpider` to identify potential entry points and `Nuclei's` templates to scan for vulnerabilities. `NucleiFuzzer` streamlines the process, making it easier for security professionals and web developers to detect and address security risks efficiently. Download `NucleiFuzzer` to protect your web applications from vulnerabilities and attacks.

**Note:** `Nuclei` + `Paramspider` = `NucleiFuzzer`

### [Tools included:](https://github.com/0xKayala/NucleiFuzzer#tools-included)

[ParamSpider](https://github.com/0xKayala/ParamSpider) `git clone https://github.com/0xKayala/ParamSpider.git`

[Nuclei](https://github.com/projectdiscovery/nuclei) `git clone https://github.com/projectdiscovery/nuclei.git`

### [Templates:](https://github.com/0xKayala/NucleiFuzzer#templates)

[Fuzzing Templates](https://github.com/projectdiscovery/fuzzing-templates) `git clone https://github.com/projectdiscovery/fuzzing-templates.git`

# [Screenshot](https://github.com/0xKayala/NucleiFuzzer#screenshot)

[![image](https://user-images.githubusercontent.com/16838353/262094851-d3e6466c-8716-45bd-9bac-51f388ef8179.png)](https://user-images.githubusercontent.com/16838353/262094851-d3e6466c-8716-45bd-9bac-51f388ef8179.png)

# [Output](https://github.com/0xKayala/NucleiFuzzer#output)

[![image](https://user-images.githubusercontent.com/16838353/245815029-4bc2998b-b48d-4705-8ba7-16ff4c0aace7.png)](https://user-images.githubusercontent.com/16838353/245815029-4bc2998b-b48d-4705-8ba7-16ff4c0aace7.png) [![image](https://user-images.githubusercontent.com/16838353/245552987-bf911936-1eed-42bc-b81f-35d71a8ebf49.png)](https://user-images.githubusercontent.com/16838353/245552987-bf911936-1eed-42bc-b81f-35d71a8ebf49.png)

## [Usage](https://github.com/0xKayala/NucleiFuzzer#usage)

`nucleifuzzer -h`

This will display help for the tool. Here are the options it supports.

```auto
NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc. vulnerabilities in Web Applications

Usage: /usr/local/bin/nucleifuzzer [options]

Options:
  -h, --help Display help information
  -d, --domain <domain> Domain to scan for XSS, SQLi, SSRF, Open-Redirect..etc vulnerabilities

```

### [Steps to Install:](https://github.com/0xKayala/NucleiFuzzer#steps-to-install)

1. git clone [https://github.com/0xKayala/NucleiFuzzer.git](https://github.com/0xKayala/NucleiFuzzer.git)

2. cd NucleiFuzzer

3. sudo chmod +x install.sh

4. ./install.sh

5. nucleifuzzer -h

Made by `Satya Prakash` | `0xKayala` \

A `Security Researcher` and `Bug Hunter` \

## GitHub:

> **[GitHub - 0xKayala/NucleiFuzzer: NucleiFuzzer is a robust automation tool that...](https://github.com/0xKayala/NucleiFuzzer)**
>
> NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques