https://souljian.cn/tags/cve/Recent content in CVE on SoulJian小站Hugo -- gohugo.ioen-usSun, 30 Aug 2026 10:00:00 +0800https://souljian.cn/p/751088169/Sat, 29 Aug 2026 14:00:00 +0800https://souljian.cn/p/751088169/<h2 id="写在前面合法学习边界">写在前面：合法学习边界 </h2><p>漏洞扫描只在授权测试环境进行。</p> <h2 id="一漏扫工具全景">一、漏扫工具全景 </h2><img src="https://souljian.cn/img/nuclei-scan-chain.svg" alt="漏扫工具全景" /> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">nuclei（模板化）· nmap NSE · OpenVAS · AWVS · Nessus </span></span></code></pre></td></tr></table> </div> </div><h2 id="二nuclei-实战">二、nuclei 实战 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt"> 1 </span><span class="lnt"> 2 </span><span class="lnt"> 3 </span><span class="lnt"> 4 </span><span class="lnt"> 5 </span><span class="lnt"> 6 </span><span class="lnt"> 7 </span><span class="lnt"> 8 </span><span class="lnt"> 9 </span><span class="lnt">10 </span><span class="lnt">11 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># CVE 扫描</span> </span></span><span class="line"><span class="cl">nuclei -t cves/ -u http://target </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># 暴露面扫描</span> </span></span><span class="line"><span class="cl">nuclei -t exposures/ -u http://target </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># 自定义规则</span> </span></span><span class="line"><span class="cl">nuclei -t myrule.yaml -u http://target </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c1"># 批量扫描</span> </span></span><span class="line"><span class="cl">nuclei -l targets.txt -t cves/ -j </span></span></code></pre></td></tr></table> </div> </div><h2 id="三防御加固">三、防御加固 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">及时更新系统/组件 · WAF 防护 · 网络隔离 </span></span></code></pre></td></tr></table> </div> </div><h2 id="四小结">四、小结 </h2><p>nuclei 是模板化漏洞扫描的标杆工具。配合 subfinder/httpx/ARL 形成完整资产发现+漏洞验证链路。</p>