Community curated list of templates for the nuclei engine to find security vulnerabilities.
Go to file
forgedhallpass da68c83220
Credentials disclosure refactor (#3552)
* misc updates
* fixed linter error: unnecessary escape of single quotes
* minor simplification of the last capture group
* replaced (=| =|:| :)(( \"|\")|( '|')) with \\s*[=:]\\s*[\"'] because it's more readable and also more permissive with white space characters
* changed the [a-z0-9-_] with [\w-] for readability
* removed the unnecessary capture group

Co-authored-by: Emad Youssef <48482029+Sy3Omda@users.noreply.github.com>
Co-authored-by: sandeep <sandeep@projectdiscovery.io>
2022-01-18 16:25:55 +05:30
.github minor workflow update 2022-01-06 16:19:35 +05:30
cnvd
cves Create CVE-2020-23575.yaml (#3547) 2022-01-18 13:12:16 +05:30
default-logins
dns Added more DNS Figerprinting templates (#3492) 2022-01-07 13:32:20 +05:30
exposed-panels Update pulse-secure-panel (#3536) 2022-01-18 13:44:57 +05:30
exposures Credentials disclosure refactor (#3552) 2022-01-18 16:25:55 +05:30
file
fuzzing
headless
helpers
iot
miscellaneous Enable redirects (#3545) 2022-01-17 11:38:12 +05:30
misconfiguration Add cloud metadata checks for reverse proxies (#3528) 2022-01-16 17:55:28 +05:30
network Network template updates & fixes (#3497) 2022-01-07 12:58:37 +05:30
ssl
takeovers
technologies Added drupal login template (#3471) 2022-01-18 12:35:19 +05:30
token-spray
vulnerabilities Added missing request 2022-01-18 10:46:50 +05:30
workflows Add workflow template (#3533) 2022-01-16 01:01:19 +05:30
.gitignore
.nuclei-ignore
.pre-commit-config.yml
.yamllint
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE.md
PULL_REQUEST_TEMPLATE.md
README.md Auto README Update [Sun Jan 16 12:26:57 UTC 2022] 🤖 2022-01-16 12:26:57 +00:00
TEMPLATES-STATS.json Auto Generated Templates Stats [Sun Jan 16 12:26:36 UTC 2022] 🤖 2022-01-16 12:26:36 +00:00
TEMPLATES-STATS.md Auto Generated Templates Stats [Sun Jan 16 12:26:36 UTC 2022] 🤖 2022-01-16 12:26:36 +00:00
TOP-10.md Auto Generated Templates Stats [Sun Jan 16 12:26:36 UTC 2022] 🤖 2022-01-16 12:26:36 +00:00
contributors.json Adding contributors.json from gh commit logs (#3540) 2022-01-16 22:21:22 +05:30

README.md

Nuclei Templates

Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.

DocumentationContributionsDiscussionCommunityFAQsJoin Discord


Templates are the core of the nuclei scanner which powers the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community. We hope that you also contribute by sending templates via pull requests or Github issues to grow the list.

Nuclei Templates overview

An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is available here, and also available in JSON format for integration.

Nuclei Templates Top 10 statistics

TAG COUNT AUTHOR COUNT DIRECTORY COUNT SEVERITY COUNT TYPE COUNT
cve 955 daffainfo 529 cves 961 info 991 http 2660
lfi 400 dhiyaneshdk 360 exposed-panels 381 high 730 file 57
panel 383 pikpikcu 295 vulnerabilities 377 medium 544 network 48
xss 296 pdteam 240 technologies 214 critical 353 dns 16
wordpress 277 geeknik 173 exposures 199 low 171
exposure 273 dwisiswant0 159 workflows 182
rce 251 gy741 98 misconfiguration 182
tech 224 pussycat0x 98 token-spray 146
cve2021 211 0x_akoko 94 default-logins 67
wp-plugin 187 princechaddha 81 takeovers 65

203 directories, 2995 files.

📖 Documentation

Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new or your own custom templates. We have also added a set of templates to help you understand how things work.

💪 Contributions

Nuclei-templates is powered by major contributions from the community. Template contributions , Feature Requests and Bug Reports are more than welcome.

Alt

💬 Discussion

Have questions / doubts / ideas to discuss? Feel free to open a discussion on Github discussions board.

👨‍💻 Community

You are welcome to join the active Discord Community to discuss directly with project maintainers and share things with others around security and automation. Additionally, you may follow us on Twitter to be updated on all the things about Nuclei.

Thanks again for your contribution and keeping this community vibrant. ❤️