Nuclei

Nuclei is a scanning tool that detects vulnerabilities using YAML-based templates. The structure that supports multiple protocols such as HTTP, DNS, TCP and SSL enables the execution of customizable scenarios with parallel processing capability. The tool focuses on reducing false positive results by simulating real-world conditions to verify vulnerabilities.

NU

projectdiscovery · Security & Penetration Testing

STARS32.5K
FORKS4.0K
COMMITS—
CONTRIBUTORS262
VERSIONv3.9.0
UPDATEDtoday
GoSecurityScannerMIT

Common commercial products in this category: Burp Suite Professional, Nessus, Cobalt Strike

What can it do?
  • You can create your own vulnerability detection scenarios using templates in the YAML format.
  • You can automate vulnerabilities and regression tests by integrating them into the CI/CD processes.
  • You can manage your findings by connecting with platforms like Jira, Splunk, GitHub and GitLab.
User reviews
  • • NeutralGitHub Issue

    XSS Context Analyzer

    “XSS Context Analyzer”

  • • NeutralGitHub Issue

    [FEATURE] Add honeypot detection to nuclei

    “### Describe your feature request Many hosts on shodan have all the matchers from nuclei in order to fool scanner (show each vuln as matching). we should have some sort of detection to match such scenarios and ignore their matches (at least inform user) ### Describe the use case…”

Verified against README · Oct 26, 2026 · source

My note

Alternative pages

More in: Security & Penetration Testing