Hacking with Nuclei: Uncovering .git Secrets

Hacking with Nuclei: Uncovering .git Secrets

by John Hammond

Applied Sciences & Engineering Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 John Hammond 👥 2.2M 📅 November 17, 2025 ⏱ 23 min 👁 50K 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

Nucleivulnerability scannerYAML templates.git exposureGit Dumper

Summary

In this tutorial, John Hammond introduces Nuclei, a fast and customizable vulnerability scanner from ProjectDiscovery. He explains its YAML-based template system, which allows for flexible scanning of various vulnerabilities. The video demonstrates installing Nuclei on Kali Linux, running scans against a demo target, and analyzing results. Hammond shows how to create custom templates, including one to detect exposed .git directories, and uses Git Dumper to extract repository contents. He also explores existing templates for secrets like API keys and highlights the mobile nuclei templates from Optiv. The video concludes with a promotion for a Nuclei masterclass on HackingHub, offering a discount code. Throughout, Hammond emphasizes the power and ease of using Nuclei for automated vulnerability discovery.

116 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable practical knowledge on using Nuclei, a widely used open-source tool. Hammond’s argumentation is clear and logical, building from installation to advanced usage. He effectively demonstrates the tool’s capabilities with real examples, including custom template creation and integration with other tools like Git Dumper. The tutorial is well-structured, making it accessible for beginners while offering insights for more experienced users. The promotional segments are clearly separated and do not undermine the technical content.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates scientific rigor by showing actual command outputs and validating findings manually. Sources are primarily the official Nuclei GitHub repository and the HackingHub platform, which are credible. The title accurately reflects the content, focusing on uncovering .git secrets. The video includes a promotional segment for a training course, which is transparently disclosed. Overall, the content is reliable and well-sourced.

152 words

Title / Content Match

The title accurately reflects the content, focusing on using Nuclei to uncover .git secrets, which is demonstrated in the video.

Quality & Reliability

8/10

The video is a practical tutorial by a recognized cybersecurity educator. It demonstrates real usage of the Nuclei tool, including installation, template creation, and scanning. The content is accurate and well-explained, with hands-on examples. However, it includes promotional segments for a training course, which slightly reduces the focus on pure technical content.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • Nuclei GitHub Repository — Official repository for Nuclei, referenced as the source of the tool.
  • HackingHub Nuclei Masterclass — Promoted training course for Nuclei, mentioned in the video.
  • Just Hacking Training — Training platform mentioned as a resource.
  • CodeCrafters — Affiliate link for learning to code, mentioned in the description.
  • OpenVPN — Affiliate link for VPN hosting, mentioned in the description.
  • CyberDefenders — Affiliate link for blue team training, mentioned in the description.
  • Newsletter — Link to John Hammond's newsletter, mentioned in the description.

Concurring Sources

Contribution & Novelties

The video provides a practical, hands-on introduction to Nuclei, emphasizing its YAML-based template system and its power for automated vulnerability scanning. It demonstrates real-world usage, including custom template creation and integration with Git Dumper. The tutorial is valuable for both beginners and experienced practitioners looking to incorporate Nuclei into their workflow.

Pour aller plus loin :

98 words

Radar Profile

The radar profile shows high scores in quantity and quality of information, with a slightly lower technical level, indicating a balance between depth and accessibility. The reliability score is high, reflecting the credibility of the content and sources.

Reliability 8/10

💬 Sur les 0 commentaires analysés, aucune tendance n'a pu être dégagée.