Community curated list of templates for the nuclei engine to find security vulnerabilities.
Go to file
Prince Chaddha ca92425071
Update CVE-2015-2807.yaml
2021-08-04 14:07:35 +05:30
.github Adding workflow validation 2021-08-02 01:47:58 +05:30
cnvd matcher update to handle edge cases 2021-07-25 03:05:55 +05:30
cves Update CVE-2015-2807.yaml 2021-08-04 14:07:35 +05:30
default-logins Update oracle-bi-default-credentials.yaml 2021-08-02 14:32:39 +05:30
dns Merge pull request #2143 from projectdiscovery/detect-dnsec 2021-07-31 22:51:29 +05:30
exposed-panels Update tikiwiki-cms.yaml 2021-08-02 21:44:34 +05:30
exposures Update general-tokens.yaml 2021-08-02 12:27:07 -05:00
file Update dom-xss.yaml 2021-08-02 21:20:22 +05:30
fuzzing matcher update to handle edge cases 2021-07-25 03:05:55 +05:30
headless
helpers
iot removed extra headers 2021-07-27 21:43:39 +05:30
miscellaneous Add missing-x-content-type-options 2021-07-02 11:10:29 -03:00
misconfiguration template update 2021-08-02 16:10:05 +05:30
network Update detect-addpac-voip-gateway.yaml 2021-07-26 13:50:41 +05:30
takeovers misc updates 2021-08-02 12:53:35 +05:30
technologies Merge pull request #2199 from pikpikcu/patch-208 2021-08-03 19:53:32 +05:30
vulnerabilities Merge pull request #2316 from gy741/rule-add-v49 2021-08-03 19:57:45 +05:30
workflows Create phpmyadmin-workflow.yaml 2021-07-21 18:32:53 -04:00
.gitignore
.nuclei-ignore minor update 2021-07-20 00:11:27 +05:30
.pre-commit-config.yaml
.yamllint
CODE_OF_CONDUCT.md
CONTRIBUTING.md Update CONTRIBUTING.md 2021-08-02 20:44:27 +02:00
LICENSE.md
PULL_REQUEST_TEMPLATE.md typos 2021-07-10 22:06:59 +05:30
README.md Auto Update README [Mon Aug 2 18:54:22 UTC 2021] 🤖 2021-08-02 18:54:22 +00:00
TEMPLATES-STATS.json Revert "Auto Generated Templates Stats [Tue Jul 27 00:25:35 UTC 2021] 🤖" 2021-08-03 19:59:39 +05:30
TEMPLATES-STATS.md Revert "Auto Generated Templates Stats [Tue Jul 27 00:25:35 UTC 2021] 🤖" 2021-08-03 19:59:39 +05:30
TOP-10.md Revert "Auto Generated Templates Stats [Tue Jul 27 00:25:35 UTC 2021] 🤖" 2021-08-03 19:59:39 +05:30

README.md

Nuclei Templates

Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.

DocumentationContributionsDiscussionCommunityFAQsJoin Discord


Templates are the core of the nuclei scanner which powers the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community. We hope that you also contribute by sending templates via pull requests or Github issues to grow the list.

Nuclei Templates overview

An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is available here, and also available in JSON format for integration.

Nuclei Templates Top 10 statistics

TAG COUNT AUTHOR COUNT DIRECTORY COUNT SEVERITY COUNT TYPE COUNT
cve 547 dhiyaneshdk 232 cves 554 info 569 http 1646
panel 213 pikpikcu 225 vulnerabilities 252 high 441 file 44
xss 202 pdteam 189 exposed-panels 215 medium 371 network 35
wordpress 189 dwisiswant0 126 exposures 170 critical 210 dns 11
rce 181 geeknik 122 technologies 156 low 150
exposure 180 daffainfo 114 misconfiguration 119
lfi 155 madrobot 60 takeovers 70
cve2020 153 gy741 54 default-logins 49
wp-plugin 127 princechaddha 53 file 44
tech 97 gaurang 42 workflows 34

139 directories, 1792 files.

📖 Documentation

Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new or your own custom templates. We have also added a set of templates to help you understand how things work.

💪 Contributions

Nuclei-templates is powered by major contributions from the community. Template contributions , Feature Requests and Bug Reports are more than welcome.

💬 Discussion

Have questions / doubts / ideas to discuss? Feel free to open a discussion on Github discussions board.

👨‍💻 Community

You are welcome to join our Discord Community. You can also follow us on Twitter to keep up with everything related to projectdiscovery.

💡 Notes

  • Use YAMLlint (e.g. yamllint to validate the syntax of templates before sending pull requests.

Thanks again for your contribution and keeping this community vibrant. ❤️