Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
A next-generation crawling and spidering framework.
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
Fast passive subdomain enumeration tool.
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
An OOB interaction gathering server and client library
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
Quickly discover exposed hosts on the internet using multiple search engines.
A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.
dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.
MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.
Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.
Nuclei plugin for BurpSuite
80k+ WordPress Nuclei templates, updated daily from Wordfence intelβfilter by severity/tags/CVE and scan in one line. ππ
Utility program to perform multiple operations for a given subnet/CIDR ranges.
ProjectDiscovery's Open Source Tool Manager
Fast and configurable TLS grabber focused on TLS based data collection.
Go CLI and Library for quickly mapping organization network ranges using ASN information.
A high performance go implementation of Wappalyzer Technology Detection Library
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
Fast and customizable subdomain wordlist generator using DSL
A utility to detect various technology for a given IP address.
Go client to communicate with Chaos DB API.
Go alternative of python SimpleHTTPServer