http://maverick.i2p/blog/reconnaissance
BASH nuclei - l alive.txt - t cves/ - t misconfiguration/ - o vulns.txt If you want fewer false positives, run only severity you can handle: BASH nuclei - l alive.txt - severity medium,high,critical - o vulns.txt Warning: Do not trust output blindly. If Nuclei says “High Severity,” verify it manually with curl or Burp Suite.