Lion Cipher Lab
Template-based web recon with httpx and nuclei
- AppSec / DevSecOps
- Intermediate
- ~45 min
- Free · no account required
Why it matters
Modern security teams do not click through a GUI for every check — they run fast, repeatable, scriptable tools from the command line, and ProjectDiscovery's httpx and nuclei are two of the most widely used. httpx answers the first practical question of any assessment: out of a list of addresses, which ones are actually serving a live web app, and what are they? nuclei answers the next one: does this target match any of thousands of community-written templates that codify known vulnerabilities, misconfigurations, and exposures? Together they are the template-driven recon pipeline that shows up…
What you'll learn
- probing live hosts with httpx
- template-based scanning with nuclei
- running community nuclei-templates
- filtering findings by severity
- reading and verifying template matches
- authorized-testing discipline
Steps in this lab
- The rule, before a single request goes out
- What httpx does: find the live hosts
- What nuclei does: templates for known issues
- Install both tools
- Probe your own target with httpx
- Run nuclei templates against your target
- Read the findings by severity
- The reality: templates find the known, not the novel