dnsprobe

Note - This project is discontinued. New updates and fixes will be pushed to dnsx. DNSProbe is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. Resources Resources Features Usage Installation Instructions Fr...

frontpage-server-extensions-vulnerability-scanner

Frontpage Server Extensions Vulnerability Scanner This Python script automates the process of scanning for the CVE-2000-0114 vulnerability in Microsoft Frontpage Server Extensions. It's designed to help security professionals and system administrators identify potentially vulnerable subdomains...

nuclei-templates-labs

🎯 Nuclei-Templates-Labs A comprehensive collection of vulnerable environments paired with ready-to-use Nuclei templates for practical security testing and learning! 🚀 🎭 Overview Nuclei-Templates-Labs provides security enthusiasts, researchers, and learners with: Controlled environments for hands-...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Description This Nuclei template detects Apache Tomcat servers vulnerable to the TOCTOU race condition that allows remote code execution RCE. ⚠ Important note : This template should be used exclusively for educational purposes and in controlled environments with...

CVE-2017-9805

Test nuclei CVE-2017-9805.yaml - struts2 showcase RCE Build Dockerfile docker build -t cve-2017-9805 . Start and detach container docker run --name cve-2017-9805 -p 127.0.0.1:8080:8080 -dit cve-2017-9805 /bin/bash Login to running container docker exec -it cve-2017-9805 /bin/bash Start tomcat...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

missing-cve-nuclei-templates

Weekly updated list of missing CVEs in nuclei templates official repository Note This repository is 100% automated so there can be errors, but in general is pretty accurate. Go to section "How it works" to understand how data is collected. Stats 📊 CVEs analyzed : 178590 CVEs missing : 69853...

3klCon

3klCon Project Archived Description Automated Recon tool which works with Large and Medium scopes. ّIt's recommended to use it on VPS, it'll discover secrets and search for vulnerabilities So, Welcome, and let's get deep into it subfinder is installed. -- findomain is installed. -- ass...

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template This nuclei template is to verify the vulnerability without executing any commands to the target machine...

nuclearpond

Nuclear Pond Nuclear Pond is used to leverage Nuclei in the cloud with unremarkable speed, flexibility, and perform internet wide scans for far less than a cup of coffee. It leverages AWS Lambda as a backend to invoke Nuclei scans in parallel, choice of storing json findings in s3 to query with A...

nuclei_template

This repository does not have a README...

CVE-2024-36991

CVE-2024-36991 Nuclei Template Description This repository contains a Nuclei template to detect the path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. The vulnerability allows unauthorized access to sensitive files, such as /etc/passwd. CVE Detai...

Proxyshell-Scanner

Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

sif

install · usage · modules · docs · contribute fast, concurrent recon to exploitation in one binary. every scanner shares one connection-pooled http client. what is sif? sif is a recon and exploitation scanner that runs the whole chain in one binary: subdomain enum, port scan, crawler, nuclei,...

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place. Install go install -v github.com/xm1k3/cent/v2@latest Or download from releases after installation run cent init to initialize cent with the configuration...

Shockwave-OSS

BountyTricks Sharing Bug Bounty tips and tricks with the community including but not limited to automation, one liners and useful thoughts Cyllabus 💂‍♂️ Misc Regex Validator Homograph Generator Shodan-Scripts HTTP Headers MIME Types Reverse-Proxies Writeups HTTP Request Smuggling Github local recon...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

CVE-2026-11561

CVE-2026-11561 — Apinizer SSTI / RCE Version Check Infra Nuclei template to detect Apinizer versions lower than 2026.04.6, which are vulnerable to CVE-2026-11561 Server-Side Template Injection leading to Remote Code Execution, CVSS 9.8. Usage echo | nuclei -t CVE-2026-11561.yaml How it works 1...

nuclei-templates-ai

AI-Generated Nuclei Templates 👾 This project is an implementation of our vision detailed in From CVE to Template: The Future of Automating Nuclei Templates with AI This repository demonstrates the power of AI in automating security template generation for vulnerability detection. Using...