What's Changed

• Added support to expose DNS response as dsl field by @ShubhamRasal in #3613
• Added support to filter templates based on classification by @iamargus95 in #3606
• Added check to make severity as a mandatory field by @dogancanbakir in #3540
• Added support to load templates deprecated path by @tarunKoyalwar in #3635
• Added warning message for templates loaded by deprecated template path by @tarunKoyalwar in #3635
• Added warning message for templates loaded with deprecated protocol syntax by @tarunKoyalwar in #3635
• Added option to save extractor result to file by @tarunKoyalwar in #3608
• Fixed nil pointer crash in interactsh client by @Mzack9999 in #3590
• Fixed crash with tlsx integration by @ehsandeep in #3620
• Fixed crash with no-interactsh option by @ehsandeep in #3621
• Fixed panic while parsing tlsx response by @tarunKoyalwar in #3641
• Fixed issue with params in self-contained template by @tarunKoyalwar in #3608
• Fixed issue with aws signer by @tarunKoyalwar in #3601
• Fixed issue with os permission check by @iamargus95 in #3631
• Fixed issue with no color in windows by @ehsandeep in #3634
• Fixed issue with variables evaluation by @ShubhamRasal in #3599
• Fixed issue to support headless template on OpenBSD by @lu4nx in #3637

Issues closed in this release - https://github.com/projectdiscovery/nuclei/milestone/30

New Contributors

• @MetzinAround made their first contribution in #3579
• @iamargus95 made their first contribution in #3606
• @lu4nx made their first contribution in #3637

Full Changelog: v2.9.2...v2.9.3

What's Changed

• Added llm_prompt as dsl helper by @Mzack9999 in #3480

llm_prompt("what tech this server is using? return idk if you dont know" + header)

• Added azure blob storage support for custom template download by @kchason in #3542
• Added gitlab project support for custom template download by @kchason in #3570
• Added CPE / EPSS Score information to cve-annotation by @sduc in #3486
• Added variable evaluation support in payloads & variables by @ShubhamRasal in #3503
• Added config management + logic refactor by @tarunKoyalwar in #3567
• Added JSONL(ine) Export (#3504) by @kchason in #3505

   -je, -json-export string  file to export results in JSON format

• Fixed bug in http race condition logic by @ShubhamRasal in #3533
• Fixed s3 argument typos by @kchason in #3536
• Fixed integration test by @tarunKoyalwar in #3506
• Fixed rate limit options not working with query fuzzing by @RamanaReddy0M in #3532
• Fixed panic crash in tlsx by @ehsandeep in #3554
• Fixed panic with proxy input by @tarunKoyalwar in #3526
• Updated -nc option by @dogancanbakir in #3539
• Updated ccache with generic gcache by @Mzack9999 in #3523
• Updated -un option to -up as a short flag of self-update option by @ehsandeep in #3573

Issues closed in this release - https://github.com/projectdiscovery/nuclei/milestone/29?closed=1

New Contributors

• @sduc made their first contribution in #3486
• @dogancanbakir made their first contribution in #3539

Full Changelog: v2.9.1...v2.9.2

Breaking Changes:

⚠️ Updated -json option to -jsonl to correctly reflect the output format by @kchason in #3466

   -j, -jsonl  write output in JSONL(ines) format

⚠️ Updated protocol attribute name (requests=> http & network => tcp) in templates by @ShubhamRasal in #3425

Templates with the use of requests and network will still work but will be deprecated completely in the future.

What's New

• Added JSON output export support (-json-export) by @kchason in #3466

   -je, -json-export string  file to export results in JSON format

• Added cpe and epss-score support in template classification by @ehsandeep in #3489
• Added mkdir support in headless screenshot by @tarunKoyalwar in #3457
• Added support for jira custom fields by @jordanpotti in #3406
• Added AWS catalog for loading templates from bucket by @leoloobeek in #3372
• Fixed a crash in tlsx integration by @ehsandeep in #3490
• Fixed template link references by @mlec1 in #3485
• Fixed an issue with the scanning strategy option by @nHurD in #3464
• Fixed AWS S3 bucket catalog path mismatch by @tarunKoyalwar in #3474
• Moved DSL helper functions to dsl project by @RamanaReddy0M in #3461

Issues closed in this release - https://github.com/projectdiscovery/nuclei/milestone/28?closed=1

New Contributors

• @jordanpotti made their first contribution in #3406
• @nHurD made their first contribution in #3464
• @leoloobeek made their first contribution in #3372
• @mlec1 made their first contribution in #3485

Full Changelog: v2.9.0...v2.9.1

What's Changed

• Added support for templates in JSON format by @CodFrm in #3333
• Added template sign/verify functionality by @Mzack9999 in #3029
• Added -track-error option to add custom errors to max-host-error watch list by @austintraver in #3399
• Added data race panic check in integration_tests by @tarunKoyalwar in #3303
• Added CLI option to override fuzzing template options by @ShubhamRasal in #3355
• Added ip_formats() helper function by @xm1k3 in #3286
• Added resolve() helper function by @xm1k3 in #3321
• Added rawstringslice to make reference url case insensitive by @Bisstocuz in #3346
• Fixed a bug with OR matcher condition with interactsh by @RamanaReddy0M in #3397
• Fixed set-method option in headless template by @Mzack9999 in #3373
• Fixed atomic bool check by @Mzack9999 in #3376
• Fixed bug in URL path and adds integration tests by @tarunKoyalwar in #3331
• Fixed crash with interactsh integration by @Mzack9999 in #3312
• Fixed data race when using interactsh_matchers by @tarunKoyalwar in #3432
• Fixed file input in custom vars with self-contained http template by @tarunKoyalwar in #3385
• Fixed missing port in matched ssl templates by @tarunKoyalwar in #3380
• Fixed nil pointer reference + use map helper by @Mzack9999 in #3421
• Fixed parseUrl test by @ShubhamRasal in #3426
• Fixed typo in -hc option by @sullo in #3400

Issues closed in release - https://github.com/projectdiscovery/nuclei/milestone/27

New Contributors

• @noraj made their first contribution in #3162
• @Bisstocuz made their first contribution in #3346
• @CodFrm made their first contribution in #3333
• @austintraver made their first contribution in #3399
• @RamanaReddy0M made their first contribution in #3397

Full Changelog: v2.8.9...v2.9.0

What's Changed

• Fixed URL encoding issues in paths by @tarunKoyalwar in #3294
• Fixed panic crash with ratelimit by @tarunKoyalwar in #3257
• Fixed path handling inconsistencies by @tarunKoyalwar in #3243
• Fixed data race in templates with payloads by @tarunKoyalwar in #3265
• Fixed using httpx as a library for http probing by @Ice3man543 in #3261
• Fixed data race in race requests by @tarunKoyalwar in #3275
• Fixed publish docs workflow by @tarunKoyalwar in #3296
• Fixed retryablehttp for templates loading by @Mzack9999 in #3291
• Fixed aes_cbc helper function update by @Ice3man543 in #3287
• Fixed json schema for extractor attribute by @Mzack9999 in #3240
• Added env variable support in reporting config by @xm1k3 in #3188
• Added proxy use in headless binary download by @Mzack9999 in #3290
• Added interactsh payload input support in TLS SNI field by @Mzack9999 in #3276

Issues closed in the release - https://github.com/projectdiscovery/nuclei/milestone/26?closed=1

New Contributors

• @M-Faheem-Khan made their first contribution in #3235
• @galoget made their first contribution in #3299

Full Changelog: v2.8.8...v2.8.9

What's Changed

• Fixed url encoding issues by @tarunKoyalwar in #3211
• Fixed host spray race condition by @tarunKoyalwar in #3213
• Fixed panic crash with non-existent target input by @Ice3man543 in #3205
• Fixed aws signer missing template variables by @tarunKoyalwar in #3206
• Added clustering support for DNS templates by @Ice3man543 in #3204
• Added clustering support for TLS templates by @Ice3man543 in #3209
• Added support for -no-mhe option by @Mzack9999 in #3219

Issues closed in release - https://github.com/projectdiscovery/nuclei/milestone/25?closed=1

New Contributors

• @andreangelucci made their first contribution in #3214

Full Changelog: v2.8.7...v2.8.8

What's Changed

• Added generate_jwt, json_minify, json_prettify helper functions by @dwisiswant0 in #3160
• Added markdown index file by @xm1k3 in #3129
• Fixed issue with IP input in uncover integration by @tarunKoyalwar in #3186
• Fixed hmap storage requirement via omitempty by @Mzack9999 in #3111
• Fixed content length edge cases by @Mzack9999 in #3147
• Added optional timestamp in debug logs by @xm1k3 in #3110
• Moved examples to go file by @Mzack9999 in #3187

Full Changelog: v2.8.6...v2.8.7

What's Changed

• Fixed encoding issue with key characters in URL by @tarunKoyalwar in #3150
• Fixed matched URL in CLI output with rawhttp by @tarunKoyalwar in #3155
• Fixed file upload in the headless protocol by @Mzack9999 in #3091
• Extended advanced template filtering fields by @Mzack9999 in #3146
• Removed unused code in integration tests by @Mzack9999 in #3134

Full Changelog: v2.8.5...v2.8.6

What's Changed

• Fixed host skipping error by @ehsandeep in #3143
• Fixed bug to include template path of template by @ShubhamRasal in #3133
• Fixed a bug missing trailing slash by @tarunKoyalwar in #3127
• Added stale bot by @ehsandeep in #3137

Full Changelog: v2.8.4...v2.8.5

What's Changed

• Added scan strategy option by @tarunKoyalwar in #3075
• Added exporter for splunk reporting by @ChrisMandich in #3008
• Added initialization of flags with nil slice by @Mzack9999 in #3089
• Added YAML inclusion support by @Mzack9999 in #1767
• Added stop-at-first-match for headless protocol by @tarunKoyalwar in #3034
• Added support to query DNS TLSA record by @nothinux in #3054
• Added release announcement to discord server by @ehsandeep in #3120
• Added more error coverage to skip host to scan by @ehsandeep in #3121
• Added skipped host information on default run by @ehsandeep in #3123
• Added template path in json output by @ShubhamRasal in #3093
• Added ParseFromReader function by @ShubhamRasal in #3031
• Added cli variables support in SSL Protocol by @xm1k3 in #3069
• Fixed bug to automerge url parameters from input and templates by @tarunKoyalwar in #3010
• Fixed bug in markdown export to break line characters with HTML notation by @vzamanillo in #3014
• Fixed bug with -resume option rewriting the output file contents, so previous data removed by @xm1k3 in #2890
• Fixed tlsx ocsp panic by @tarunKoyalwar in #3041
• Fixed workflow templates when creating inputhttp helper by @owenrumney in #3049
• Fixed memory leak on hmap with LRU by @Mzack9999 in #3052
• Fixed debug flags do not work correctly with headless templates by @xm1k3 in #3030
• Fixed issue with deny list attribute in file protocol by @Mzack9999 in #3037
• Fixed issue with -scan-all-ips option by @tarunKoyalwar in #3080
• Fixed most go routine leaks by @Mzack9999 in #3073
• Fixed url input panic by @tarunKoyalwar in #3092
• Fixed golang example input by @jonathanwalker in #3088
• Fixed issue in dsl to avoid unwanted debug print by @Mzack9999 in #2995
• Fixed issue with failed items reporting error in hosterrorscache by @xm1k3 in #3047
• Refactor around the input to type conversion by @vzamanillo in #3007

Issues closed in release - https://github.com/projectdiscovery/nuclei/milestone/21?closed=1

New Contributors

• @shashikarsiddharth made their first contribution in #2876
• @ChrisMandich made their first contribution in #3008
• @jessekelly881 made their first contribution in #2777
• @jonathanwalker made their first contribution in #3088

Full Changelog: v2.8.3...v2.8.4