Class NucleiHttpRequest

Namespace
Kuestenlogik.Bowire.Security.Templates.Nuclei
Assembly
Kuestenlogik.Bowire.Security.Templates.Nuclei.dll

One entry in the http: array. Phase 2a captures the flat single-request shape; multi-step / payload-matrix templates surface in Path as the first listed path.

public sealed class NucleiHttpRequest
Inheritance
NucleiHttpRequest
Inherited Members

Constructors

NucleiHttpRequest() 

public NucleiHttpRequest()

Properties

Body

Optional inline body for POST/PUT/PATCH probes. Empty for verbs that don't carry a body.

public string Body { get; set; }

Property Value

string

Matchers

One matcher block describes how to recognise that the vulnerability fired in the response. Multiple matchers compose via MatchersCondition.

public List<NucleiMatcher> Matchers { get; init; }

Property Value

List<NucleiMatcher>

MatchersCondition

How matchers compose: and (all-of) or or (any-of). Default Nuclei behaviour is or.

public string MatchersCondition { get; set; }

Property Value

string

Method

HTTP verb (GET / POST / …). Default GET when the template omits it.

public string Method { get; set; }

Property Value

string

Path

URL paths to probe. Nuclei uses {{BaseURL}} substitutions inside these — the converter resolves them when a target is bound.

public List<string> Path { get; init; }

Property Value

List<string>

Payloads

Per-variable payload value lists. Nuclei syntax: payloads: { file: [robots.txt, .env, .git/config] }. At probe time, every {{file}} placeholder gets the next value; when multiple variables exist, the converter expands the cross-product. Phase 2d covers single-variable + multi- variable cross-product; sniper / pitchfork / cluster-bomb attack-types arrive when corpus data demands them.

public Dictionary<string, List<string>> Payloads { get; init; }

Property Value

Dictionary<string, List<string>>