projectdiscovery / nuclei
git clone https://github.com/projectdiscovery/nuclei.git
v3.11.1 · 2mo ago
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
+18
stars, 24h · #837
+~126
stars, 7 days · #1,008
+~540
stars, 30 days · #988
32k
★ total · +0% this week
3.9k
forks · 151 open issues
Star history (as recorded here)
LanguageGo
LicenseMIT
Created2020-04-03 (6y ago)
Last push1d ago
Watchers283
OwnerOrganization
GitHub topics
attack-surfacecve-scannerdasthacktoberfestnuclei-enginesecuritysecurity-scannersubdomain-takeovervulnerability-assessmentvulnerability-detectionvulnerability-scanner
Links
- GitHub: github.com/projectdiscovery/nuclei
- Homepage: https://docs.projectdiscovery.io/tools/nuclei
- Releases · Issues · Hacker News mentions
README excerpt
`English` • `中文` • `Korean` • `Indonesia` • `Spanish` • `日本語` • `Portuguese` • `Türkçe` **Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives.** - Simple YAML format for creating and customizing vulnerability templates. - Contributed by thousands of security professionals to tackle trending vulnerabilities. - Reduce false positives by simulating real-world steps to verify a vulnerability. - Ultra-fast parallel scan processing and request clustering. - Integrate into CI/CD pipelines for vulnerability detection and regression testing. - Supports multiple protocols like TCP, DNS, HTTP, SSL, WHOIS, JavaScript, Code and more. - Integrate with Jira, Splunk, GitHub, Elastic, GitLab. ## Table of Contents - **`Get Started`** - _`1. Nuclei CLI`_ - _`2. Pro and Enterprise Editions`_ - **`Documentation`** - _`Command Line Flags`_ - _`Single target scan`_ - _`Scanning multiple targets`_ - _`Network scan`_ - _`Scanning with your custom template`_ - _`Connect Nuclei to ProjectDiscovery_`_ - **`Nuclei Templates, Community and Rewards`** 💎 - **`Our Mission`** - **`Contributors`** ❤ - **`License`** ## Get Started ### **1. Nuclei CLI** _Install Nuclei on your machine. Get started by following the installation guide **`here`**. Additionally, we provide **`a free cloud tier`** that comes with generous monthly free limits:_ - Store and visualize your vulnerability findings - Write and manage your Nuclei templates - Access the latest Nuclei templates - Discover and store your targets > [!Important] > |**This project is in active development**. Expect breaking changes with releases. Review the release changelog before updating.| > |:--------------------------------| > | This project is primarily built to be used as a standalone CLI tool. **Running nuclei as a service may pose security risks.** It's recommended to use with caution and additional security measures. | ### **2. Pro and Enterprise Editions** _For security teams and enterprises, we provide a cloud-hosted service built on top of Nuclei OSS, fine-tuned to help you continuously run vulnerability scans at scale with your team and existing workflows:_ - 50x faster scans - Large scale scanning with high accuracy - Integrations with cloud services (AWS, GCP, Azure, Cloudflare, Fastly, Terraform, Kubernetes) - Jira, Slack, Linear, APIs and Webhooks - Executive and compliance reporting - Plus: Real-time scanning, SAML SSO, SOC 2 compliant platform (with EU and US hosting options), shared team workspaces, and more - We're constantly **`adding new features`**! - **Ideal for:** Pentesters, security teams, and enterprises **`Sign up to Pro`** or **`Talk to our team`** if you have a large organization and complex requirements. ## Documentation Browse the full Nuclei **`documentation here`**. If you’re new to Nuclei, check out