Sploitus

Exploit for nuclei-cve-analyzer

CVE-2021-44228CVE-2021-45046CVE-2022-26134CVE-2023-21840CVE-2023-22809

kitploit · 2026-09-08

Exploit Code

MARKDOWN305 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SW33BER-NUCLEI-CVE-ANALYZER
# Nuclei CVE Analyzer

A fast CLI tool for analyzing **CVE coverage in Nuclei templates**.

Nuclei CVE Analyzer takes a list of CVE IDs, scans a local Nuclei template repository, and determines which CVEs already have matching templates and which represent potential template coverage gaps.

Built for security researchers, vulnerability hunters, and Nuclei contributors who want a quick way to identify missing CVE coverage.

## Features

  * Parse CVE IDs from text files
  * Parse CVE records from a local CVE database
  * Scan Nuclei YAML/YML templates
  * Detect CVEs referenced by Nuclei templates
  * Identify CVEs without matching templates
  * Deduplicate CVE entries automatically
  * Multithreaded CVE analysis
  * Optional system-wide CVE discovery
  * Export results to JSON and CSV
  * Generate separate found, missing, and template-usage reports
  * Clean terminal output powered by Rich



The project deliberately focuses on **template coverage** rather than external vulnerability scoring or enrichment services.

## Example

Input:

root@kitploit:~
    
    
    CVE-2021-44228
    CVE-2021-45046
    CVE-2022-26134
    CVE-2023-21840
    CVE-2023-22809
    

Example output:

root@kitploit:~
    
    
    CVE             STATUS
    CVE-2021-44228  FOUND
    CVE-2021-45046  FOUND
    CVE-2022-26134  FOUND
    CVE-2023-21840  MISSING
    CVE-2023-22809  MISSING
    

This makes it easy to spot CVEs that may be candidates for new Nuclei templates.

## Installation

Clone the repository:

root@kitploit:~
    
    
    git clone https://github.com/YOUR_USERNAME/nuclei-cve-analyzer.git
    cd nuclei-cve-analyzer
    

Create a virtual environment:

root@kitploit:~
    
    
    python3 -m venv .venv
    source .venv/bin/activate
    

Install dependencies:

root@kitploit:~
    
    
    pip install -r requirements.txt
    

## Usage

### Scan a CVE list

root@kitploit:~
    
    
    python3 nuclei_analyzer.py \
        -f example_cves.txt \
        -n /path/to/nuclei-templates
    

### Use multiple threads

root@kitploit:~
    
    
    python3 nuclei_analyzer.py \
        -f example_cves.txt \
        -t 16 \
        -n /path/to/nuclei-templates
    

### Save results

root@kitploit:~
    
    
    python3 nuclei_analyzer.py \
        -f example_cves.txt \
        -t 16 \
        -o output/results.json \
        -n /path/to/nuclei-templates
    

### Scan the local system for CVE references

root@kitploit:~
    
    
    python3 nuclei_analyzer.py \
        --scan-system \
        -n /path/to/nuclei-templates
    

### Show help

root@kitploit:~
    
    
    python3 nuclei_analyzer.py --help
    

## Arguments

## Output

The analyzer generates several reports inside the output directory.

### Combined Results

Contains the complete analysis:

root@kitploit:~
    
    
    output/results_YYYYMMDD_HHMMSS.json
    

### Found CVEs

CVEs from the input set that have matching Nuclei templates:

root@kitploit:~
    
    
    output/found_cves.json
    

### Missing Templates

CVEs from the input set without matching templates:

root@kitploit:~
    
    
    output/missing_templates.json
    

### Used CVEs

All CVEs referenced by the scanned Nuclei templates:

root@kitploit:~
    
    
    output/used_cves.json
    

### Priority Report

A focused list of CVEs currently missing templates:

root@kitploit:~
    
    
    output/priority_report.json
    

### CSV Results

A spreadsheet-friendly version of the results:

root@kitploit:~
    
    
    output/results.csv
    

## Example Workflow

A typical workflow for identifying template gaps:

root@kitploit:~
    
    
    # Prepare a list of CVEs
    cat example_cves.txt
    
    # Scan the Nuclei repository
    python3 nuclei_analyzer.py \
        -f example_cves.txt \
        -t 16 \
        -n ~/nuclei-templates
    

The analyzer then reports which CVEs are already covered and which ones do not currently have matching templates.

## Use Cases

### Nuclei Contributors

Identify CVEs that may need new detection templates.

### Security Researchers

Quickly compare vulnerability lists against existing Nuclei coverage.

### Vulnerability Management

Determine which vulnerabilities in a dataset can already be detected using Nuclei.

### Research Automation

Use the generated JSON or CSV reports as input for other analysis pipelines.

## Project Status

This project is actively focused on **CVE-to-Nuclei template coverage analysis**.

The goal is to keep the tool lightweight, fast, and focused rather than turning it into a general-purpose vulnerability enrichment platform.

## Roadmap

Planned improvements include:

  * Improved template reference detection
  * Template metadata analysis
  * Template quality checks
  * Better duplicate-template detection
  * Faster template indexing
  * Incremental scanning
  * Additional export formats
  * Improved reporting and filtering
  * Template-to-CVE coverage statistics



## Requirements

  * Python 3.10+
  * Rich
  * orjson



Install dependencies with:

root@kitploit:~
    
    
    pip install -r requirements.txt
    

## Contributing

Contributions, bug reports, and improvements are welcome.

When submitting a pull request:

  1. Keep changes focused.
  2. Preserve the existing CLI behaviour unless the change intentionally modifies it.
  3. Include a clear description of the change.
  4. Test the analyzer against a real Nuclei template repository where possible.



## Disclaimer

This project is intended for **security research, vulnerability analysis, and authorized testing**.

Use it only against systems, repositories, and datasets you are authorized to analyze.

## License

Add your project license here.

* * *

**Nuclei CVE Analyzer**  
CVE coverage analysis for Nuclei templates