Enum NucleiMatcherSurface

Namespace

Kuestenlogik.Bowire.Security.Templates.Nuclei

Assembly

Kuestenlogik.Bowire.Security.Templates.Nuclei.dll

Translate a Nuclei Matchers block into Bowire's AttackPredicate tree. Composes matcher-condition (and / or) and matcher-internal value-condition (and / or) onto the predicate's AllOf / AnyOf composites, and folds negative: true through Not.

Phase 2b scope: status, word, regex matcher types — covers most HTTP web-vulnerability templates in the projectdiscovery/nuclei-templates corpus. part: body and the implicit / all are supported; part: header and part: response route through a placeholder that emits null for the matcher (and is logged at the converter level as "skipped — header matching lands in Phase 2b+"). Unknown matcher types likewise emit null — the surrounding predicate-tree just drops the matcher rather than blocking the whole template.

public enum NucleiMatcherSurface

Fields

Code = 4

Matchers over a code: template's output (#491). One combined stream, so the whole-response parts apply.

Dns = 1

Matchers over a DNS response (#491, Phase 2g). Nuclei addresses the sections separately (answer / question / authority / additional / raw); Bowire has one body, and DnsProbeExecutor fills it with the answer section alone.

Http = 0

Matchers over an HTTP response — body / all.

Network = 2

Matchers over what came back on a raw socket (#491). One response, one body — nothing to disambiguate.

Ssl = 3

Matchers over a TLS certificate (#491). SslProbeExecutor renders the whole certificate into the body, so parts naming a single field (issuer, subject, …) cannot be honoured without letting a word match the wrong field.