ProjectDiscovery ORG

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Nuclei is a fast, template-driven vulnerability scanner that checks websites, APIs, and servers for thousands of known security weaknesses using community-written YAML recipes.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

A community library of 12,000+ YAML detection templates for the Nuclei security scanner, covering CVEs, misconfigurations, fingerprinting, and CISA known exploited vulnerabilities.

Fast passive subdomain enumeration tool.

Subfinder is a fast command-line tool that discovers subdomains of a target domain by querying public internet sources like certificate logs and DNS records, without sending any traffic to the target itself.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

A next-generation crawling and spidering framework.

A fast web crawler in Go for security research and automation, with a headless browser mode that handles JavaScript-heavy sites.

An OOB interaction gathering server and client library

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Quickly discover exposed hosts on the internet using multiple search engines.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

Nuclei plugin for BurpSuite

Community curated list of public bug bounty and responsible disclosure programs.

Utility program to perform multiple operations for a given subnet/CIDR ranges.

ProjectDiscovery's Open Source Tool Manager

Fast and configurable TLS grabber focused on TLS based data collection.

Go CLI and Library for quickly mapping organization network ranges using ASN information.

A high performance go implementation of Wappalyzer Technology Detection Library

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

A utility to detect various technology for a given IP address.

Fast and customizable subdomain wordlist generator using DSL

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Go client to communicate with Chaos DB API.

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

Go alternative of python SimpleHTTPServer

Community curated list of search queries for various products across multiple search engines.

A streamlined tool for discovering private TLDs for security research.

AIx is a cli tool to interact with Large Language Models (LLM) APIs.

Vulnerability Scan with Nuclei

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

Web dashboard for Interactsh client

Continuous recon and vulnerability assessment using Github Actions.

openrisk is a tool that generates a risk score based on the results of a Nuclei scan.

Raw HTTP client in Go for complete request control and customization.

Package retryablehttp provides a familiar HTTP client interface with automatic retries and exponential backoff

Helper Libraries

Retryable DNS client in Go

Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀

Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage 👾

DSL engine

Curated list of categorized User Agents

A simple layer for leveled logging in go

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

A go flag wrapper with convenience helpers

Nuclei documentation

A fingerprint generation helper for nuclei network templates

Malicious package & supply-chain intelligence

Dialer with DNS Cache + Dial History

IP/FQDN data structure helper with randomization of hosts and ports based on masscan internal logic

A Golang blocking rate limit implementation

Hybrid memory/disk map

Tiny embeddable dns server

blackrock cipher based on masscan

Collection of ProjectDiscovery wallpapers

Network Policy Helper

Free listening port from the OS

Fast, simple library in Go to fetch CVEs from the National Vulnerability Database feeds

A command based package for simple display of statistics

gozero: the wannabe zero dependency runtime for Go developers (experimental)

Small Helper Library to increase automatically the file descriptors limits for the current process

BurpSuite Standard/Private Collaborator Library

Centralized docs of ProjectDiscovery

A documentation generator for YAML as code

Get the unique machine id of any host (without admin privileges)

Vulnerable demo application for the race condition

A fast port scanner written in go with a focus on reliability and simplicity.

Fast and passive subdomain enumeration.

Notify is a helper utility written in Go that allows you to post output to multiple platforms.

roundrobin with configurable rotating strategies

sqlc-go-builder

Sarif exporter

File helpers - Moved at https://github.com/projectdiscovery/utils

Fast and multi-purpose DNS toolkit allow to run multiple DNS queries.

Reworked version of https://golang.org/src/crypto/tls/generate_cert.go

HTTP Web Server probing

An SMB library in Go

Exec helpers - Moved at https://github.com/projectdiscovery/utils

A DNS response caching library in go

Martian is a library for building custom HTTP/S proxies

Defcon 32 Workshop setup and info

ip helpers - Moved at https://github.com/projectdiscovery/utils

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Design system config file

A utility for extracting various meta data from nuclei-templates.

ProjectDiscovery Cloud - Agent

Strings helper - Moved at https://github.com/projectdiscovery/utils

Helper library to save/restore internal values across multiple runs

Python like library to Interpret bytes as packed binary data

A TTL expiring LRU cache in go

Community health files for the @projectdiscovery organization

Package ldapserver implements LDAP Server

Library containing various crypto helpers

SMB2/3 client library written in Go.

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

ProjectDiscovery's Composite Actions

File based kv store

ProjectDiscovery Security Research

Library containing reflection helpers

Http helper library

An in-memory cache library for golang. It supports multiple eviction policies: LRU, LFU, ARC

sliceutils helpers - Moved at https://github.com/projectdiscovery/utils

Simple and fast template engine for Go

asyncsqs wraps around SQS client from aws-sdk-go-v2 to provide an async buffered client to optimise AWS costs.

No description.

Go maps helper functions - Moved at https://github.com/projectdiscovery/utils

The ProjectDiscovery OSS Bounty Program exists to democratize security by rewarding meaningful contributions from the global community.

Goroutine leak detector

RDAP command line client

A lightweight library to detect and remove known wildcard HTTP web servers.

API Reference for Javascript protocol

Package containing various folder helpers

This zbase32 library encodes ArrayBuffers to zbase32 encoded strings and back.

Helper library handling edge cases URLs - Moved at https://github.com/projectdiscovery/utils

Nuclei Templates test

ECMAScript/JavaScript engine in pure Go

TunnelX is a lightweight ingress tunneling tool designed to create a secure SOCKS5 proxy server for routing network traffic.

sqlc: A simple dynamic query builer for [kyleconroy/sqlc](https://github.com/kyleconroy/sqlc)

Sourcemaps for js-yaml

ESLint Configurations

Nodejs compatibility library for Goja

Arbitrary expression evaluation for golang