Engine creation options
NewNucleiEngine
Creates a standard single-instance Nuclei engine.NewNucleiEngineCtx
Creates a Nuclei engine with a custom context.NewThreadSafeNucleiEngine
Creates a thread-safe Nuclei engine for concurrent scanning.NewThreadSafeNucleiEngineCtx
Creates a thread-safe Nuclei engine with a custom context.Template options
WithTemplatesOrWorkflows
Specifies template and workflow sources to load.Local template file or directory paths
Local workflow file or directory paths
Remote template URLs
Remote workflow URLs
Trusted domains for remote templates/workflows
WithTemplateFilters
Filters which templates to load and execute.Filter by severities (CSV: info, low, medium, high, critical)
Exclude severities (CSV: info, low, medium, high, critical)
Filter by protocol types (CSV: http, dns, tcp, ssl, etc.)
Exclude protocol types
Filter by template authors
Filter by tags present in templates
Exclude templates with specific tags
Include templates with specific tags
Filter by template IDs
Exclude specific template IDs
DSL conditions/expressions for template filtering
Concurrency options
WithConcurrency
Controls concurrency for various scanning operations.Number of templates to run concurrently (per host in host-spray mode)
Number of hosts to scan concurrently (per template in template-spray mode)
Number of hosts to scan concurrently for headless templates
Number of headless templates to run concurrently
Number of JavaScript templates to run concurrently
Maximum concurrent payloads per template (recommended: 25)
Maximum concurrent HTTP probes (recommended: 50)
WithGlobalRateLimit
Sets global rate limit for all hosts combined.Maximum number of requests per duration
Time duration for rate limit window
WithGlobalRateLimitCtx
Sets global rate limit with context support.Network options
WithNetworkConfig
Configures network-related settings.Timeout in seconds for requests
Number of retries for failed requests
Leave default ports (80/443) in URLs
Network interface to use for scanning
Custom source IP address for network requests
Use system DNS resolvers
Custom DNS resolver list
Maximum errors before skipping a host
Disable max host error optimization
Error types to track for max host error
WithProxy
Configures proxy settings.List of proxy URLs
Whether to proxy internal requests
WithResponseReadSize
Sets maximum response size to read.Maximum size in bytes (0 = no limit)
Feature flags
EnableCodeTemplates
Enables loading and executing code protocol templates.EnableSelfContainedTemplates
Enables self-contained templates.EnableGlobalMatchersTemplates
Enables global-matchers templates.EnableFileTemplates
Enables file protocol templates.EnablePassiveMode
Enables passive HTTP response processing mode.EnableMatcherStatus
Enables matcher status in results.DisableTemplateCache
Disables template caching.SignedTemplatesOnly
Only load and run signed templates.DASTMode
Only run DAST templates.Headless options
EnableHeadlessWithOpts
Enables headless browser support with options.Timeout for page loads in seconds
Show browser window during execution
Use installed Chrome instead of Chromium
Additional browser command-line options
Interactsh options
WithInteractshOptions
Configures Interactsh for out-of-band testing.Interactsh server URL
Cache size for interactions
Cache eviction time in seconds
Cooldown period in seconds
Polling duration in seconds
Stats and monitoring
EnableStatsWithOpts
Enables statistics collection and metrics.Stats collection interval in seconds (default: 5)
Output stats in JSON format
Port for metrics server (Prometheus format)
Not supported with
ThreadSafeNucleiEngineLogging and verbosity
WithVerbosity
Controls logging verbosity.Show verbose output
Show only results
Show debug output
Show requests in debug output
Show responses in debug output
Show variable dumps in output
Not supported with
ThreadSafeNucleiEngineWithLogger
Sets a custom logger instance.Custom handlers
UseOutputWriter
Sets a custom output writer.Not supported with
ThreadSafeNucleiEngineUseStatsWriter
Sets a custom stats writer.Not supported with
ThreadSafeNucleiEngineWithTemplateUpdateCallback
Sets a callback for template updates.Not supported with
ThreadSafeNucleiEngineAuthentication and secrets
WithAuthProvider
Sets a custom authentication provider.LoadSecretsFromFile
Loads secrets from files.WithHeaders
Sets custom headers for all HTTP requests.WithVars
Sets custom variables for templates.Sandbox options
WithSandboxOptions
Configures sandbox security options.Allow templates to access local files
Restrict access to local/private networks
Scan strategy
WithScanStrategy
Sets the scanning strategy.Scan strategy: “host-spray” or “template-spray”
Advanced options
WithCatalog
Uses a custom catalog instance.WithOptions
Sets all options at once using types.Options.WithResumeFile
Enables scan resumption.WithTemporaryDirectory
Sets a custom temporary directory.DisableUpdateCheck
Disables automatic update checks.Thread-safe mode restrictions
The following options are not supported withThreadSafeNucleiEngine:
EnableStatsWithOptsWithVerbosityUseOutputWriterUseStatsWriterWithTemplateUpdateCallbackWithSandboxOptionsWithProxy
WithInteractshOptionsWithNetworkConfig
ErrOptionsNotSupported.
Next steps
Basic usage
Learn how to use these options
API reference
Explore the API documentation