Update templates with multiple payloads / request with flow to avoid unnecessary requests

[ehsandeep]

Template IDs or paths

Here is list of top templates with multiple request using payloads or request list that can reviewed further to add flow rule for tech detection before running actual checks.

Tasks

Beta Give feedback

1. http/cves/2014/CVE-2014-2383.yaml
2. http/cves/2017/CVE-2017-17562.yaml
3. http/cves/2019/CVE-2019-17382.yaml
4. http/cves/2021/CVE-2021-26084.yaml
5. http/cves/2022/CVE-2022-2034.yaml
6. http/cves/2023/CVE-2023-24489.yaml
7. http/cves/2023/CVE-2023-27524.yaml
8. http/cves/2023/CVE-2023-2825.yaml
9. http/cves/2023/CVE-2023-46214.yaml
10. http/cves/2023/CVE-2023-6379.yaml
11. http/default-logins/apache/tomcat-default-login.yaml
12. http/default-logins/couchdb/couchdb-default-login.yaml
13. http/default-logins/esafenet-cdg-default-login.yaml
14. http/default-logins/goip-default-login.yaml
15. http/default-logins/jboss/jboss-jbpm-default-login.yaml
16. http/default-logins/jboss/jmx-default-login.yaml
17. http/default-logins/oracle/peoplesoft-default-login.yaml
18. http/default-logins/phpmyadmin/phpmyadmin-default-login.yaml
19. http/default-logins/weblogic/weblogic-weak-login.yaml
20. http/exposed-panels/adminer-panel-detect.yaml
21. http/exposed-panels/compalex-panel-detect.yaml
22. http/exposed-panels/openam-panel.yaml
23. http/exposed-panels/oracle-peoplesoft-panel.yaml
24. http/exposed-panels/phpmyadmin-panel.yaml
25. http/exposed-panels/webeditors-check-detect.yaml
26. http/exposures/apis/swagger-api.yaml
27. http/exposures/backups/php-backup-files.yaml
28. http/exposures/backups/sql-dump.yaml
29. http/exposures/backups/sql-server-dump.yaml
30. http/exposures/backups/zip-backup-files.yaml
31. http/exposures/configs/codeigniter-env.yaml
32. http/exposures/configs/deployment-ini.yaml
33. http/exposures/configs/phpinfo-files.yaml
34. http/exposures/configs/server-private-keys.yaml
35. http/exposures/configs/zend-config-file.yaml
36. http/exposures/files/routes-ini.yaml
37. http/exposures/files/shellscripts.yaml
38. http/exposures/logs/error-logs.yaml
39. http/exposures/logs/roundcube-log-disclosure.yaml
40. http/fuzzing/cache-poisoning-fuzz.yaml
41. http/fuzzing/header-command-injection.yaml
42. http/fuzzing/linux-lfi-fuzzing.yaml
43. http/fuzzing/mdb-database-file.yaml
44. http/fuzzing/prestashop-module-fuzz.yaml
45. http/fuzzing/waf-fuzz.yaml
46. http/fuzzing/wordpress-plugins-detect.yaml
47. http/fuzzing/wordpress-themes-detect.yaml
48. http/fuzzing/wordpress-weak-credentials.yaml
49. http/miscellaneous/defacement-detect.yaml
50. http/miscellaneous/ntlm-directories.yaml
51. http/misconfiguration/aem/aem-default-get-servlet.yaml
52. http/misconfiguration/aem/aem-gql-servlet.yaml
53. http/misconfiguration/akamai/akamai-s3-cache-poisoning.yaml
54. http/misconfiguration/default-spx-key.yaml
55. http/misconfiguration/gitlab/gitlab-api-user-enum.yaml
56. http/misconfiguration/gitlab/gitlab-user-enum.yaml
57. http/misconfiguration/jolokia/jolokia-info-disclosure.yaml
58. http/misconfiguration/phpmyadmin/phpmyadmin-setup.yaml
59. http/misconfiguration/proxy/open-proxy-internal.yaml
60. http/misconfiguration/servicenow-widget-misconfig.yaml
61. http/technologies/graphql-detect.yaml
62. http/technologies/graylog/graylog-api-exposure.yaml
63. http/technologies/microstrategy-detect.yaml
64. http/technologies/telerik/telerik-dialoghandler-detect.yaml
65. http/vulnerabilities/apache/shiro/shiro-deserialization-detection.yaml
66. http/vulnerabilities/generic/cors-misconfig.yaml
67. http/vulnerabilities/generic/generic-env.yaml
68. http/vulnerabilities/generic/generic-j2ee-lfi.yaml
69. http/vulnerabilities/generic/generic-linux-lfi.yaml
70. http/vulnerabilities/generic/generic-windows-lfi.yaml
71. http/vulnerabilities/generic/open-redirect-generic.yaml
72. http/vulnerabilities/generic/xss-fuzz.yaml
73. http/vulnerabilities/grafana/grafana-file-read.yaml
74. http/vulnerabilities/other/bitrix-open-redirect.yaml
75. http/vulnerabilities/tongda/tongda-auth-bypass.yaml
76. http/vulnerabilities/wordpress/wordpress-accessible-wpconfig.yaml
77. http/vulnerabilities/wordpress/wp-xmlrpc-brute-force.yaml
78. javascript/audit/mysql/mysql-load-file.yaml
79. javascript/default-logins/ssh-default-logins.yaml
80. javascript/enumeration/mysql/mysql-default-login.yaml
81. javascript/enumeration/mysql/mysql-show-databases.yaml
82. javascript/enumeration/mysql/mysql-show-variables.yaml
83. javascript/enumeration/mysql/mysql-user-enum.yaml
84. javascript/enumeration/pgsql/pgsql-default-db.yaml

Steps To Reproduce

See #11235 for example.

Anything else?

This can help to reduce nuclei run time while running vulnerability scan with all default templates.