merge dev

Give each scan its own DNS resolvers

README.md

@@ -177,7 +177,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_CN.md

@@ -175,7 +175,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_ES.md

@@ -175,7 +175,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_FA.md

@@ -192,7 +192,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_ID.md

@@ -175,7 +175,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_JP.md

@@ -175,7 +175,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_KR.md

@@ -175,7 +175,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_PT-BR.md

@@ -175,7 +175,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

README_TR.md

@@ -175,7 +175,7 @@ TEMPLATES:
    -egm, -enable-global-matchers          enable loading global matchers templates
    -file                                  enable loading file templates
    -llm                                   enable llm matchers and extractors (semantic matching)
-   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter) (default "openai")
+   -llm-provider string                   llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev) (default "openai")
    -llm-base-url string                   openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)
    -llm-model string                      model used for semantic matching
    -llm-timeout int                       time in seconds to wait for a single llm call (default 30)

cmd/nuclei/main.go

@@ -309,7 +309,7 @@ on extensive configurability, massive extensibility and ease of use.`)
 		flagSet.BoolVarP(&options.EnableGlobalMatchersTemplates, "enable-global-matchers", "egm", false, "enable loading global matchers templates"),
 		flagSet.BoolVar(&options.EnableFileTemplates, "file", false, "enable loading file templates"),
 		flagSet.BoolVar(&options.EnableLLM, "llm", false, "enable llm matchers and extractors (semantic matching)"),
-		flagSet.StringVar(&options.LLMProvider, "llm-provider", "openai", "llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter)"),
+		flagSet.StringVar(&options.LLMProvider, "llm-provider", "openai", "llm provider for semantic matching (openai, ollama, llamacpp, vllm, lmstudio, groq, openrouter, together, orcarouter, jev)"),
 		flagSet.StringVar(&options.LLMBaseURL, "llm-base-url", "", "openai-compatible endpoint for semantic matching (overrides -llm-provider, e.g. a local model)"),
 		flagSet.StringVar(&options.LLMModel, "llm-model", "", "model used for semantic matching"),
 		flagSet.IntVar(&options.LLMTimeout, "llm-timeout", 30, "time in seconds to wait for a single llm call"),

go.mod

@@ -105,7 +105,7 @@ require (
 	github.com/projectdiscovery/tlsx v1.4.3-0.20261020052910-acb80c2c7c75
 	github.com/projectdiscovery/uncover v1.2.1
 	github.com/projectdiscovery/useragent v0.0.109
-	github.com/projectdiscovery/utils v0.11.12-0.20261025172519-64b3c221cfe5
+	github.com/projectdiscovery/utils v0.11.13-0.20261103094816-5c0b20e35350
 	github.com/projectdiscovery/wappalyzergo v0.3.6
 	github.com/projectdiscovery/yamldoc-go v1.0.7
 	github.com/redis/go-redis/v9 v9.19.0

go.sum

@@ -956,8 +956,6 @@ github.com/projectdiscovery/gologger v1.1.73 h1:WX2nzq29cL7HdvOHqIttacoid/5lMwap
 github.com/projectdiscovery/gologger v1.1.73/go.mod h1:mJwODZcFDg70ihINpOvZevmBtgvpP8H9/l8Y+OPhZPY=
 github.com/projectdiscovery/gostruct v0.0.2 h1:s8gP8ApugGM4go1pA+sVlPDXaWqNP5BBDDSv7VEdG1M=
 github.com/projectdiscovery/gostruct v0.0.2/go.mod h1:H86peL4HKwMXcQQtEa6lmC8FuD9XFt6gkNR0B/Mu5PE=
-github.com/projectdiscovery/govaluate v0.0.0-20260729205521-4c61bf19382e h1:0vaevfTiQeRCkX2xbY/mR38422kHAxGzpVV8FQJVfoc=
-github.com/projectdiscovery/govaluate v0.0.0-20260729205521-4c61bf19382e/go.mod h1:Z3VjpUJV1pnXDwvAddA8aZ4e839SoeftB7CSdZntAVI=
 github.com/projectdiscovery/govaluate v0.0.0-20261102102118-9294133b15a2 h1:aSLbDvrJQPlp4HvojU+bTU5XV8xdAVCjoc5gX1Wfbw4=
 github.com/projectdiscovery/govaluate v0.0.0-20261102102118-9294133b15a2/go.mod h1:Z3VjpUJV1pnXDwvAddA8aZ4e839SoeftB7CSdZntAVI=
 github.com/projectdiscovery/gozero v0.1.1-0.20260530071156-fa1dad563d76 h1:AN70bbi6BBs7KpIM9w0LxygUN7uzT/oH+owDIQ+Fz/k=
@@ -1000,8 +998,8 @@ github.com/projectdiscovery/uncover v1.2.1 h1:8U46T/96CLT7BPoXBgkTvWqB06lOyeTSLv
 github.com/projectdiscovery/uncover v1.2.1/go.mod h1:0p8onrWxfpXQEYs90ZDzTSpu1107gWmodX1NWqu/+z4=
 github.com/projectdiscovery/useragent v0.0.109 h1:b86BPdZvmgbJousa04jAugDRY4Y+rAvEamE0TFCPmeE=
 github.com/projectdiscovery/useragent v0.0.109/go.mod h1:sRyBqDAcD31RKYrO8fyXGowLd36fNwY1g0MNW9mp7zk=
-github.com/projectdiscovery/utils v0.11.12-0.20261025172519-64b3c221cfe5 h1:AOspf7ScbwZr8A2YnjCFd4ZJAMSFqzfEaIJIbJPuu10=
-github.com/projectdiscovery/utils v0.11.12-0.20261025172519-64b3c221cfe5/go.mod h1:TJgsyVjB02CavwZVFzUzPg6YOSJXQxLhL808JCiQKlU=
+github.com/projectdiscovery/utils v0.11.13-0.20261103094816-5c0b20e35350 h1:uXqpYa6XKV9dCvoti9PbSgIWIsBKPu5YKMywB9G4q0Q=
+github.com/projectdiscovery/utils v0.11.13-0.20261103094816-5c0b20e35350/go.mod h1:TJgsyVjB02CavwZVFzUzPg6YOSJXQxLhL808JCiQKlU=
 github.com/projectdiscovery/wappalyzergo v0.3.6 h1:1FXCMeCa1xVu2zaW+eeBcbVxtlMStqGOlKcMLyh2pzI=
 github.com/projectdiscovery/wappalyzergo v0.3.6/go.mod h1:4E6+fh/ckaY3wo5tlM7lNYSkhuTYRHzu2YmGIRraXP0=
 github.com/projectdiscovery/yamldoc-go v1.0.7 h1:Odmjd1o4EkMff2F6QHi1dIYPIQPZUFy24YqmQCprmTk=

internal/runner/llm.go

@@ -2,8 +2,12 @@ package runner
 
 import (
 	"context"
+	"errors"
+	"sync"
 	"time"
 
+	"github.com/projectdiscovery/gologger"
+
 	llmclient "github.com/projectdiscovery/nuclei/v3/pkg/operators/common/llm"
 	"github.com/projectdiscovery/nuclei/v3/pkg/types"
 	utilsllm "github.com/projectdiscovery/utils/llm"
@@ -28,6 +32,32 @@ func (a *llmMatcherClient) Complete(ctx context.Context, prompt string, asJSON b
 	})
 }
 
+// llmJudgeClient is an llmMatcherClient whose provider classifies natively, so
+// llm matchers ask it through Judge instead of Complete.
+type llmJudgeClient struct {
+	*llmMatcherClient
+	warnComplete sync.Once
+}
+
+func (a *llmJudgeClient) Judge(ctx context.Context, question string, labels, inputs []string) (llmclient.Verdict, error) {
+	verdict, err := a.client.Judge(ctx, utilsllm.JudgeRequest{Question: question, Labels: labels, Inputs: inputs})
+	if err != nil {
+		return llmclient.Verdict{}, err
+	}
+	return llmclient.Verdict{Label: verdict.Label, Confidence: verdict.Confidence, Model: verdict.Model}, nil
+}
+
+// Complete is only reached by llm extractors, which need free text a
+// classifier cannot produce. Returning here spends no call budget and
+// makes no provider request. Extractors turn the error into an empty
+// result, and the warning says why.
+func (a *llmJudgeClient) Complete(context.Context, string, bool) (string, error) {
+	a.warnComplete.Do(func() {
+		gologger.Warning().Msgf("llm provider %q cannot run llm extractors, they return nothing", utilsllm.ProviderJev)
+	})
+	return "", errors.New("llm provider cannot run extractors")
+}
+
 // configureLLM builds the scan's llm client from options. It returns nil unless
 // -llm is set, so nothing reaches a model until the user opts in. The API key is
 // read from the environment by the provider layer, never from options.
@@ -52,5 +82,9 @@ func configureLLM(options *types.Options) (llmclient.Client, error) {
 		return nil, err
 	}
 
-	return &llmMatcherClient{client: client, model: options.LLMModel}, nil
+	matcherClient := &llmMatcherClient{client: client, model: options.LLMModel}
+	if client.CanJudge() {
+		return &llmJudgeClient{llmMatcherClient: matcherClient}, nil
+	}
+	return matcherClient, nil
 }

internal/runner/llm_test.go

@@ -0,0 +1,65 @@
+package runner
+
+import (
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"sync/atomic"
+	"testing"
+
+	llmclient "github.com/projectdiscovery/nuclei/v3/pkg/operators/common/llm"
+	"github.com/projectdiscovery/nuclei/v3/pkg/types"
+	"github.com/stretchr/testify/require"
+)
+
+func TestConfigureLLMExposesJudgeOnlyForClassifiers(t *testing.T) {
+	t.Setenv("LLM_API_KEY", "key")
+
+	client, err := configureLLM(&types.Options{EnableLLM: true, LLMProvider: "jev", LLMModel: "jev-latest"})
+	require.NoError(t, err)
+	require.Implements(t, (*llmclient.Judge)(nil), client)
+
+	client, err = configureLLM(&types.Options{EnableLLM: true, LLMProvider: "ollama", LLMModel: "llama3.2"})
+	require.NoError(t, err)
+	_, isJudge := client.(llmclient.Judge)
+	require.False(t, isJudge, "chat providers keep the Complete path")
+}
+
+func TestJevExtractorDoesNotSpendCallBudget(t *testing.T) {
+	t.Setenv("LLM_API_KEY", "key")
+	// ProxyFromEnvironment caches the first request in the process. Match the
+	// proxy the interactsh client test expects, and keep the local server direct.
+	for _, key := range []string{"HTTP_PROXY", "http_proxy", "ALL_PROXY", "all_proxy", "https_proxy", "no_proxy"} {
+		t.Setenv(key, "")
+	}
+	t.Setenv("HTTPS_PROXY", "http://127.0.0.1:9")
+	t.Setenv("NO_PROXY", "127.0.0.1,localhost")
+
+	var calls atomic.Int32
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		calls.Add(1)
+		_, _ = w.Write([]byte(`{"model":"jev-1.14.0","answers":{"q":{"type":"noul","noul":0.9}}}`))
+	}))
+	t.Cleanup(server.Close)
+
+	client, err := configureLLM(&types.Options{
+		EnableLLM:   true,
+		LLMProvider: "jev",
+		LLMBaseURL:  server.URL + "/v1",
+		LLMModel:    "jev-latest",
+		LLMMaxCalls: 1,
+	})
+	require.NoError(t, err)
+
+	_, err = client.Complete(context.Background(), "extract the title", true)
+	require.ErrorContains(t, err, "cannot run extractors")
+	_, err = client.Complete(context.Background(), "extract another", true)
+	require.Error(t, err)
+	require.Zero(t, calls.Load())
+
+	judge := client.(llmclient.Judge)
+	verdict, err := judge.Judge(context.Background(), "login page?", nil, []string{"<form>"})
+	require.NoError(t, err)
+	require.Equal(t, "yes", verdict.Label)
+	require.EqualValues(t, 1, calls.Load())
+}

pkg/operators/common/llm/llm.go

@@ -21,6 +21,22 @@ type Client interface {
 	Complete(ctx context.Context, prompt string, asJSON bool) (string, error)
 }
 
+// Judge is implemented by clients whose provider classifies natively. Its
+// confidence is a calibrated probability rather than a number the model
+// reports about itself, and the inputs travel apart from the question, so
+// matchers use it over Complete when it is available.
+type Judge interface {
+	Judge(ctx context.Context, question string, labels, inputs []string) (Verdict, error)
+}
+
+// Verdict is the label a Judge chose. Model is the exact model version that
+// answered, when the provider reports one.
+type Verdict struct {
+	Label      string
+	Confidence float64
+	Model      string
+}
+
 // TruncateApproxTokens trims input to roughly maxTokens using the common
 // 4-chars-per-token approximation. Exact counting is provider-specific; this
 // only needs to keep a large body from blowing the context window.

pkg/operators/matchers/match_llm.go

@@ -65,26 +65,21 @@ func (matcher *Matcher) MatchLLMWithAudit(corpus string, inputs []string, values
 		return false, nil, nil
 	}
 
-	prompt := matcher.buildLLMPrompt(matcher.truncate(corpus, inputs), values)
-	answer, err := client.Complete(context.Background(), prompt, true)
-	if err != nil {
+	responses := matcher.truncate(corpus, inputs)
+	var (
+		verdict llmVerdict
+		audit   *LLMAudit
+		ok      bool
+	)
+	if judge, isJudge := client.(llmclient.Judge); isJudge {
+		verdict, audit, ok = matcher.judgeLLM(judge, responses, values)
+	} else {
+		verdict, audit, ok = matcher.completeLLM(client, responses, values)
+	}
+	if !ok {
 		return false, nil, nil
 	}
 
-	var verdict llmVerdict
-	if err := json.Unmarshal([]byte(answer), &verdict); err != nil {
-		return false, nil, nil
-	}
-
-	audit := &LLMAudit{
-		PromptHash: hashPrompt(prompt),
-		Verdict:    strings.TrimSpace(verdict.Verdict),
-		Confidence: verdict.Confidence,
-	}
-	if namer, ok := client.(modelNamer); ok {
-		audit.Model = namer.Model()
-	}
-
 	expect := matcher.Expect
 	if expect == "" {
 		expect = "yes"
@@ -107,9 +102,55 @@ func (matcher *Matcher) MatchLLMWithAudit(corpus string, inputs []string, values
 		return false, nil, audit
 	}
 
+	if verdict.Evidence == "" {
+		return true, nil, audit
+	}
 	return true, []string{verdict.Evidence}, audit
 }
 
+// completeLLM asks a chat model for the verdict as JSON.
+func (matcher *Matcher) completeLLM(client LLMClient, inputs []string, values map[string]interface{}) (llmVerdict, *LLMAudit, bool) {
+	prompt := matcher.buildLLMPrompt(inputs, values)
+	answer, err := client.Complete(context.Background(), prompt, true)
+	if err != nil {
+		return llmVerdict{}, nil, false
+	}
+
+	var verdict llmVerdict
+	if err := json.Unmarshal([]byte(answer), &verdict); err != nil {
+		return llmVerdict{}, nil, false
+	}
+
+	audit := &LLMAudit{
+		PromptHash: hashPrompt(prompt),
+		Verdict:    strings.TrimSpace(verdict.Verdict),
+		Confidence: verdict.Confidence,
+	}
+	if namer, ok := client.(modelNamer); ok {
+		audit.Model = namer.Model()
+	}
+	return verdict, audit, true
+}
+
+// judgeLLM asks a native classifier. It needs no prompt framing: the question
+// and the responses are separate fields of the request, and the answer is a
+// probability over the allowed verdicts, not text. It quotes no evidence.
+func (matcher *Matcher) judgeLLM(judge llmclient.Judge, inputs []string, values map[string]interface{}) (llmVerdict, *LLMAudit, bool) {
+	question := interpolate(matcher.Prompt, values)
+	answer, err := judge.Judge(context.Background(), question, matcher.Options, inputs)
+	if err != nil {
+		return llmVerdict{}, nil, false
+	}
+
+	audit := &LLMAudit{
+		Model:      answer.Model,
+		PromptHash: hashPrompt(strings.Join(append([]string{question, strings.Join(matcher.Options, ",")}, inputs...), "\x00")),
+		Verdict:    answer.Label,
+		Confidence: answer.Confidence,
+	}
+	return llmVerdict{Verdict: answer.Label, Confidence: answer.Confidence}, audit, true
+}
+
 // buildLLMPrompt wraps the author's question with the output contract and the
 // response under a random boundary (see FrameResponse).
 //

pkg/operators/matchers/match_llm_test.go

@@ -6,6 +6,7 @@ import (
 	"regexp"
 	"testing"
 
+	llmclient "github.com/projectdiscovery/nuclei/v3/pkg/operators/common/llm"
 	"github.com/stretchr/testify/require"
 )
 
@@ -277,3 +278,61 @@ func TestMatchLLMWithoutInputsUsesPart(t *testing.T) {
 	require.Contains(t, stub.lastGot, "the body")
 	require.NotContains(t, stub.lastGot, "Response 1")
 }
+
+type stubJudge struct {
+	stubLLM
+	verdict  llmclient.Verdict
+	err      error
+	question string
+	labels   []string
+	inputs   []string
+}
+
+func (s *stubJudge) Judge(_ context.Context, question string, labels, inputs []string) (llmclient.Verdict, error) {
+	s.question, s.labels, s.inputs = question, labels, inputs
+	return s.verdict, s.err
+}
+
+func TestMatchLLMPrefersJudgeAndKeepsResponseOutOfQuestion(t *testing.T) {
+	m := llmMatcher("login page for {{Hostname}}?")
+	judge := &stubJudge{verdict: llmclient.Verdict{Label: "yes", Confidence: 0.97, Model: "jev-1.14.0"}}
+	m.SetLLMClient(judge)
+
+	ok, snips, audit := m.MatchLLMWithAudit("<form>", nil, map[string]interface{}{"Hostname": "example.com"})
+	require.True(t, ok)
+	require.Empty(t, snips, "a classifier quotes no evidence")
+	require.Zero(t, judge.calls, "Complete must not be used when the client can judge")
+	require.Equal(t, "login page for example.com?", judge.question)
+	require.Nil(t, judge.labels, "no options means a yes or no question")
+	require.Equal(t, []string{"<form>"}, judge.inputs)
+	require.Equal(t, "jev-1.14.0", audit.Model)
+	require.InDelta(t, 0.97, audit.Confidence, 1e-9)
+}
+
+func TestMatchLLMJudgeAppliesExpectOptionsAndConfidence(t *testing.T) {
+	m := llmMatcher("same access?")
+	m.Options = []string{"same", "different"}
+	m.Expect = "different"
+	m.MinConfidence = 0.9
+	judge := &stubJudge{verdict: llmclient.Verdict{Label: "different", Confidence: 0.8}}
+	m.SetLLMClient(judge)
+
+	ok, _, audit := m.MatchLLMWithAudit("", []string{"a", "b"}, nil)
+	require.False(t, ok, "below min-confidence")
+	require.NotNil(t, audit)
+	require.Equal(t, []string{"same", "different"}, judge.labels)
+	require.Equal(t, []string{"a", "b"}, judge.inputs)
+
+	judge.verdict.Confidence = 0.95
+	ok, _, _ = m.MatchLLMWithAudit("", []string{"a", "b"}, nil)
+	require.True(t, ok)
+}
+
+func TestMatchLLMJudgeFailsClosed(t *testing.T) {
+	m := llmMatcher("q")
+	m.SetLLMClient(&stubJudge{err: errors.New("boom")})
+
+	ok, _, audit := m.MatchLLMWithAudit("body", nil, nil)
+	require.False(t, ok)
+	require.Nil(t, audit)
+}

pkg/protocols/common/protocolstate/exclude_race_test.go

@@ -0,0 +1,46 @@
+package protocolstate
+
+import (
+	"sync"
+	"testing"
+
+	"github.com/projectdiscovery/networkpolicy"
+	"github.com/stretchr/testify/require"
+)
+
+func TestIsHostAllowedRacesExcludeUpdate(t *testing.T) {
+	np, err := networkpolicy.New(networkpolicy.Options{DenyList: []string{"127.0.0.0/8"}})
+	require.NoError(t, err)
+
+	const executionID = "exclude-race"
+	entry := &Dialers{NetworkPolicy: np, ExcludeTargets: []string{"192.0.2.1"}}
+	err = dialers.Set(executionID, entry)
+	require.NoError(t, err)
+	t.Cleanup(func() { dialers.Delete(executionID) })
+
+	stop := make(chan struct{})
+	var wg sync.WaitGroup
+	wg.Add(1)
+	go func() {
+		defer wg.Done()
+		lists := [][]string{{"192.0.2.1"}, {"192.0.2.2", "192.0.2.3"}}
+		i := 0
+		for {
+			select {
+			case <-stop:
+				return
+			default:
+			}
+			entry.Lock()
+			entry.ExcludeTargets = lists[i%2]
+			entry.Unlock()
+			i++
+		}
+	}()
+
+	for i := 0; i < 2000; i++ {
+		_ = IsHostAllowed(executionID, "http://192.0.2.1")
+	}
+	close(stop)
+	wg.Wait()
+}

pkg/protocols/common/protocolstate/headless.go

@@ -138,11 +138,14 @@ func CanonicalizeHost(host string) string {
 // IsHostAllowed checks if the host is allowed by network policy
 func IsHostAllowed(executionId string, targetUrl string) bool {
 	dialers, ok := dialers.Get(executionId)
-	if !ok {
+	if !ok || dialers == nil {
 		return true
 	}
 
+	dialers.Lock()
 	np := dialers.NetworkPolicy
+	excludedTargets := append([]string(nil), dialers.ExcludeTargets...)
+	dialers.Unlock()
 	if np == nil {
 		// no policy present: deny rather than allow.
 		return false
@@ -174,7 +177,7 @@ func IsHostAllowed(executionId string, targetUrl string) bool {
 	canonHost := CanonicalizeHost(host)
 
 	// Check explicit ExcludeTargets against raw, host, and canonical host
-	for _, excluded := range dialers.ExcludeTargets {
+	for _, excluded := range excludedTargets {
 		ex := CanonicalizeHost(strings.TrimSpace(excluded))
 		if ex != "" {
 			if strings.EqualFold(canonHost, ex) || strings.EqualFold(host, ex) || strings.EqualFold(rawTarget, ex) {

pkg/protocols/common/protocolstate/state.go

@@ -115,7 +115,10 @@ func initDialers(options *types.Options) error {
 	if options.RestrictLocalNetworkAccess {
 		expandedDenyList = append(expandedDenyList, networkpolicy.DefaultIPv4DenylistRanges...)
 		expandedDenyList = append(expandedDenyList, networkpolicy.DefaultIPv6DenylistRanges...)
+		// the unspecified address connects to the local host
+		expandedDenyList = append(expandedDenyList, "::/128")
 	}
+	expandedDenyList = append(expandedDenyList, mappedDenyRanges(expandedDenyList)...)
 	npOptions := &networkpolicy.Options{
 		DenyList: expandedDenyList,
 	}
@@ -342,6 +345,27 @@ func Close(executionId string) {
 	}
 }
 
+// mappedDenyRanges returns the IPv4-mapped IPv6 form (::ffff:a.b.c.d) of each
+// IPv4 address and range in denyList. The network policy checks a mapped
+// address such as [::ffff:127.0.0.1] only against IPv6 ranges, but the dialer
+// connects to the IPv4 host, so without these forms it passes -eh and -lna.
+func mappedDenyRanges(denyList []string) []string {
+	var mapped []string
+	for _, entry := range denyList {
+		cidr := entry
+		if !strings.Contains(cidr, "/") {
+			cidr += "/32"
+		}
+		_, ipNet, err := net.ParseCIDR(cidr)
+		if err != nil || ipNet.IP.To4() == nil || strings.Contains(entry, ":") {
+			continue
+		}
+		ones, _ := ipNet.Mask.Size()
+		mapped = append(mapped, fmt.Sprintf("::ffff:%s/%d", ipNet.IP.To4(), 96+ones))
+	}
+	return mapped
+}
+
 // excludeHostRules turns an exclude entry into network policy deny rules.
 // networkpolicy treats non-IP entries as unanchored regexes, so a plain
 // "test.com" would also deny "latest.com". Plain hostnames match the host and

pkg/protocols/common/protocolstate/state_test.go

@@ -1,7 +1,12 @@
 package protocolstate
 
 import (
+	"context"
+	"net"
+	"net/http"
+	"net/http/httptest"
 	"testing"
+	"time"
 
 	"github.com/projectdiscovery/nuclei/v3/pkg/types"
 	"github.com/stretchr/testify/require"
@@ -27,3 +32,47 @@ func TestExcludeTargetsMatchExactHost(t *testing.T) {
 	require.True(t, np.Validate("testXcom"))
 	require.True(t, np.Validate("sub.regex.example"))
 }
+
+func TestMappedFormsDeniedByDialer(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {}))
+	defer server.Close()
+	_, port, err := net.SplitHostPort(server.Listener.Addr().String())
+	require.NoError(t, err)
+
+	for name, set := range map[string]func(*types.Options){
+		"lna":           func(o *types.Options) { o.RestrictLocalNetworkAccess = true },
+		"exclude-hosts": func(o *types.Options) { o.ExcludeTargets = []string{"127.0.0.1"} },
+		"exclude-cidr":  func(o *types.Options) { o.ExcludeTargets = []string{"127.0.0.0/8"} },
+	} {
+		t.Run(name, func(t *testing.T) {
+			opts := types.DefaultOptions()
+			opts.ExecutionId = "test-mapped-" + name
+			set(opts)
+			require.NoError(t, Init(opts))
+			defer Close(opts.ExecutionId)
+
+			d := GetDialersWithId(opts.ExecutionId)
+			hosts := []string{"127.0.0.1", "::ffff:127.0.0.1", "::ffff:7f00:1", "0:0:0:0:0:ffff:127.0.0.1"}
+			if opts.RestrictLocalNetworkAccess {
+				hosts = append(hosts, "::")
+			}
+			for _, host := range hosts {
+				require.False(t, d.NetworkPolicy.Validate(host), host)
+				ctx, cancel := context.WithTimeout(context.Background(), 2*time.Second)
+				conn, err := d.Fastdialer.Dial(ctx, "tcp", net.JoinHostPort(host, port))
+				cancel()
+				if conn != nil {
+					_ = conn.Close()
+				}
+				require.Error(t, err, host)
+			}
+			require.True(t, d.NetworkPolicy.Validate("::ffff:8.8.8.8"))
+			require.True(t, d.NetworkPolicy.Validate("8.8.8.8"))
+		})
+	}
+}
+
+func TestMappedDenyRanges(t *testing.T) {
+	require.Equal(t, []string{"::ffff:127.0.0.0/104", "::ffff:192.0.2.10/128", "::ffff:0.0.0.0/104"},
+		mappedDenyRanges([]string{"127.0.0.0/8", "192.0.2.10", "::1/128", "fc00::/7", `(?i)(^|\.)test\.com\.?$`, "0.0.0.0/8"}))
+}

pkg/protocols/dns/dnsclientpool/clientpool.go

@@ -26,33 +26,42 @@ var defaultResolvers = []string{
 	"8.8.4.4:53", // Google
 }
 
-// Init initializes the client pool implementation
+// Init initializes the client pool implementation.
+// Each resolver list gets its own client, so a later scan is not stuck with the first scan's resolvers.
 func Init(options *types.Options) error {
-	m.Lock()
-	defer m.Unlock()
-
-	// Don't create clients if already created in the past.
-	if normalClient != nil {
-		return nil
-	}
-	clientPool = mapsutil.NewSyncLockMap[string, *retryabledns.Client]()
-
-	resolvers := defaultResolvers
-	if len(options.InternalResolversList) > 0 {
-		resolvers = options.InternalResolversList
-	}
-	var err error
-	normalClient, err = retryabledns.New(resolvers, 1)
+	client, err := cachedClient(resolversFor(options))
 	if err != nil {
 		return errors.Wrap(err, "could not create dns client")
 	}
+	m.Lock()
+	normalClient = client
+	m.Unlock()
 	return nil
 }
 
-func getNormalClient() *retryabledns.Client {
+func resolversFor(options *types.Options) []string {
+	if options != nil && len(options.InternalResolversList) > 0 {
+		return options.InternalResolversList
+	}
+	return defaultResolvers
+}
+
+func cachedClient(resolvers []string) (*retryabledns.Client, error) {
 	m.Lock()
 	defer m.Unlock()
-	return normalClient
+	if clientPool == nil {
+		clientPool = mapsutil.NewSyncLockMap[string, *retryabledns.Client]()
+	}
+	key := strings.Join(resolvers, ",")
+	if client, ok := clientPool.Get(key); ok {
+		return client, nil
+	}
+	client, err := retryabledns.New(resolvers, 1)
+	if err != nil {
+		return nil, err
+	}
+	_ = clientPool.Set(key, client)
+	return client, nil
 }
 
 // Configuration contains the custom configuration options for a client
@@ -81,7 +90,7 @@ func (c *Configuration) Hash() string {
 // Get creates or gets a client for the protocol based on custom configuration
 func Get(options *types.Options, configuration *Configuration) (*retryabledns.Client, error) {
 	if (configuration.Retries <= 1) && len(configuration.Resolvers) == 0 {
-		return getNormalClient(), nil
+		return cachedClient(resolversFor(options))
 	}
 	hash := configuration.Hash()
 	if client, ok := clientPool.Get(hash); ok {

pkg/protocols/dns/dnsclientpool/clientpool_test.go

@@ -0,0 +1,35 @@
+package dnsclientpool
+
+import (
+	"testing"
+
+	"github.com/projectdiscovery/nuclei/v3/pkg/types"
+	"github.com/stretchr/testify/require"
+)
+
+func TestClientsFollowResolverList(t *testing.T) {
+	previousClient := normalClient
+	previousPool := clientPool
+	t.Cleanup(func() {
+		normalClient = previousClient
+		clientPool = previousPool
+	})
+	normalClient = nil
+	clientPool = nil
+
+	firstOptions := &types.Options{InternalResolversList: []string{"192.0.2.1:53"}}
+	secondOptions := &types.Options{InternalResolversList: []string{"192.0.2.2:53"}}
+
+	require.NoError(t, Init(firstOptions))
+	require.NoError(t, Init(secondOptions))
+
+	first, err := Get(firstOptions, &Configuration{})
+	require.NoError(t, err)
+	second, err := Get(secondOptions, &Configuration{})
+	require.NoError(t, err)
+	require.NotSame(t, first, second)
+
+	again, err := Get(firstOptions, &Configuration{})
+	require.NoError(t, err)
+	require.Same(t, first, again)
+}

pkg/tmplexec/flow/flow_executor_test.go

@@ -414,3 +414,34 @@ http:
 		})
 	}
 }
+
+// TestFlowRuntimeIsNotSharedAcrossTemplates checks that a flow which changes the
+// globals of its runtime does not change the flow of a later template.
+func TestFlowRuntimeIsNotSharedAcrossTemplates(t *testing.T) {
+	setup()
+	router := httprouter.New()
+	router.GET("/first", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
+		_, _ = fmt.Fprint(w, "first-ok")
+	})
+	router.GET("/second", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
+		_, _ = fmt.Fprint(w, "second-ok")
+	})
+	ts := httptest.NewServer(router)
+	defer ts.Close()
+
+	execute := func(path string) bool {
+		tmpl, err := templates.Parse(path, nil, executerOpts)
+		require.Nil(t, err, "could not parse template")
+		require.Nil(t, tmpl.Executer.Compile(), "could not compile template")
+
+		input := contextargs.NewWithInput(context.Background(), ts.URL)
+		gotresults, err := tmpl.Executer.Execute(scan.NewScanContext(context.Background(), input))
+		require.Nil(t, err, "could not execute template")
+		return gotresults
+	}
+
+	for i := 0; i < 10; i++ {
+		execute("testcases/flow-runtime-first.yaml")
+		require.True(t, execute("testcases/flow-runtime-second.yaml"), "second flow ran in a runtime changed by another template (run %d)", i)
+	}
+}

pkg/tmplexec/flow/testcases/flow-runtime-first.yaml

@@ -0,0 +1,17 @@
+id: flow-runtime-first
+
+info:
+  name: Flow that changes the globals of its runtime
+  author: test
+  severity: info
+
+flow: |
+  // Export
+  globalThis.leftover = true;
+  iterate = function () { return []; };
+  http(1);
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/first"

pkg/tmplexec/flow/testcases/flow-runtime-second.yaml

@@ -0,0 +1,23 @@
+id: flow-runtime-second
+
+info:
+  name: Flow that uses the builtins of its runtime
+  author: test
+  severity: info
+
+flow: |
+  if (typeof leftover === 'undefined') {
+    for (let path of iterate(["second"])) {
+      http(1);
+    }
+  }
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/second"
+
+    matchers:
+      - type: word
+        words:
+          - "second-ok"