> For the complete documentation index, see [llms.txt](https://wiki.pentestlist.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.pentestlist.com/offensive-security/web-application/discovery/vulnerability-scan.md).

# Vulnerability Scan

### Nuclei <a href="#nuclei" id="nuclei"></a>

Nuclei is a vulnerability scanner that is great for web applications and some network services. It uses community written templates to find thousands of issues

* <https://github.com/projectdiscovery/nuclei>

The following command will run a rate limited nuclei against all of the non-intrusive templates:

`sudo nuclei -u URL -rl 50 -c 5 -t http/cnvd -t http/cves -t dns -t http/exposed-panels -t http/exposures -t file -t http/miscellaneous -t http/misconfiguration -t network -t http/osint -t http/takeovers -t http/technologies -t http/vulnerabilities -t dns`