projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
5 releases in the last 90 days, the latest 5 days ago, with 362 contributors on GitHub.
The biggest single-day gain in the last year, +50 stars on Dec 7, coincided with release v10.3.5.
Use Cases & Benefits
- Provides a community curated collection of templates for the nuclei engine to detect security vulnerabilities in applications.
- Enables rapid and automated vulnerability detection using a comprehensive and regularly updated set of templates contributed by security researchers.
- Use for automating security scans to identify common web application vulnerabilities like XSS, RCE, and CVEs.
- Use for integrating into bug bounty workflows to efficiently discover and report exploitable security issues.
- Use for developing custom vulnerability detection templates to extend scanning capabilities for specific environments or targets.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
MIT
Permissive: commercial use, modification and redistribution are allowed with attribution.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.
Templates are the core of the nuclei scanner which powers the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community. We hope that you also contribute by sending templates via pull requests or Github issues to grow the list.
An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is available here, and also available in JSON format for integration.
Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new or your own custom templates. We have also added a set of templates to help you understand how things work.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
+498 stars over 86 days across 24 snapshot days; best day +16 on Oct 25.
Forks
3.7K+119
Open issues
108-8
Compared with peers in Security
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| cloudflare/security-audit-skill | 61.7K | +8.8K | 17 | — |
| KeygraphHQ/shannon | 51.2K | +1.1K | 32 | 8 days ago |
| vxcontrol/pentagi | 33.5K | +712 | 38 | 31 days ago |
| Asymptote-Labs/agent-beacon | 3.3K | +360 | 40 | today |
| caddyserver/caddy | 78.8K | +267 | 60 | 1 day ago |
| projectdiscovery/nuclei-templates | 13.2K | — | 65 | 5 days ago |
| Category median | 51.2K | +712 | 38 | — |
Also by projectdiscovery
Other repositories from this maintainer that GStars tracks
- Go32.6K stars
nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- Go17.8K stars
katana
A next-generation crawling and spidering framework.
- Go14.7K stars
subfinder
Fast passive subdomain enumeration tool.
- Go10.5K stars
httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
- Go6.3K stars
naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Discover Repositories
Search across tracked repositories by name or description