ProjectDiscovery

Nuclei v2.5.2 - First Security Release

We'd like to thank @c3l3si4n for disclosing the first security vulnerability that affects nuclei. This blog describes a brief overview of the security issue/impact and the measures we took to address it. Issue Summary The nuclei engine has a code execution vulnerability using components with known vulnerabilities that can be exploited by utilizing a specially crafted headless based template. Root Cause Nuclei relies on the go-rod library for a high level browser driver to run templates tha

Nuclei & Templates

Nuclei v2.4.0 - Uniform, Stable & More Powerful

The new nuclei v2.4.0 release includes a slew of bug fixes and feature enhancements that improve the overall uniformity, stability, and functionality of the tool. Uniform This version includes improvements to the template execution process, with the nuclei-templates repository now serving as the default entry point. This means that when no templates are specified, the Nuclei engine executes all public templates (those that are not excluded) on the targets that have been specified. nuclei -u

Nuclei & Templates

Secrets Scanning with Nuclei

Within the v2.3.0 release, we've introduced File based scanning capabilities into the Nuclei engine. If you are already a Nuclei user, you will find it familiar because it follows the same principles as the HTTP based templates. We wanted to provide a similar approach to make writing your own file based templates simple and convenient. File protocol The File protocol template extension makes pattern-based file matching possible by enabling Nuclei to scan the desired parts of the file system.

Nuclei & Templates

Writing security templates for Apache Airflow

Apache Airflow is an Open Source tool that allows users "programmatically author, schedule and monitor workflows". We decided to create a suite of checks for testing security of Airflow installations and document the entire process to show how easy it is to write custom nuclei templates for any piece of technology. Environment Setup Before we start with template creation, we need to set up an airflow instance for testing. We found this repo on GitHub with the docker-compose file to set up a l

Learning & Automation

Exploiting Race conditions with Nuclei

What Is a Race Condition Vulnerability? A race condition attack happens when a computing system that’s designed to handle tasks in a specific sequence is forced to perform two or more operations simultaneously. This technique takes advantage of a time gap between the moment a service is initiated and the moment a security control takes effect. This attack, which depends on multithreaded applications, can be delivered in one of two ways: interference caused by untrusted processes (essentially a

Nuclei & Templates Vulnerability Management

Github Actions for Application Security

Update: PD-Actions GitHub project is suspended by GitHub team due to abuse of Actions platform by malicious actors using PD-Actions. "GitHub Actions help you automate tasks within your software development life cycle. GitHub Actions are event-driven, meaning that you can run a series of commands after a specified event has occurred. For example, every time someone creates a pull request for a repository, you can automatically run a command that executes a software testing script." What this m

Vulnerability Management Learning & Automation

We are going fulltime

Most of you probably don't know, but ProjectDiscovery has been maintained in free-time, and we have been doing it so for the past 2 years. It was initially started when we met through the subfinder repository [https://github.com/projectdiscovery/subfinder] where we exchanged our ideas and started creating solutions out of a passion for open-source. We still remember when we released our first project, we were flipping out after getting the first 100 stars. There are so many memories around this

Nuclei - Fuzz all the things

The latest nuclei release has been a pretty big one with lots of new features added as well as bug fixes to existing code base. Significant new additions have been made in fuzzing as well templating capabilities of nuclei. Non-RFC Compliant Requests Earlier versions of nuclei used the base Go HTTP library. The requests were strictly validated and non-spec compliant requests were dropped. The new release comes with an unsafe attribute using our rawhttp library which allows sending any kind of

Nuclei & Templates

Nuclei Unleashed - Quickly write complex exploits

If you’re reading about nuclei for the first time, we suggest you start here at this blog post which introduces the basic idea behind nuclei. Stateful Dynamic requests One of the major limitation with previous versions of nuclei was the inability to perform multi-step or chained requests making it impossible to use it in a process where some dynamic state needed to be maintained or session needed to be created. With the latest release, you can very easily create such complex workflows with

Nuclei & Templates

Introducing Chaos Bug bounty recon data API

We’re proud to announce release of our Chaos Bug bounty recon data API today. This API will allow hackers to get instant data on targets of their choice without running any additional tools at just single hit of request. Goals behind the project Reconnaissance is complex, it requires a proper setup and not everyone is equally good at it. People are skilled differently, some are amazing at looking at Web Attack Surfaces, some prefer to dive deep into logic bugs. Being good at recon requires some

Learning & Automation Attack Surface Management

Community-powered scanning with Nuclei

Nuclei is a new breed of scanners, that moves away from the traditional model of vulnerability scanners allowing complete extensibility with a very simple and easy to use templating syntax. Introduction At its basic level, Nuclei is a scanner - it sends HTTP/DNS requests and checks for some response to discover anomalies in the target. It works on top of YAML files allowing the users to define the behaviour they are looking for in a readable format. Users can easily define Matchers which che

Nuclei & Templates

Reconnaissance - The way it should be

Last year, we were sitting and discussing over coffee how the current reconnaissance techniques we used were outdated and cumbersome. We decided to do some research and improve the overall process. As a result, we set out to create a dataset of DNS Names. The service we created used multiple steps to gather all the assets for a given Domain Name. But there was a major problem with this approach - the system had lesser results than many public alternatives, it wasn’t scalable so the system couldn

Attack Surface Management

ProjectDiscovery

Nuclei v2.5.2 - First Security Release

Nuclei v2.4.0 - Uniform, Stable & More Powerful

Secrets Scanning with Nuclei

Writing security templates for Apache Airflow

Exploiting Race conditions with Nuclei

Github Actions for Application Security

We are going fulltime

Nuclei - Fuzz all the things

Nuclei Unleashed - Quickly write complex exploits

Introducing Chaos Bug bounty recon data API

Community-powered scanning with Nuclei

Reconnaissance - The way it should be

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company