-
Notifications
You must be signed in to change notification settings - Fork 3.4k
[FALSE-NEGATIVE] default-asp-net-page does not detect modern default ASP.NET welcome page #13543
Copy link
Copy link
Closed
Labels
false-negativeNuclei template missing valid resultsNuclei template missing valid results
Description
Template IDs or paths
- default-asp-net-pageEnvironment
- OS: MacOS Tahoe 26.0.1
- Nuclei: v3.4.10
- Go: go version go1.21.5 darwin/arm64Steps To Reproduce
The template fails to detect a known default ASP.NET welcome page with modern HTML structure.
-
Run the template against the target URL:
nuclei -t default-asp-net-page -u http://target.com/ -
The template returns a false negative (no match found).
The current template's matchers are outdated and do not correctly identify the unique string or title present in the dumped response below.
Relevant dumped responses
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width" />
<title>Home Page</title>
<link href="/Content/css?v=wsY4eiW9QSpK69Gagy2TurKDaD2CKhsHpIFio-6wrMo1" rel="stylesheet"/>
<script src="/bundles/modernizr?v=inCVuEFe6J4Q07A0AcRsbJic_UE5MwpRMNGcOtk94TE1"></script>
</head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<body>
<div class="navbar navbar-inverse navbar-fixed-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-collapse">
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand" href="/%E4%B8%BB%E9%A1%B5">Application name</a>
</div>
<div class="navbar-collapse collapse">
<ul class="nav navbar-nav">
<li><a href="/">Home</a></li>
<li><a href="/Help">API</a></li>
</ul>
</div>
</div>
</div>
<div class="container body-content">
<div class="jumbotron">
<h1>ASP.NET</h1>
<p class="lead">ASP.NET is a free web framework for building great Web sites and Web applications using HTML, CSS, and JavaScript.</p>
<p><a href="https://asp.net" class="btn btn-primary btn-lg">Learn more »</a></p>
</div>
<div class="row">
<div class="col-md-4">
<h2>Getting started</h2>
<p>ASP.NET Web API is a framework that makes it easy to build HTTP services that reach
a broad range of clients, including browsers and mobile devices. ASP.NET Web API
is an ideal platform for building RESTful applications on the .NET Framework.</p>
<p><a class="btn btn-default" href="https://go.microsoft.com/fwlink/?LinkId=301870">Learn more »</a></p>
</div>
<div class="col-md-4">
<h2>Get more libraries</h2>
<p>NuGet is a free Visual Studio extension that makes it easy to add, remove, and update libraries and tools in Visual Studio projects.</p>
<p><a class="btn btn-default" href="https://go.microsoft.com/fwlink/?LinkId=301871">Learn more »</a></p>
</div>
<div class="col-md-4">
<h2>Web Hosting</h2>
<p>You can easily find a web hosting company that offers the right mix of features and price for your applications.</p>
<p><a class="btn btn-default" href="https://go.microsoft.com/fwlink/?LinkId=301872">Learn more »</a></p>
</div>
</div>
<hr />
<footer>
<p>© 2025 - My ASP.NET Application</p>
</footer>
</div>
<script src="/bundles/jquery?v=2u0aRenDpYxArEyILB59ETSCA2cfQkSMlxb6jbMBqf81"></script>
<script src="/bundles/bootstrap?v=lescQEuG5u4jd-GcVDBcbpUOSyTDIg0Kk9zHDX55GCw1"></script>
</body>
</html>Anything else?
No response
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
false-negativeNuclei template missing valid resultsNuclei template missing valid results