So if the initial 10 tries don't trigger anything, that parameter gets ignored and you might miss interesting cases.
How to fix it: use -fuzz-param-frequency. It controls how many "uninteresting" payloads are allowed before nuclei skips a parameter (default is 10).
nuclei -h | grep frequency
...
-fuzz-param-frequency int frequency of uninteresting parameters for fuzzing before skipping (default 10)
An example of an automated pipeline (katana + nuclei) for fuzzing:
katana -u http://testphp.vulnweb.com -aff -iqp -j -o katana.jsonl && \
nuclei -l katana.jsonl -im jsonl -dast -fuzz-param-frequency 10000
Why this matters:
• Some endpoints only respond on later payloads (rate-limited, WAF behavior, timing issues).
• Increasing the frequency prevents skipping noisy-but-interesting params.
• Use with care — raising it a lot increases runtime and requests.
#bugbountytips