Nuclei Fuzzing Improvements ( Scanning for Unknown Vulnerabilities)

[tarunKoyalwar]

Please describe your feature request:

Nuclei currently excels and writing checks/exploits for existing CVEs , detection templates etc .
Below Features are required in nuclei for writing fuzzing templates

Tasks

Preview Give feedback

1. New Input option to accept request information for fuzzing #4131
   6 of 6
   Type: Enhancement +1
   
2. Support fuzzing for headers and request body parameters #4113
   4 of 4
   Type: Enhancement +1
   
3. path + query automerge support for query fuzzing in http and headless protocol #3952
   Type: Enhancement +1
   
4. Fuzzing: Add Flags & SDK Options #4844
   +0
   
5. Static Auth #4794
   +0
   
6. Dynamic Auth #4845
   +0
   
7. Filter field in http protocol to select what requests to be fuzzed #4846
   +0
   
8. Fuzzing: Replace Regex Mode ( we currently support infix,postfix,prefix,replace ) #4847
   +0
   
9. Support KV Fuzzing in Fuzz rules #4848
   +0
   
10. fuzz-custom field to support dynamic payloads (like incrementing existing values etc)
11. Fuzzing Blog Post[s]
12. OpenAPI Input Format Validations #4857
    7 of 7
    Type: Enhancement +1
    

Minor Changes

Tasks

Preview Give feedback

1. Support multipart/form-data fuzzing in request body
2. Refactor and unify input modes using new interface
3. Integration tests using fuzzingplayground server cli