Nuclei templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. The project is written primarily in JavaScript, distributed under the MIT License license, first published in 2020. It has gained significant community traction with 12,522 stars and 3,531 forks on GitHub. Key topics include: bugbounty, exploit-development, exploits, fingerprint, hacktoberfest.
Templates are the core of the nuclei scanner which powers the actual scanning engine.
This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community.
We hope that you also contribute by sending templates via pull requests or Github issues to grow the list.
Nuclei Templates overview
An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is available here, and also available in JSON format for integration.
<table> <tr> <td>๐จ Known Exploited Vulnerabilities (KEV) Coverage
Nuclei templates provide coverage for vulnerabilities actively exploited in the wild:
| KEV Source | Templates | Description |
|---|---|---|
| ๐ด CISA KEV | 454 | CISA Known Exploited Vulnerabilities Catalog |
| ๐ VulnCheck KEV | 1449 | VulnCheck KEV - Enhanced vulnerability intelligence |
| ๐ข Both Sources | 407 | Templates covering vulnerabilities in both catalogs |
๐ก Total unique KEV templates: 1496 - Use
nuclei -tags kev,vkevto scan for actively exploited vulnerabilities
Nuclei Templates Top 10 statistics
| TAG | COUNT | AUTHOR | COUNT | DIRECTORY | COUNT | SEVERITY | COUNT | TYPE | COUNT |
|---|---|---|---|---|---|---|---|---|---|
| vuln | 6468 | dhiyaneshdk | 1894 | http | 9281 | info | 4353 | file | 436 |
| cve | 3587 | daffainfo | 905 | cloud | 659 | high | 2552 | dns | 26 |
| discovery | 3265 | princechaddha | 854 | file | 436 | medium | 2457 | ||
| vkev | 1394 | dwisiswant0 | 805 | network | 259 | critical | 1555 | ||
| panel | 1365 | ritikchaddha | 678 | code | 251 | low | 330 | ||
| xss | 1269 | pussycat0x | 675 | dast | 240 | unknown | 54 | ||
| wordpress | 1261 | pikpikcu | 353 | workflows | 205 | ||||
| exposure | 1141 | pdteam | 314 | javascript | 92 | ||||
| wp-plugin | 1103 | pdresearch | 275 | ssl | 38 | ||||
| osint | 848 | iamnoooob | 263 | dns | 23 |
873 directories, 11997 files.
</td> </tr> </table>๐ Documentation
Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new or your own custom templates.
We have also added a set of templates to help you understand how things work.
๐ช Contributions
Nuclei-templates is powered by major contributions from the community.
Template contributions , Feature Requests and Bug Reports are more than welcome.
๐ฌ Discussion
Have questions / doubts / ideas to discuss?
Feel free to open a discussion on Github discussions board.
๐จโ๐ป Community
You are welcome to join the active Discord Community to discuss directly with project maintainers and share things with others around security and automation.
Additionally, you may follow us on Twitter to be updated on all the things about Nuclei.
Thanks again for your contribution and keeping this community vibrant. :heart:
Contributors
Showing top 12 contributors by commit count.
