Community curated list of templates for the nuclei engine to find security vulnerabilities.

security fingerprint exploits nuclei bugbounty vulnerability-detection hacktoberfest exploit-development nuclei-templates nuclei-checks

• Updated Nov 12, 2026
• JavaScript

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

dns security osint scanner hacking subdomain penetration-testing bug-bounty pentesting recon nuclei vulnerabilities bugbounty pentest security-tools reconnaissance pentest-tool subdomain-enumeration bugbounty-tool

• Updated Nov 2, 2026
• Shell

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

ssh golang tools attack nmap brute-force recon nuclei auto bugbounty vulnerability-detection hacker vulnerability-scanners security-scanner 0day security-tools pentest-tool hacktools bugbounty-tools vulnerabilities-scan

• Updated Jul 12, 2024
• Go

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

tmux meg nmap bug-bounty nuclei masscan axiom massdns subfinder httprobe httpx gau hacking-vps gowitness ffuf shuffledns dnsx dnsgen

• Updated Sep 30, 2024
• Shell

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

hacking nuclei hacker hack-tools

• Updated Aug 23, 2024

Deprecated, please go to next generation Ultra-Low Power RISC-V Core https://github.com/riscv-mcu/e203_hbirdv2

cpu core verilog china nuclei risc-v ultra-low-power

• Updated Mar 24, 2021
• Verilog

The Ultra-Low Power RISC-V Core

cpu fpga core riscv verilog china hummingbird nuclei soc risc-v low-power e203

• Updated Sep 25, 2026
• Verilog

NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques

katana nuclei nuclei-templates uro hakrawler waybackurls gauplus fuzzing-templates nucleifuzzer paramspider nuclei-fuzzer

• Updated Nov 12, 2026
• Python

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

security proof-of-concept exploit poc vulnerability infosec pentesting nuclei cve exploit-database metasploit cvss security-tools threat-intelligence security-research exploitdb epss vulnerability-database cve-poc cisa-kev

• Updated Nov 12, 2026
• Python

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

wordpress security scanner cybersecurity exploits vulnerability awesome-list pentesting nuclei bugbounty cve hacker vulnerability-management ethical-hacking vulnerability-scanning wordfence nuclei-templates projectdiscovery nuclei-scan

• Updated Nov 11, 2026
• Python

Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。

poc nuclei fiora burp-extensions nuclei-gui

• Updated Apr 10, 2026
• Java

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

security wordlist meg penetration-testing fuzzing recon nuclei bugbounty pentest wayback-machine appsec hacktoberfest dirsearch security-tools dirbuster axiom redteaming redteam subfinder ffuf

• Updated Apr 3, 2026

RiskScanner 是开源的多云安全合规扫描平台，基于 Cloud Custodian 和 Nuclei 引擎，实现对主流公(私)有云资源的安全合规扫描和漏洞扫描。

java yaml aws cloud spring-boot vue azure vsphere openstack gcp nuclei tencent aliyun huawei cloud-custodian nuclei-templates

• Updated Apr 14, 2023
• Java

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

tool scanner bug subdomain sql-injection xss-vulnerability infosec nuclei bugbounty bash-script vulnerability-scanners bugbounty-tool bugbountytricks subdomains-enumeration

• Updated Jul 23, 2024
• Shell

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

golang templates penetration-testing pentesting nuclei bugbounty hacktoberfest nuclei-templates

• Updated Jun 6, 2026
• Go

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

cybersecurity penetration-testing bug-bounty infosec nuclei appsec sqlmap offensive-security security-tools devsecops reconnaissance vulnerability-scanner red-teaming playwright ai-agent threat-research llm-security hermes-agent exploit-validation cvss-v3

• Updated Nov 5, 2026
• Python

:: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具

poc vulnerability nuclei nessus exp goby awvs webscanner appscan fscan prismx

• Updated Oct 26, 2026
• Go

The useful exploit finder

exploit poc vulnerability nuclei cve metasploit reconnaissance wordfence searchsploit exploit-db metasploit-modules nuclei-templates exploit-finder

• Updated Jan 19, 2026
• Python

The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbitrary binaries and scripts using any of our nine supported cloud providers!

nmap bug-bounty pentesting nuclei bugbounty masscan axiom vulnerability-scanner subfinder amass gowitness ffuf s3scanner puredns distributed-scanning hacking-vpc

• Updated Sep 19, 2026
• Shell

输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等

cdn scanner snapshot nuclei xray dirsearch iplocation masscan nslookup oneforall crawlergo nmap-http autoscanner

• Updated Mar 13, 2024
• Python