TLDR InfoSec · STRATEGIES & TACTICS

LEVERAGING NUCLEI TEMPLATES TO IDENTIFY RISKS AND THREATS IN CRITICAL CLOUD APPLICATIONS

links.tldr.tech14 min read

Summary from the TLDR InfoSec newsletter

This post explores using Nuclei to find vulnerabilities in web applications. It sets up two scenarios: one involving an SSRF in an application hosted on Azure and the other a vulnerable TeamCity environment. The post goes through the process of setting up the scenarios, creating nuclei templates, and testing them.