nuclei - Nuclei is a fast, customizable vulnerability scann

项目说明

!nuclei

<di="center">

<a href="English</a> •
<a href="中文</a> •
<a href="Korean</a> •
<a href="Indonesia</a> •
<a href="Spanish</a> •
<a href="日本語</a> •
<a href="Portuguese</a> •
<a href="Türkçe</a>

</div>

<p align="center">

<a href=" src="
&nbsp;&nbsp;
<a href=" src=" Library-%23000000.s=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDoC9zdmciIHdpZHRoPSIxNiIgaGD0iMCAwIDI0IDI0IiBmaWxsPSJub25lIiBzdHJm9rZS13aWR0aD0iMS41IiBzdHJmQiIHN0cm9rZS1saW5lam9pbj0icm91bmQiIGNsYXNzPSJsdWNpZGUgbH+PHBhdGggZD0iTTIwIDEzYzAgNS0zLjUgNy41LTcuNjYgOC45NWExIDEgMCAwIDEtLjY3LS4wMUM3LjUgMjAuNSA0IDE4IDQgMTNWNmExIDEgMCAwIDEgMS0xYzIgMCA0LjUtMS4yIDYuMjQtMi43MmExLjE3IDEuMTcgMCAwIDEgMS41MiAwQzE0LjUxIDMuODEgMTcgNSAxOSA1YTEgMSAwIDAgMSAxIDF6Ii8+PC9zdmc+&logoColor=white"></a>
&nbsp;&nbsp;
<a href=" src="

<hr>

</p>

<br>

Nuclei is a modern, high-performance scanner that le simple YAML-based templates. It empowers you to design custom detection scenarios that mimic real-world conditions, leading to zero false positives.

Simple YAML format for creating and customizing templates.

Contributed by thousands of security professionals to tackle trending .

Reduce false positives by simulating real-world steps to a .

Ultra-fast parallel scan processing and request clustering.

Integrate into CI/CD pipelines for detection and regression testing.

Supports multiple protocols like TCP, DNS, HTTP, SSL, WHOIS, Ja, Code and more.

Integrate with Jira, Splunk, GitHub, Elastic, GitLab.

<br>
<br>

Table of Contents

Get Started

- _1. Nuclei CLI_
- _2. Pro and Enterprise Editions_

Documentation

- _Command Line Flags_
- _Single target scan_
- _Scanning multiple targets_
- _Network scan_
- _Scanning with your custom template_
- _Connect Nuclei to ProjectDiscovery__

Nuclei Templates, Community and Rewards 💎

Our Mission

Contributors ❤

License

<br>
<br>

Get Started

1. Nuclei CLI

_Install Nuclei on your machine. Get started by following the installation guide here. Additionally, we provide a free cloud tier that comes with generous monthly free limits:_

Store and your findings

Write and manage your Nuclei templates

Access the latest Nuclei templates

Discover and store your targets

> [!Important]
> |This project is in acti. Expect breaking changes with releases. Review the release changelog before updating.|
> |:--------------------------------|
> | This project is primarily built to be used as a standalone CLI tool. Running nuclei as a service may pose security risks. It's recommended to use with caution and additional security measures. |

<br>

2. Pro and Enterprise Editions

_For security teams and enterprises, we provide a cloud-hosted service built on top of Nuclei OSS, fine-tuned to help you continuously run scans at scale with your team and existing workflows:_

50x faster scans

Large scale scanning with high accuracy

Integrations with cloud services (AWS, GCP, Azure, Cloudflare, Fastly, Terraform, Kubernetes)

Jira, Slack, Linear, APIs and Webhooks

Executive and compliance reporting

Plus: Real-time scanning, SAML SSO, SOC 2 compliant platform (with EU and US hosting options), shared team workspaces, and more

We're constantly adding new features!

Ideal for: Pentesters, security teams, and enterprises

Sign up to Pro or Talk to our team if you have a large organization and complex requirements.

<br>
<br>

Documentation

Browse the full Nuclei documentation here. If you’re new to Nuclei, check out our foundational YouTube series.

<di="center">

<a href=" target="_blank"><img src="/static/nuclei-getting-started.png" width="350px"></a> <a href=" target="_blank"><img src="/static/nuclei-write-your-first-template.png" width="350px"></a>

</div>

<br>

Installation

nuclei requires go >= 1.24.2 to install successfully. Run the following command to get the repo:

To learn more about installing nuclei, see .

Command Line Flags

To display all the flags for the tool:

<details>
<summary>Expand full help flags</summary>

Additional documentation is a at: docs.projectdiscovery.io/getting-started/running

</details>

Single target scan

To perform a quick scan on web-application:

Scanning multiple targets

Nuclei can handle bulk scanning by pro a list of targets. You can use a file containing multiple URLs.

Network scan

This will scan the entire subnet for network-related issues, such as open ports or misconfigured services.

Scanning with your custom template

To write and use your own template, create a .yaml file with specific rules, then use it as follows.

Connect Nuclei to ProjectDiscovery

You can run the scans on your machine and upload the results to the cloud platform for further analysis and remediation.

> [!NOTE]
> This feature is absolutely free and does not require any subscription. For a detailed guide, refer to the documentation.

<br>
<br>

Nuclei Templates, Community and Rewards 💎

Nuclei templates are based on the concepts of YAML based template files that define how the requests will be sent and processed. This allows easy extensibility capabilities to nuclei. The templates are written in YAML which specifies a simple human-readable format to quickly define the execution process.

Try it online with our free AI powered Nuclei Templates Editor by clicking here.

Nuclei Templates offer a streamlined way to identify and communicate , combining essential details like se ratings and detection methods. This open-source, community-de tool accelerates threat response and is widely recognized in the cybersecurity world. Nuclei templates are actively contributed by thousands of security researchers globally. We run two programs for our contributors: Pioneers and 💎 bounties.

<p align="left">
<a href="/static/nuclei-templates-teamcity.png" target="_blank"><img src="/static/nuclei-templates-teamcity.png" width="1200px" alt="Nuclei template example for detecting TeamCity misconfiguration" /></a>
</p>

#### Examples

Visit our documentation for use cases and ideas.

| Use case | Nuclei template |
| :----------------------------------- | :------------------------------------------------- |
| Detect known CVEs | C (Log4Shell) |
| Identify Out-of-Band | Blind SQL Injection via OOB |
| SQL Injection detection | Generic SQL Injection |
| Cross-Site Scripting (XSS) | Reflected XSS Detection |
| Default or weak passwords | Default Credentials Check |
| Secret files or data exposure | Sensitive File Disclosure |
| Identify open redirects | Open Redirect Detection |
| Detect subdomain takeovers | Subdomain Takeo |
| Security misconfigurations | Unprotected Jenkins Console |
| Weak SSL/TLS configurations | SSL Certificate Expiry |
| Misconfigured cloud services | Open S3 Bucket Detection |
| Remote code execution | RCE Detection Templates |
| Directory tra attacks | Path Tra Detection |
| File inclusion | Local/Remote File Inclusion |

<br>
<br>

Our Mission

Traditional scanners were built decades ago. They are closed-source, incredibly slow, and . Today's attackers are mass exploiting newly released C the internet within days, unlike the years it used to take. This shift requires a completely different approach to tackling trending exploits on the internet.

We built Nuclei to solve this challenge. We made the entire scanning engine framework open and customizable—allowing the global security community to collaborate and tackle the trending attack and on the internet. Nuclei is now used and contributed by Fortune 500 enterprises, go agencies, uni.

You can participate by contributing to our code, templates library, or joining our team.

<br>
<br>

Contributors :heart:

Thanks to all the amazing community contributors for sending PRs and keeping this project updated. :heart:

<p align="left">
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
<a href=" src=" width="50" height="50" alt="" style="max-width: 100%;"></a>
</p>

<br>
<br>
<br>

<di="center">

_{nuclei is distributed under MIT License}

</div>

项目信息

开发语言：Go

Star 数：31738

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。