# Automated CVE scanning of Bug Bounty programs with Nuclei: n8n workflow

> Started by a clock, and works across Gmail. 21 steps, 2 branches, 2 loops or waits: large, and worth reading before you trust it with anything live.

Source: https://millionrounds.com/workflow/automated-cve-scanning-of-bug-bounty-programs-with-nuclei (Millionrounds; every figure on the page links to its filing or article)

[Automation library](https://millionrounds.com/workflows) · [Integrations](https://millionrounds.com/workflows?category=Integrations#library)

# Automated CVE scanning of Bug Bounty programs with Nuclei

Started by a clock, and works across Gmail. 21 steps, 2 branches, 2 loops or waits: large, and worth reading before you trust it with anything live.

Large

[Download free](https://millionrounds.com/login?next=%2Fapp%2Fworkflow%2Fautomated-cve-scanning-of-bug-bounty-programs-with-nuclei)

**21 steps** Large: read it before trusting it with anything live

**2** Branches: places the flow splits

**2** Loops or waits

**1** Service it connects to

## The flow

Starts it 1 Logic 9 Service 11

The steps in the order they run, from what starts it.

- 1 **Schedule Trigger** Schedule trigger *Starts it*
- 2 **Get All Bug Bounty Domains** Http Request *Service*
- 3 **Create domains.txt** Convert To File *Service*
- 4 **Upload domains.txt** Ssh *Service*
- 5 **GET Last CVEs (PROJECT DISCOVERY)** Http Request *Service*
- 6 **Split CVEs** Split Out *Logic*
- 7 **Loop Over CVEs** Split In Batches *Logic*
- 8 **Template Exists Filter** Filter *Logic*
- 9 **Date Filter** If *Logic*
- 10 **Loop Over Templates** Split In Batches *Logic*
- 11 **Set Variables** Set *Logic*
- 12 **Set Null Variable** Set *Logic*
- 13 **Remove Items** Summarize *Service*
- 14 **Create Template** Convert To File *Service*
- 15 **Execute Nuclei** Ssh *Service*
- 16 **Upload Template** Ssh *Service*
- 17 **Remove Templates** Ssh *Service*
- 18 **Convert Template to.yaml** Ssh *Service*
- 19 **Set Results Variable** Set *Logic*
- 20 **Check Results** If *Logic*
- 21 **Send a message** Gmail *Service*

## How it's built

- **Starts on:** A clock
- **Steps:** 21, with 2 branches, 2 loops or waits
- **Size:** Large: read it before trusting it with anything live
- **Connects to:** Gmail
- **Model:** None. This is plumbing, not judgement

## Questions

What does it need to run?

An n8n account, plus your own Gmail account. You connect your own accounts after importing it; none are included.

What starts it?

It starts on a clock.

Does it use AI?

No. Every step is fixed logic or a call to a service, so it does the same thing every time.

How long does it take to set up?

Take your time. At 21 steps it is large: read it before trusting it with anything live.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

**Before you run it**

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 21 steps before you point it at anything that matters.

## Run it in n8n

- **Create your n8n account** Free to start. n8n is where the workflow runs. [Create an n8n account ↗](https://millionrounds.com/n8n)
- **Download the workflow** Free with a Millionrounds account. [Download free](https://millionrounds.com/login?next=%2Fapp%2Fworkflow%2Fautomated-cve-scanning-of-bug-bounty-programs-with-nuclei)
- **Paste it into n8n** Open a new workflow in n8n and paste. Then connect your own accounts.

Stored with the author's traces removed: canvas notes, instance identifiers, saved credential names and any live document they had left behind.

## Connects to

Each opens the other workflows that use it.

[Gmail](https://millionrounds.com/workflows?service=Gmail#library)

## Workflows like it

Also integrations, with the same services where possible, closest in size first.

- [**Generate and email daily AI-powered HR changes digest** 19 steps · Gmail](https://millionrounds.com/workflow/generate-and-email-daily-ai-powered-hr-changes-digest)
- [**Personal email assistant with Gmail** 19 steps · Gmail](https://millionrounds.com/workflow/with-gmail)
- [**Score freelance opportunities from RSS with Gmail** 19 steps · Gmail, RSS](https://millionrounds.com/workflow/score-freelance-opportunities-from-rss-with-gmail)
- [**Bitcoin miner health check - multiple pools, multiple miners p2** 24 steps · Gmail](https://millionrounds.com/workflow/bitcoin-miner-health-check-multiple-pools-multiple-miners-p2)
- [**Gmail inbox organizer** 18 steps · Gmail](https://millionrounds.com/workflow/gmail-inbox-organizer)
- [**Audit email deliverability with Gmail and Outlook** 17 steps · Gmail, Outlook](https://millionrounds.com/workflow/audit-email-deliverability-with-gmail-and-outlook)