d55pak / nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Nuclei Templates

Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.

Documentation • Contributions • Discussion • Community • FAQs • Join Discord

---

Templates are the core of the nuclei scanner which powers the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community. We hope that you also contribute by sending templates via pull requests or Github issues to grow the list.

Nuclei Templates overview

An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is available here, and also available in JSON format for integration.

Nuclei Templates Top 10 statistics TAG COUNT AUTHOR COUNT DIRECTORY COUNT SEVERITY COUNT TYPE COUNT cve 467 dhiyaneshdk 202 cves 473 info 453 http 1409 panel 201 pdteam 184 vulnerabilities 230 high 395 file 42 xss 169 pikpikcu 177 exposed-panels 202 medium 313 network 32 wordpress 164 dwisiswant0 113 exposures 150 critical 187 dns 10 rce 162 geeknik 89 technologies 129 low 150 exposure 154 daffainfo 79 misconfiguration 114 cve2020 137 madrobot 59 takeovers 70 lfi 127 princechaddha 50 default-logins 44 wp-plugin 110 gaurang 42 file 42 cve2019 82 gy741 36 workflows 33 134 directories, 1612 files.

📖 Documentation

Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new or your own custom templates. We have also added a set of templates to help you understand how things work.

💪 Contributions

Nuclei-templates is powered by major contributions from the community. Template contributions , Feature Requests and Bug Reports are more than welcome.

💬 Discussion

Have questions / doubts / ideas to discuss? Feel free to open a discussion on Github discussions board.

👨‍💻 Community

You are welcome to join our Discord Community. You can also follow us on Twitter to keep up with everything related to projectdiscovery.

💡 Notes

• Use YAMLlint (e.g. yamllint to validate the syntax of templates before sending pull requests.

Thanks again for your contribution and keeping this community vibrant. ❤️