Skip to content

NucleiSniper

Fingerprints a target, has Jev score every Nuclei template 0-4 for relevance, then runs all templates highest-relevance first.

Demoprototype

Overview

NucleiSniper is a single-script pipeline that makes Nuclei vulnerability scans surface relevant findings sooner. Running nuclei against a target fires more than 13,000 templates in directory order, so irrelevant checks (WordPress plugins on a Django app, industrial probes on a blog) run before useful ones. NucleiSniper first deep-fingerprints each target, using about 100 technology fingerprints, HTML and script clues, asset versions, redirects, cookies, TLS, DNS, favicon hash, robots and sitemap.

It then sends template batches to TypeSafe Jev to score relevance from 0 to 4 against that profile, splitting oversized batches automatically, and runs Nuclei with every template ordered by score. It prioritises rather than filters, so coverage is unchanged, and scans can be resumed. It is for penetration testers and security teams with authorised targets.

What the decision model decides

TypeQuestionAnswers
ScoreHow relevant is this Nuclei template to the fingerprinted target?0 · 1 · 2 · 3 · 4

How it works

  1. Fingerprint the target across 30+ signal types.
  2. Send template batches to Jev for 0-4 relevance scores.
  3. Sort all templates by score.
  4. Run Nuclei in that order; resume if interrupted.

Strengths

  • Critical findings tend to appear earlier.
  • No templates are skipped.
  • Resumable long scans.

Caveats

  • Sends target fingerprint data to TypeSafe.
  • Requires a TypeSafe key; use only on authorised targets.
  • Demo-stage single script.

At a glance

Type
Demo
Status
prototype
Language
Python
Runtime
CLI
Has code
yes

Use cases and integrations

How curated lists describe it

  • Security triage: prioritises Nuclei vulnerability templates by fingerprinting the target first, so a scan spends its budget on templates that can actually match.

    yibie/awesome-jev
  • AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.

    hellogumbo/awesome-jev
  • Runs every Nuclei template in order of relevance to a fingerprinted target, with Jev scoring which findings are likely to matter.

    MrJev/awesome-jev

Frequently asked questions

Does it skip templates?

No, it only reorders them so the most relevant run first.

What does Jev score?

Each template's relevance to the target profile on a 0-4 scale.

What data is sent to Jev?

The target fingerprint and template descriptions in batches.

Related projects

  • Jev Search★ 534

    Plain-language web search where a decision model like Jev picks query, sources and time range, then ranks Search1API results.

    AppproductionTypeScript
  • MCP server over Apple developer docs and WWDC transcripts that uses hybrid search, then Jev relevance scores to rank results.

    MCP serverproductionTypeScript
  • Local long-term memory for coding agents with an optional Jev reranker that orders recalled memories.

    ProjectproductionTypeScript
  • Volcengine's context database for agents, with a Jev rerank client that scores candidate documents with jev-latest as relevance.

    LibraryproductionPython
  • Jev as a calibrated reranker: query plus up to 30 documents in one call, one relevance Noul per document, benchmarked on BEIR.

    ProjectbetaPython
  • Semantic grep that asks Jev a yes/no about every function for questions no regex can express, with cost reporting.

    Projectbeta