ProjectDiscovery

Implementing Nuclei into your GitLab CI/CD Pipeline for Scanning Live Web Applications

Security is a fundamental requirement for businesses of all sizes. In recent years, DevOps has evolved into DevSecOps, which emphasizes the integration of security at every stage of the development process. As previously discussed, it is critical to incorporate security into the DevOps cycle to detect and mitigate potential security risks early on. This approach enables organizations to identify and address security vulnerabilities and misconfigurations before they escalate into significant issu

Nuclei & Templates Vulnerability Management

Reconnaissance 103: Host and Port Discovery

Welcome to a 5 part series on Recon with ProjectDiscovery! * Part 1 * Part 2 * Part 3 * Part 4 * Part 5 * Live Host Discovery After gathering all available subdomains, the following process filters all valid ones based on their HTTP method and response content. The httpx tool can collect information about a web server, such as the types of HTTP methods it supports and the contents of its HTTP headers. Httpx During reconnaissance, httpx can gather information about a web server. This inform

Learning & Automation

Reconnaissance 102: Subdomain Enumeration

Welcome to a 5 part series on Recon with ProjectDiscovery! * Part 1 * Part 2 * Part 3 * Part 4 * Part 5 * Subdomain enumeration is an essential reconnaissance technique in the fields of penetration testing and bug bounty hunting. In this part of our series on reconnaissance, we will explore the importance of this technique, how it works, and which tools can be used to conduct subdomain enumeration. We will also discuss best practices and common pitfalls to avoid when performing this type of rec

Learning & Automation

Reconnaissance 101: Active & Passive Reconnaissance

Welcome to a 5 part series on Recon with ProjectDiscovery! * Part 1 * Part 2 * Part 3 * Part 4 * Part 5 * Reconnaissance is a pivotal part of penetration testing and bug bounty hunting, and having an understanding of an organization's assets is crucial for assessing its attack surface. Procuring complete and accurate information during this phase is often crucial for the success of the pentest. This initial step is crucial because it helps to identify the target system or network and collect in

Learning & Automation

An in-depth guide to subfinder: beginner to advanced

In the era of application security, bug bounties have evolved and become mainstream for hackers around the globe. Hackers are constantly looking for new tactics to automate the process of reconnaissance and find different types of vulnerabilities. One of the first steps to hacking a larger scoped program is subdomain enumeration. You can find subdomains by using tools like amass, assetfinder, sudomy, and others. However, in this post, we'll discuss one of the most popular, subfinder, from Proje

Learning & Automation

Introducing Katana: The CLI web crawler from PD

What is Katana? Katana is a command-line interface (CLI) web crawling tool written in Golang. It is designed to crawl websites to gather information and endpoints. One of the defining features of Katana is its ability to use headless browsing to crawl applications. This means that it can crawl single-page applications (SPAs) built using technologies such as JavaScript, Angular, or React. These types of applications are becoming increasingly common, but can be difficult to crawl using traditiona

Attack Surface Management Community & Open Source

A hacker's guide to SSL certificates, featuring TLSx

Introduction In today's digital world, online security is more important than ever. As we rely increasingly on the internet, we must have a way to keep our communications private and secure. That's where SSL and TLS come in. SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are like secret handshakes for the internet. They establish a secure connection between a website and your browser, ensuring that any information exchanged between them is private and can't be intercepted or tam

Learning & Automation

Implementing Nuclei into your GitHub CI/CD pipelines

It is critical that an organisation secures all of their assets along their entire software supply chain. For instance, in a DevOps lifecycle, as a developer, ensuring the security and stability of your code is crucial. One effective way to do this is by implementing automated security testing as part of your continuous integration and deployment (CI/CD) pipeline. In this blog, we will explore how to use Nuclei, a powerful open-source tool for scanning web applications, in your GitHub CI/CD pip

Nuclei & Templates Vulnerability Management

Proxify - A portable CLI-based HTTP/Socks proxy written in Golang

In this blog we’ll discuss the basics of proxies, explain what Proxify is and how it can be used. You’ll learn how to: 1. Install and run Proxify 2. Customize proxy output files and addresses 3. Use DSL language to match and/or replace requests/responses from CLI. 4. Use Proxify to log all HTTP requests from Burp Suite or a web browser. 5. Set up Proxify on a VPS to hide the true source of your traffic But first, let's start by defining a proxy and what it can be used for. What is a pr

Attack Surface Management Community & Open Source

Building a Fast One-Shot Recon Script for Bug Bounty

Introduction In this article we are going to build a fast one-shot recon script to collect the bulk of the information we need to serve as a starting point for our bug bounty testing. This blog post is complementary to the article on building an attack surface monitoring solution. Automation, Computers vs Humans There are a lot of disagreements on the topic of automation, as humans can see or correct things that computers would overlook unless explicitly programmed to do so. Recursion inside

Learning & Automation

The Ultimate Guide to Finding Bugs With Nuclei

Efficient, extensible, flexible, open source vulnerability scanning. Introduction Nuclei is a fast, efficient, and extensible vulnerability scanner. It can scan thousands of hosts in just a few minutes. The Nuclei engine uses YAML-based templates to define the steps required to detect a vulnerability. As an open-source tool we encourage community contributions to the library of templates, and development of the codebase. This means whenever a new CVE is published, someone can create a Nucle

Nuclei & Templates

Introducing ASNMap: A Golang CLI tool for speedy reconnaissance using ASN data

If you're into hacking, there's a good chance that at least one of ProjectDiscovery's tools has been added to your toolbox over the last couple of years. In all honesty, ProjectDiscovery's tools now make up the majority of my toolbox. For this reason, I get excited when they release something new, and ASNMap is no exception. What are ASNs? An Autonomous System (AS) is one or more IP prefixes, typically run by one network operator, with a clearly defined routing policy. An Autonomous System Nu

Attack Surface Management Community & Open Source

ProjectDiscovery

Implementing Nuclei into your GitLab CI/CD Pipeline for Scanning Live Web Applications

Reconnaissance 103: Host and Port Discovery

Reconnaissance 102: Subdomain Enumeration

Reconnaissance 101: Active & Passive Reconnaissance

An in-depth guide to subfinder: beginner to advanced

Introducing Katana: The CLI web crawler from PD

A hacker's guide to SSL certificates, featuring TLSx

Implementing Nuclei into your GitHub CI/CD pipelines

Proxify - A portable CLI-based HTTP/Socks proxy written in Golang

Building a Fast One-Shot Recon Script for Bug Bounty

The Ultimate Guide to Finding Bugs With Nuclei

Introducing ASNMap: A Golang CLI tool for speedy reconnaissance using ASN data

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company