BSD Ports

security/nuclei 3.11.1_2 FreeBSD

Fast vulnerability scanner

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
d81b7ba3c3
License
MIT
Categories
security
Package size
27928.1 KiB, 123648.0 KiB installed

Description

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Nuclei offers scanning for a variety of protocols:

  • TCP
  • DNS
  • HTTP
  • SSL
  • File
  • Whois
  • Websocket
  • Headless

Example templates:

  • github.com/projectdiscovery/nuclei-templates

In the other systems

SystemPortVersion
FreeBSDsecurity/nuclei3.11.1_2
OpenBSDsecurity/nuclei3.3.9p0
NetBSDsecurity/nuclei3.6.2nb11
MidnightBSDsecurity/nuclei3.7.0

Install

Binary package:

pkg install nuclei

From the ports tree:

cd /usr/ports/security/nuclei/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	nuclei>0:security/nuclei

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest3.11.1_13.11.1_1-3.4.73.11.1_1
FreeBSD:14:quarterly3.11.1_13.11.1_1n/a3.4.53.11.1_1
FreeBSD:15:latest3.11.1_13.11.1_1n/a3.4.73.4.7
FreeBSD:15:quarterly3.11.1_13.11.1_1n/an/an/a
FreeBSD:16:latest3.11.13.11.1_1n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 1

No port depends on this one.

Configuration

No options to configure.

USES
go:modules
Service scripts
none

Message after installing

Breaking Change: Signed templates required for JavaScript protocol

Starting with v3.11.0, custom templates that use the javascript:
protocol must be digitally signed before Nuclei will load or execute
them. Unsigned JavaScript templates are now skipped during template
loading and when referenced from workflows.

Why this change

This release continues the security hardening started in v3.10.0
(sandbox enforcement, network policy checks, stricter code-template
handling, YAML include protections, and related fixes in #7469). The
JavaScript protocol exposes Go-backed modules through Nuclei's JS
runtime, which significantly increases attack surface compared with
request-only templates. Requiring signatures brings JavaScript templates
in line with the existing protections for code-protocol templates.

Files

distinfo 2
FileSizeSHA256
go/security_nuclei/nuclei-v3.11.1/v3.11.1.mod2146957e1f9230ef1da13280cc702c01b6135241128fbc710adea399eaa6d142b849c
go/security_nuclei/nuclei-v3.11.1/v3.11.1.zip1.3242544e+07cce186e360da844f0ae8ddd51bfe4d2604b7700200692de8462727b0c5d559ad

Commit history 10

DateCommitCreditsLog message
d81b7ba3c3 Dag-Erling Smørgrav various: Bump Go ports for Go 1.26.10 / 1.27.3
031fc6bfbf Dag-Erling Smørgrav various: Bump Go ports
f92cef0dc9 Gabriel M. Dutra security/nuclei: Update to 3.11.1
ChangeLog: https://github.com/projectdiscovery/nuclei/releases/tag/v3.11.1
dd0905142a Adam Weinberger many: Bump go ports for 1.26.8 and 1.27.1
4867821cd6 Dag-Erling Smørgrav various: Bump go ports for go-1.25.14 / 1.26.7

The latest 5 of 10 in the history this site was built from.