refactor: native tests

Signed-off-by: Dwi Siswanto <git@dw1.io>

Author: dwisiswant0

.github/workflows/tests.yaml

@@ -56,7 +56,7 @@ jobs:
       - run: make test
         env:
           PDCP_API_KEY: "${{ secrets.PDCP_API_KEY }}"
-      - run: go run -race . -l ../functional-test/targets.txt -id tech-detect,tls-version
+      - run: go run -race . -l ${{ github.workspace }}/internal/tests/functional/testdata/targets.txt -id tech-detect,tls-version
         if: ${{ matrix.os != 'windows-latest' }} # known issue: https://github.com/golang/go/issues/46099
         working-directory: cmd/nuclei/
 
@@ -94,15 +94,16 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v6
-      - uses: projectdiscovery/actions/setup/go@v1
-      - uses: projectdiscovery/actions/cache/nuclei@v1
       - uses: projectdiscovery/actions/setup/python@v1
-      - uses: projectdiscovery/actions/cache/go-rod-browser@v1
-      - run: bash run.sh "${{ matrix.os }}"
+      - uses: projectdiscovery/actions/setup/go@v1
+      - uses: projectdiscovery/nuclei-action@v3
+        with:
+          version: latest
+          install-only: true
+      - run: make integration
         env:
           PDCP_API_KEY: "${{ secrets.PDCP_API_KEY }}"
         timeout-minutes: 50
-        working-directory: integration_tests/
 
   functional:
     name: "Functional tests"
@@ -116,12 +117,13 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v6
-      - uses: projectdiscovery/actions/setup/go@v1
-      - uses: projectdiscovery/actions/cache/nuclei@v1
       - uses: projectdiscovery/actions/setup/python@v1
-      - uses: projectdiscovery/actions/cache/go-rod-browser@v1
-      - run: bash run.sh
-        working-directory: cmd/functional-test/
+      - uses: projectdiscovery/actions/setup/go@v1
+      - uses: projectdiscovery/nuclei-action@v3
+        with:
+          version: latest
+          install-only: true
+      - run: make functional
 
   validate:
     name: "Template validate"

.gitignore

@@ -28,8 +28,7 @@
 /scrapefunc
 /scrapefuncs
 /tsgen
-/integration_tests/integration-test
-/integration_tests/nuclei
+*.test
 
 # Templates
 /*.yaml

.run/DSLFunctionsIT.run.xml

@@ -11,8 +11,8 @@ Nuclei is a modern, high-performance vulnerability scanner built in Go that leve
 ### Building and Testing
 - `make build` - Build the main nuclei binary to ./bin/nuclei
 - `make test` - Run unit tests with race detection
-- `make integration` - Run integration tests (builds and runs test suite)
-- `make functional` - Run functional tests
+- `make integration` - Run the native integration suite via `go test -tags=integration ./internal/tests/integration`
+- `make functional` - CI-only functional suite entry point
 - `make vet` - Run go vet for code analysis
 - `make tidy` - Clean up go modules
 
@@ -29,7 +29,7 @@ Nuclei is a modern, high-performance vulnerability scanner built in Go that leve
 
 ### Testing Specific Components
 - Run single test: `go test -v ./pkg/path/to/package -run TestName`
-- Integration tests are in `integration_tests/` and can be run via `make integration`
+- Integration tests are in `internal/tests/integration/` and run via `go test -tags=integration ./internal/tests/integration`
 
 ## Architecture Overview
 
@@ -77,7 +77,8 @@ Each protocol (HTTP, DNS, Network, etc.) implements:
 ## Key Directories
 - **lib/** - SDK for embedding nuclei as a library
 - **examples/** - Usage examples for different scenarios
-- **integration_tests/** - Integration test suite with protocol-specific tests
+- **internal/tests/integration/** - Native integration suite and owned testdata for harness coverage
+- **internal/tests/functional/** - CI-only native functional comparison suite and testcase assets
 - **pkg/fuzz/** - Fuzzing engine and DAST capabilities
 - **pkg/input/** - Input processing for various formats (Burp, OpenAPI, etc.)
 - **pkg/reporting/** - Result export and issue tracking integrations

.run/IntegrationTests.run.xml

@@ -454,7 +454,7 @@ func (template *Template) compileProtocolRequests(options protocols.ExecuterOpti
 }
 ```
 
-That's it, you've added a new protocol to Nuclei. The next good step would be to write integration tests which are described in `integration-tests` and `cmd/integration-tests` directories.
+That's it, you've added a new protocol to Nuclei. The next good step would be to add native integration coverage under `internal/tests/integration` and run it with `go test -tags=integration ./internal/tests/integration`.
 
 
 ## Profiling and Tracing

.run/RegressionTests.run.xml

@@ -2,6 +2,7 @@
 GOCMD := go
 GOBUILD := $(GOCMD) build
 GOBUILD_OUTPUT := 
+GOBUILD_OUTPUT_EXT := 
 GOBUILD_PACKAGES := 
 GOBUILD_ADDITIONAL_ARGS := 
 GOMOD := $(GOCMD) mod
@@ -13,10 +14,14 @@ LDFLAGS := -s -w
 ifneq ($(shell go env GOOS),darwin)
 	LDFLAGS += -extldflags "-static"
 endif
+
+ifeq ($(shell go env GOOS),windows)
+	GOBUILD_OUTPUT_EXT := .exe
+endif
 
 .PHONY: all build build-stats clean devtools-all devtools-bindgen devtools-scrapefuncs
 .PHONY: devtools-tsgen docs docgen dsl-docs functional fuzzplayground go-build lint lint-strict syntax-docs
-.PHONY: integration jsupdate-all jsupdate-bindgen jsupdate-tsgen memogen scan-charts test test-with-lint
+.PHONY: integration integration-debug jsupdate-all jsupdate-bindgen jsupdate-tsgen memogen scan-charts test test-with-lint
 .PHONY: tidy ts verify download vet template-validate
 
 all: build
@@ -29,7 +34,7 @@ go-build:
 	CGO_ENABLED=0 $(GOBUILD) -trimpath $(GOFLAGS) -ldflags '${LDFLAGS}' $(GOBUILD_ADDITIONAL_ARGS) \
 		 -o '${GOBUILD_OUTPUT}' $(GOBUILD_PACKAGES)
 
-build: GOFLAGS = -v -pgo=auto
+build: GOFLAGS = -pgo=auto
 build: GOBUILD_OUTPUT = ./bin/nuclei
 build: GOBUILD_PACKAGES = cmd/nuclei/main.go
 build: go-build
@@ -40,7 +45,7 @@ build-test: GOBUILD_PACKAGES = ./cmd/nuclei/
 build-test: clean
 build-test:
 	CGO_ENABLED=0 $(GOCMD) test -c -trimpath $(GOFLAGS) -ldflags '${LDFLAGS}' $(GOBUILD_ADDITIONAL_ARGS) \
-		 -o '${GOBUILD_OUTPUT}' ${GOBUILD_PACKAGES}
+		 -o '${GOBUILD_OUTPUT}${GOBUILD_OUTPUT_EXT}' ${GOBUILD_PACKAGES}
 
 build-stats: GOBUILD_OUTPUT = ./bin/nuclei-stats
 build-stats: GOBUILD_PACKAGES = cmd/nuclei/main.go
@@ -75,15 +80,25 @@ syntax-docs: docgen
 syntax-docs:
 	./bin/docgen SYNTAX-REFERENCE.md nuclei-jsonschema.json
 
-test: GOFLAGS = -race -v -timeout 30m -count 1
+test: GOFLAGS = -race -v -timeout 1h -count 1
 test:
 	$(GOTEST) $(GOFLAGS) ./...
 
 integration:
-	cd integration_tests; bash run.sh
-
-functional:
-	cd cmd/functional-test; bash run.sh
+	$(GOTEST) -tags=integration -timeout 1h ./internal/tests/integration
+
+integration-debug:
+	$(GOTEST) -tags=integration ./internal/tests/integration -v $(GO_TEST_ARGS) -args $(INTEGRATION_ARGS)
+
+functional: build
+	@test "$$CI" = "true" || (echo "functional target is CI-only" && exit 1)
+	@release_binary="$$(command -v nuclei.exe 2>/dev/null || command -v nuclei 2>/dev/null)"; \
+	if [ -z "$$release_binary" ]; then \
+		echo "release nuclei binary not found on PATH"; \
+		exit 1; \
+	fi; \
+	RELEASE_BINARY="$$release_binary" DEV_BINARY="$(PWD)/bin/nuclei" \
+		$(GOTEST) -tags=functional -timeout 1h ./internal/tests/functional
 
 tidy:
 	$(GOMOD) tidy

CLAUDE.md

@@ -9,13 +9,13 @@ extend-exclude = [
     "README_PT-BR.md",
     "README_TR.md",
     # Test fixtures and data files
-    "integration_tests/",
+    "internal/tests/integration/testdata/",
     "pkg/input/formats/testdata/",
     "pkg/output/stats/waf/",
     # Deserialization test data
     "pkg/protocols/common/helpers/deserialization/testdata/",
     # Certificate/encoded data in test utilities
-    "pkg/testutils/integration.go",
+    "internal/tests/testutils/integration.go",
     # Vendor directory
     "vendor/",
     # Go checksum file