not finding scurity vulnerabilities

[vikisec]

nuclei is not finding security vulnerabilities in a vulnerrable website. tried it with different websites but same result. refer the screen shot attached below

[geeknik]

It looks like you're using Nuclei 2.8.3, however, Nuclei 2.8.6 is the latest release version, I'd upgrade to that and try again.

[vikisec]

same output with latest release still not finding bugs

[vancong160202]

Have you fixed to detect the vulnerability with juice shop web? If so, please help me how to do it. Thank you

[geeknik]

I wish I could say I could reproduce the behavior, but my template testing ground shows nuclei appears to be working as intended...

[vikisec]

the diffrence is thatt you are loading fuzzing templates in first. i am just giving a target and let all templates scan. just do a test with all templates with "./nuclei - target www.domain.com". and upload the result.

[geeknik]

Second screenshot is 2583 templates from the 9.3.4 release minus the boring info/low severity ones. I have nothing more to add. Someone else should chime in.

[ehsandeep]

@vikisec nuclei find vulnerability based on the template you were running, and I don't see the target website has any vulnerability that can be detected from the default set of nuclei templates; some of them can be found using fuzzing templates, and you can write more custom template to find more.

[vikisec]

actually i tested on "http://testphp.vulnweb.com/" for target practise, this website had a lot of vulnerrabilities. i scanned it before(few months ago) and find vulnerabilities. now i also test on "https://juice-shop.herokuapp.com/#/" it also had same vulnerabilities but not finding anything on nuclei. but when i scan now all these websites are showing clean output in nuclei . i am sure something wrong with nuclei & thats why i reported.

[olearycrew]

@vikisec when I go to https://juice-shop.herokuapp.com/#/ there is no application there - just the generic Heroku page. It's possible that it was part of Heroku's free tier and thus is gone now.