educationNov 12, 202510:49pending
Course 3 - Mastering Nuclei for Bug Bounty | Episode 5: Matching Conditions in the Body and Header
About this episode
In this lesson, you’ll learn about:
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
- POST-based matchers in Nuclei — overview: moving from simple GET checks to POST requests that include payloads; used when the vulnerable endpoint expects body data.
- Matching in the body:
- Set request method: post and provide body: (key=value pairs, e.g., search=apple or YAML-style search: apple).
- Create matchers that look for a word (e.g., apple) in the response body and typically assert a status code (e.g., status: 200) for a confident hit.
- Matching in response headers:
- Use part: header in the matcher to check for values that appear in response headers (e.g., a custom header containing apple).
- Combine header matching with status checks for precision.
- Template authoring workflow:
- Build the requests block with method: POST, path, and body:.
- Add matchers specifying type: word or type: regex, part: body or part: header, and optional status conditions.
- Validation & debugging:
- Validate YAML syntax with a linter (YAML Lint) before running.
- Use -debug and -v to print exact HTTP requests/responses Nuclei sends/receives.
- Proxy through Burp Suite to capture the POST request, inspect the response, and confirm the matcher logic works as intended.
- Practical tips:
- Ensure correct Content-Type headers (e.g., application/x-www-form-urlencoded or application/json) in the template if the endpoint requires it.
- When matching JSON responses, prefer type: regex to safely extract values (e.g., \"key\"\s*:\s*\"apple\").
- Test locally on a safe target or staging environment before broad runs.
- Combine body and header matchers when possible to reduce false positives.
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
Get every episode summarized
Each time CyberCode Academy publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from CyberCode Academy
Course 42 - Mobile Malware Analysis Fundamentals | Episode 14: Architecture and...
CyberCode Academy
Sep 10, 202624:31completed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 13: Designing and Arc...
CyberCode Academy
Sep 9, 202617:34failed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 12: Dynamic Analysis...
CyberCode Academy
Sep 8, 202628:08completed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 11: Dynamic Analysis...
CyberCode Academy
Sep 7, 202624:15completed