Skipped parameter as found uninteresting 10 times

[reewardius]

I'm using a fuzzing template with around 300 different payloads to test for open redirect and other issues. However, after processing the first 10 payloads, Nuclei stops and skips a parameter. In response, I get the following:
Skipped origin_return_url from parameter for https://target.com/homepage?origin_return_url=/%01https://evil.com as found uninteresting 10 times

Is there a way to bypass this and keep fuzzing? Maybe a Nuclei flag? Please provide a link to documentation, or show an example of how to bypass it. Thanks!!!

[dogancanbakir]

You can use the following flag to control this value:

 -fuzz-param-frequency int           frequency of uninteresting parameters for fuzzing before skipping (default 10)

[dogancanbakir]

also updated nuclei flags in doc projectdiscovery/docs#150

[reewardius]

Why is the default 10? Maybe make it 50-100? If you run the standard DAST templates, some payloads are skipped rather quickly

nuclei -u "http://testaspnet.vulnweb.com/ReadNews.aspx?id=0&NewsAd=ads/def.html" -tags lfi -dast -v

like this, if there are only 29 payloads will be processed

but if so, 43.

nuclei -u "http://testaspnet.vulnweb.com/ReadNews.aspx?id=0&NewsAd=ads/def.html" -tags lfi -dast -v -fuzz-param-frequency 1000

[dogancanbakir]

We can refer to this as optimization, which is determined during feature design. You can always create an issue to request a change, and we will review it!

[reewardius]

Okay, thank you.