CVE-2020-9496

CVE-2020-9496 Set-up Vulnerable Environment ▶ wget http://archive.apache.org/dist/ofbiz/apache-ofbiz-17.12.01.zip ▶ unzip apache-ofbiz-17.12.01.zip ▶ cd apache-ofbiz-17.12.01 ▶ sh gradle/init-gradle-wrapper.sh ▶ ./gradlew cleanAll loadDefault ▶ ./gradlew "ofbiz --load-data...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

Nuclei-Templates-Collection

https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory. Fuzzing templat...

sif

install · picker · usage · modules · docs · contribute fast, concurrent recon to exploitation in one binary. every scanner shares one connection-pooled http client. what is sif? sif is a recon and exploitation scanner that runs the whole chain in one binary: subdomain enum, port scan, crawler,...

LazyOwn

LazyOwn RedTeam Framework with AI agents, Linux BOF beacon, YARA+Nuclei marketplace 872 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The First OSS C2 with Linux native c BOF support + built-in YARA/Nuclei marketplaces. Install in one command curl -fsSL...

Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter

Nuclei Template Exploit F5 BIG-IP iControl REST Auth Bypass RCE | Command Parameter CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of...

Oneliner-Bugbounty

Oneliner-Bugbounty A collection oneliner scripts for bug bounty List tools Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro Auto scanner subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates Finding files For example in here .js...

openrisk

openrisk openrisk is an experimental tool which reads nuclei output text, markdown, and JSON and generates a risk score for the host using OpenAI's GPT-4o model. It is intended, for now, to work against a single target at a time. NOTE : This is an experimental program released by the...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe • فارسی...

POC_CVE-2026-45185

CVE-2026-45185 Nuclei Template Validation Lab This repository is not a general-purpose exploit PoC repository. It is a local validation lab for reproducing and reviewing the behavior of a CVE-2026-45185 template intended for contribution to projectdiscovery/nuclei-templates. The nuclei code...

CVE-2024-7593

CVE-2024-7593 Detection How does this detection method work? This template matches on the following versions, if there is a match then the host is considered vulnerable: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" To prevent producing any FPs it also matches on the below: - type...

rxerium-templates

A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. ⚠️ Note: Date matching may be...

nuclei-templates-labs

🎯 Nuclei-Templates-Labs A comprehensive collection of vulnerable environments paired with ready-to-use Nuclei templates for practical security testing and learning! 🚀 🎭 Overview Nuclei-Templates-Labs provides security enthusiasts, researchers, and learners with: Controlled environments for hands-...

dnsprobe

Note - This project is discontinued. New updates and fixes will be pushed to dnsx. DNSProbe is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. Resources Resources Features Usage Installation Instructions Fr...

crlf-desyncs

CRLF Desyncs This is a repository containing useful tools and resources for detecting and exploiting CRLF-based Desyncs, presented at BlackHat USA 2026 and DEFCON 34. Contents cdn-origin/ - contains aggregated origin-to-edge headers useful for fuzzing a CRLF injection on a response...

react2shell-PoC

React2Shell Nuclei template for detecting React2Shell CVE-2025-55182 and CVE-2025-66478...

nextjs-CVE-2025-29927

nextjs-CVE-2025-29927 A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability. If you want to understand exactly how this vulnerability works, you can read the original researchers excellent article here This template is pretty straight forward. It does two...

CVE-2022-41040

CVE-2022-41040 CVE-2022-41040 nuclei template Unverified! Usage git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml GET /autodiscover/[email protected]/BACKENDAPI?&Email=autodiscover/autodiscover.json%[email protected] HTTP/1.1...