757 matches found
OmniScan
OmniScan Comprehensive Vulnerability Scanner OmniScan is a lightweight, multi-engine vulnerability scanner based on Python, designed for red team operations and security research. It integrates a lightweight Nuclei engine Lite and Afrog engine, and provides powerful asset collection and result...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
CVE-2022-27925
CVE-2022-27925 CVE-2022-27925 nuclei template...
Nuclei_CVE-2025-31161_CVE-2025-2825
This repository does not have a README...
sif
install · usage · modules · docs · contribute fast, concurrent recon to exploitation in one binary. every scanner shares one connection-pooled http client. what is sif? sif is a recon and exploitation scanner that runs the whole chain in one binary: subdomain enum, port scan, crawler, nuclei,...
nuclearpond
Nuclear Pond Nuclear Pond is used to leverage Nuclei in the cloud with unremarkable speed, flexibility, and perform internet wide scans for far less than a cup of coffee. It leverages AWS Lambda as a backend to invoke Nuclei scans in parallel, choice of storing json findings in s3 to query with A...
CVE-2024-50379-nuclei
CVE-2024-50379 Testing the latset Apache Tomcat CVE-2024-50379 Vuln...
nuclei-burp-plugin
Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation...
crlf-desyncs
CRLF Desyncs Este es un repositorio que contiene herramientas y recursos útiles para detectar y explotar desyncs basados en CRLF, presentado en BlackHat USA 2026 y DEFCON 34. Contenido cdn-origin/ - contiene cabeceras agregadas de origin-to-edge útiles para fuzzear una inyección CRLF en una...
RapidWebRecon
Nuclei to PDF Report Generator A professional-grade automation tool designed to bridge the gap between technical vulnerability scanning and executive reporting. Developed by Adi Mahluf Tenroot Cyber Security. 🚀 Overview This project provides a seamless "one-command" workflow to audit web assets. ...
CVE-2024-24919
CVE-2024-24919 nuclei template of CVE-2024-24919 This template will help detect the described vulnerability by checking if the system leaks the contents of the /etc/shadow file...
fuzzing-templates
Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory...
fuzzing-templates
Plantillas de Fuzzing Lista curada por la comunidad de plantillas de fuzzing para el motor nuclei para encontrar vulnerabilidades de seguridad desconocidas. Documentación • Contribuciones • Discusión • Comunidad !Caution Este repositorio está archivado y fusionado en el proyecto nuclei-templates...
CVE-2024-7593
CVE-2024-7593 检测 这种检测方法的工作原理是什么？ 该模板会匹配以下版本，如果匹配到，则认为主机存在漏洞： root@kitploit: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" 为了防止产生误报，它还会匹配以下内容： root@kitploit: - type: word part: body words: - "Login Virtual Traffic Manager" 如何运行此脚本？ 1. 从这里下载Nuclei 2. 将模板复制到本地系统 3. 运行以下命令：nuclei -u...
nuclei-wordfence-cve
Nuclei + Wordfence = ♥ 77,636 个用于 WordPress 安全扫描的 Nuclei 模板 🥳 让你的 WordPress 安全水平更上一层楼！本项目汇集了海量全新的 Nuclei 模板，用于 WordPress 扫描。扫描核心（Core）、插件和主题中的弱点——全部基于 Wordfence.com 的最新情报。 为什么说它是你的新好朋友： 海量模板库 ：无需再四处寻找单个模板，整个武器库尽在你的指尖。 始终与时俱进 ：这些模板会随最新威胁持续更新，让你永远不会落后于形势。 开源魔法 ：需要针对特定场景调整模板？没问题，你拥有完全的控制权。 如果你正在守护...
CVE-2024-38856
nuclei -t CVE-2024-38856.yaml -u https://target...
CVE-2022-1388
CVE-2022-1388 Nuclei Template for CVE-2022-1388. I have used the shadow file for poc , you can use the passwd '/etc/passwd' file as well. Change the Extractor according to your choice. POC Reference: https://support.f5.com/csp/article/K23605346...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...
scriptkiddi3
使用 SCRIPTKIDDI3 简化你的侦察和漏洞检测流程， 一款基于 Shell 脚本和开源工具构建的侦察与初始漏洞检测工具。 工作原理 • 安装 • 使用 Docker 安装 • 使用方法 • 模式 • 重要说明 | Webhook 配置 • 给开发者 • 致谢 介绍 SCRIPTKIDDI3，一款面向漏洞赏金猎人的强大侦察和初始漏洞检测工具。SCRIPTKIDDI3 基于多种开源工具和 Shell 脚本构建，让你能够快速高效地对目标域进行扫描并识别潜在漏洞。 SCRIPTKIDDI3 首先对目标系统执行侦察，收集子域名等信息，并利用 nuclei...