Utilities
Push scanner findings to chat and alert channels
Publish tool output to chat and alerting providers.
overview
What notify does
notify is the delivery stage after a scanner finishes. It takes another tool's output and posts it to a configured provider.
Set -provider and -id to route workflows to different channels. Use -bulk and -delay when a noisy run would flood a room.
Trickest runs notify as a managed Utilities node. Wire -data from an upstream FILE; the node writes a record of what was sent.
use cases
Where notify fits
Alert on new findings
Send a scanner's output straight to a chat channel so the team sees a fresh CVE or exposure as a message instead of a buried file.
Publish a run digest
Use bulk mode to batch a results file into a compact summary rather than a stream, posting one digest at the end of a workflow.
Route to the right channel
Set the provider and id so different workflows post to different destinations, keeping recon noise and critical alerts apart.
Keep messages within platform limits
Set a character limit and a rate limit so long output splits cleanly and a high-volume run does not flood or get throttled.
reference
notify inputs and flags
| Name | Type | Flag | Description |
|---|---|---|---|
| id | STRING | -id | id to send the notification to (optional) |
| bulk | BOOLEAN | -bulk | enable bulk processing |
| data | FILE | -data | input file to send for notify |
| delay | STRING | -delay | delay in seconds between each notification |
| proxy | STRING | -proxy | http proxy to use with notify |
| silent | BOOLEAN | -silent | Don't print the banner |
| verbose | BOOLEAN | -v | enable verbose mode |
Showing key inputs. notify exposes 13 inputs in total.
Full flag reference (13 inputs)
| Name | Type | Flag | Description |
|---|---|---|---|
| id | STRING | -id | id to send the notification to (optional) |
| bulk | BOOLEAN | -bulk | enable bulk processing |
| data | FILE | -data | input file to send for notify |
| delay | STRING | -delay | delay in seconds between each notification |
| proxy | STRING | -proxy | http proxy to use with notify |
| silent | BOOLEAN | -silent | Don't print the banner |
| verbose | BOOLEAN | -v | enable verbose mode |
| provider | STRING | -provider | provider to send the notification to (optional) |
| char-limit | STRING | -char-limit | max character limit per message (default 4000) |
| msg-format | STRING | -msg-format | add custom formatting to message |
| rate-limit | STRING | -rate-limit | maximum number of HTTP requests to send per second |
| config-file | FILE | -config | notify configuration file |
| provider-config-file | FILE | -provider-config | provider config file |
example
Run notify
# notify: send findings to the configured Slack providercat findings.txt | notify -provider slack -bulk -delay 1[notify] provider=slack[notify] sent 12 lines in bulk[notify] channel=#recon-alerts[notify] status=ok[notify] doneguidance
Choosing notify
Use notify at the end of a workflow when findings should land in chat or email. It does not scan or discover; it delivers another tool's output. Prefer json2html or generate-yaml-report when you need a file report instead of a live alert.
json2html
Renders findings as an HTML report instead of pushing them to chat. Pick by whether you want a file or a live alert.
generate-yaml-report
Builds a structured report from results. notify is for delivery to a platform rather than report formatting.
string-to-file
Captures output to a file for the workflow. notify takes that file and publishes it onward.
faq
notify questions
related
More Utilities tools
cewl
Spider a URL and return a wordlist for password crackers.
dnsgen
Wordlist and mined-word subdomain permutation.
pup
CSS selectors over HTML, the jq counterpart for markup.
unfurl
Extract chosen URL parts from stdin into clean line lists.
whisper
Speech to txt, vtt, srt, and json from an audio file or folder.
youtube-transcript
Public caption tracks to transcript.txt and results.jsonl.
Run notify yourself
Targets are scanned by nuclei, then notify streams the findings to a chat platform and writes a record of what was sent as a queryable output.
Facts on this page come from the live Trickest tool library.