Running scans on .onion URLs

[rxerium]

Hi team,

I'm testing a template which will allow me to detect content on websites hosted on .onion links but I was wondering if this is possible with Nuclei? httpX is resolving the onion urls but Nuclei is failing to gather data (see screenshot attached). Is it because the user agent is one that can't resolve tor links? My system is routed through the tor network.

User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; WebView/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18362

Thanks,

Rishi

[ye11oc4t]

While httpx supports .onion links when routed through Tor (e.g., via 127.0.0.1:9050), Nuclei uses its own HTTP client internally.
Nuclei does not inherit system-wide proxy settings or httpx behavior by default.
This means Nuclei will fail to resolve .onion domains unless explicitly configured to use a SOCKS5 proxy.

So my suggestion is to run a local Tor proxy and configure nuclei to use that proxy.

[rxerium]

Understood, thank you!