ProjectDiscovery

Celebrating 2024: Securing your infrastructure with ProjectDiscovery

As 2024 comes to a close, we want to celebrate the milestones we’ve achieved together with our ProjectDiscovery community. Thanks to your trust and collaboration, here’s what we’ve accomplished this year on ProjectDiscovery. Platform growth 2k+ new vulnerability templates Identifying nearly 1k high-profile vulnerabilities affecting 600+ unique products—including Atlassian Confluence, GitLab, MLflow, Grafana, GitHub Enterprise, Ivanti, Fortinet, and Palo Alto Networks 50k+ cloud-based scans

Announcements

Advancing Asset Management - PDCP v0.8.9

We're excited to announce the release of version 0.8.9 of the ProjectDiscovery Cloud Platform. This update introduces significant enhancements to our asset management capabilities, focusing on asset inventory, AI-powered search, and improved user experience. Key Features in v0.8.9 Asset Inventory and Technologies The new interface for cataloging and organizing all assets along with their associated technologies in one place represents a significant advancement in asset management. Now, rega

Vulnerability Management

JetBrains TeamCity RCE - CVE-2023-42793

A recently disclosed vulnerability in JetBrains can lead to Remote Code Execution. Are you up to date?

Vulnerability Research Nuclei & Templates

How to run Nuclei & other ProjectDiscovery tools in Docker

Some of the most popular tools by ProjectDiscovery are Nuclei (template-based vulnerability scanner), HTTPx (multipurpose HTTP toolkit), and Subfinder (subdomain enumeration and discovery tool). While the installation process is typically very straightforward for ProjectDiscovery tools, one can often encounter some difficulty setting up a proper environment to run the tool, especially when performing an assessment on a temporary VPS or client-provided system. In instances like this, running too

Nuclei & Templates Vulnerability Management

If you're not writing custom Nuclei templates, you're missing out

Nuclei templates are the core of the scanning engine, and having your custom templates can help significantly in your testing process.

Nuclei & Templates

Nuclei beyond HTTP: Using Nuclei to uncover vulnerabilities in raw TCP connections, DNS, files and more!

Hey there, fellow hackers! Are you ready to take your Nuclei skills to the next level? Buckle up, because in this blog post, we're going to explore the vast possibilities of Nuclei beyond its popular use with HTTP. Nuclei, developed by ProjectDiscovery, is a powerful and versatile tool that can help you uncover vulnerabilities. In this article, you'll learn how you can leverage Nuclei for various protocols and make your security assessments even more robust! Beyond Basic HTTP Requests Despite

Nuclei & Templates

How ProjectDiscovery Applies the Unix Philosophy to Our Tools

ProjectDiscovery is best known for creating open-source security tools like Nuclei, Subfinder, and HTTPx that are widely used and appreciated by the security community. Their approach to tool development aligns with the well-known "Unix Philosophy". But, what exactly does this mean? The Unix Philosophy The Unix Philosophy is a widely accepted set of principles in the development process that defines how development should be approached, keeping a few core principles in consideration, includin

Learning & Automation

Nuclei Templates v9.5.0 - Essential Template Enhancements

Attention all Nuclei users! We're thrilled to announce a new Nuclei template release. This update will bring significant enhancements that will improve your overall experience. However, this release also includes breaking changes. To benefit from these improvements and avoid potential issues, please make sure to keep Nuclei engine updated to the latest version. What's New in this Release? There are three important changes being made. We're going to go over them one by one and discuss what the

Nuclei & Templates

A Deep Dive on Katana "Field" Extraction

Reconnaissance is an important step in identifying and building your organization's attack surface or targeted assets. Web crawling is a prominent reconnaissance technique that allows you to gather information by automatically traversing and extracting data from web pages. However, this process often results in unstructured data that contains countless URLs and parameters, making it difficult to identify unique endpoints, parameters, and fields for use in automation or reconnaissance pipelines.

Learning & Automation

How to use Uncover: Quickly discover exposed hosts using multiple search engines

As the world becomes increasingly connected, more and more devices are being exposed to the internet. This includes everything from industrial control systems to home routers and even refrigerators. Unfortunately, many of these devices are not properly secured, leaving them open to attack. This is where internet-based search engines like Shodan, Censys, and others come in. These tools allow security researchers to find hosts and vulnerabilities on the internet by searching for specific patterns

Learning & Automation

Reconnaissance 105: Additional Types of Active Reconnaissance

Welcome to a 5 part series on Recon with ProjectDiscovery! * Part 1 * Part 2 * Part 3 * Part 4 * Part 5 * This is the final post in our blog series on reconnaissance for penetration testing and bug bounty hunting. In this post, we look at some more creative ways to do active and passive reconnaissance to ensure completely coverage of your target's assets. Subsidiary and Acquisition Enumeration Subsidiary and acquisition enumeration, also known as corporate structure enumeration, is the proce

Learning & Automation

Implementing Nuclei into your Bitbucket CI/CD Pipeline for Scanning Live Web Applications

Security is a crucial factor for both small and large enterprises. This has led to the evolution of DevOps into DevSecOps, which integrates security at an internal level. As we have discussed in previous blogs, it is important to implement security within your DevOps cycle to ensure that it becomes DevSecOps. This approach introduces security at an early phase and helps mitigate multiple misconfigurations early on. In this blog, we will explore how to use Nuclei, a powerful open-source tool for

Nuclei & Templates Vulnerability Management

ProjectDiscovery

Celebrating 2024: Securing your infrastructure with ProjectDiscovery

Advancing Asset Management - PDCP v0.8.9

JetBrains TeamCity RCE - CVE-2023-42793

How to run Nuclei & other ProjectDiscovery tools in Docker

If you're not writing custom Nuclei templates, you're missing out

Nuclei beyond HTTP: Using Nuclei to uncover vulnerabilities in raw TCP connections, DNS, files and more!

How ProjectDiscovery Applies the Unix Philosophy to Our Tools

Nuclei Templates v9.5.0 - Essential Template Enhancements

A Deep Dive on Katana "Field" Extraction

How to use Uncover: Quickly discover exposed hosts using multiple search engines

Reconnaissance 105: Additional Types of Active Reconnaissance

Implementing Nuclei into your Bitbucket CI/CD Pipeline for Scanning Live Web Applications

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company