Skip to content

[BUG] Almost all templates being skipped when run with -dut (-disable-unsigned-templates) #6564

@FiveOFive

Description

@FiveOFive

Is there an existing issue for this?

  • I have searched the existing issues.

Current Behavior

Recently nuclei scans launched with the -dut (-disable-unsigned-templates) flag started seeing only 5 signed templates. Previously the same scan showed [INF] Executing 7219 signed templates from projectdiscovery/nuclei-templates

This reproduces for me with a clean nuclei installation using go and with the docker container as well.

Has anything changed with how the templates are signed? Or what next steps can be taken to verify the template signatures are working correctly in my installation?

Expected Behavior

To see more signed templates from projectdiscovery/nuclei-templates

Steps To Reproduce

Here's the command I used to test with docker

docker run --rm projectdiscovery/nuclei -dut -u google.com                                 

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v3.4.10

		projectdiscovery.io

[INF] nuclei-templates are not installed, installing...
[INF] Successfully installed nuclei-templates at /root/nuclei-templates
[WRN] Found 1 templates with syntax error (use -validate flag for further examination)
[WRN] Found 11 templates with runtime error (use -validate flag for further examination)
[WRN] Skipping 9685 unsigned template[s]
[INF] Current nuclei version: v3.4.10 (latest)
[INF] Current nuclei-templates version: v10.3.1 (latest)
[INF] New templates added in latest release: 119
[INF] Templates loaded for current scan: 5
[INF] Executing 5 signed templates from projectdiscovery/nuclei-templates
[INF] Targets loaded for current scan: 1
[INF] Running httpx on input host
[INF] Found 1 URL from httpx
[INF] Scan completed in 10.081467171s. No results found.

Without -dut the logs show:

...
[INF] Executing 5 signed templates from projectdiscovery/nuclei-templates
...
[WRN] Loading 8696 unsigned templates for scan. Use with caution.
...

Relevant log output

Environment

- OS: Mac
- Nuclei: v3.4.10
- Go: go version go1.25.1 darwin/arm64

I've also tested with the latest Docker image using `docker pull projectdiscovery/nuclei:latest`

Anything else?

No response

Metadata

Metadata

Assignees

Labels

Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions