Tag internal nuclei scans with authorized-scan UA to aid SIEM filtering

modules/attack-box/files/recon_automation.sh

@@ -11,7 +11,8 @@ if [ $# -eq 0 ]; then
 fi
 
 TARGET="$1"
-WORKSPACE="/root/dmealey/scans/reachability/$TARGET"
+BASE_DIR="${WORK_DIR:-${WORK_DIR:-/root/workspace}}"
+WORKSPACE="$BASE_DIR/scans/reachability/$TARGET"
 DATE=$(date +%Y%m%d_%H%M%S)
 
 # Colors for output
@@ -78,7 +79,7 @@ done < live_subdomains.txt
 
 # Vulnerability scanning with Nuclei
 echo -e "${GREEN}[+] Phase 7: Vulnerability Scanning${NC}"
-log_and_run "Running Nuclei" "nuclei -l live_subdomains.txt -t ~/nuclei-templates/ -o nuclei_results.txt"
+log_and_run "Running Nuclei" "nuclei -l live_subdomains.txt -H 'User-Agent: homelab-security-scan/nuclei' -t ~/nuclei-templates/ -o nuclei_results.txt"
 
 # Summary
 echo -e "${GREEN}[+] Reconnaissance Complete!${NC}"