FROM CVE TO TEMPLATE: THE FUTURE OF AUTOMATING NUCLEI TEMPLATES WITH AI

Summary from the TLDR InfoSec newsletter

The ProjectDiscovery team decided to experiment with utilizing AI to generate nuclei templates from CVEs. The team utilized cvemap to identify CVEs that had a publicly available POC but did not already have a nuclei template and then built TemplateMan to aid in adding non-functional enhancements to the generated templates. They noted issues in parsing technical details out of unstructured Medium and other blog posts as well as issues with authenticated vulnerabilities and data quality. The ProjectDiscovery team has created a new repository to store the AI-generated templates and has also added the capability to build nuclei templates with AI to their online template editor.