Tarun Koyalwar

Introducing the httpx dashboard

The most widely used ProjectDiscovery tool, httpx, has been an essential asset in the arsenal of security professionals and researchers. Known for its ability to probe live hosts and capture crucial information. httpx has long been a go-to solution for: * Response data (status, server, location, etc.) * Technology detection * Extra metadata (favicon, hashes, response time, etc.) * Screenshots * Linked domain discovery (extracting domains from CSP, body) * Cloud metadata (ASN, CDN, WAF in

Attack Surface Management Community & Open Source

Fuzzing for Unknown Vulnerabilities with Nuclei v3.2

At ProjectDiscovery, our goal is to democratize security. Nuclei, our flagship project, plays a pivotal role in achieving this by offering a fast, adaptable, and potent vulnerability scanner, powered by the innovative nuclei-templates. The launch of Nuclei v3.0 was a significant step, incorporating comprehensive capabilities for developing checks against Common Vulnerabilities and Exposures (CVEs). Earlier, with Nuclei v2.8.0, we ventured into Query Fuzzing. Table of Contents * Overv

Nuclei & Templates

Scanning Login-Protected Targets with Nuclei v3.2

With the release of Nuclei v3.2.0, we've introduced a more powerful and versatile approach to conducting authenticated scans. Previously, authentication headers were primarily included using the -H flag, a method that had its limitations. The introduction of the new -secret-file flag overcomes these challenges by accepting a YAML file capable of representing various authentication schemes. Table of Contents * Overview * Authentication Types * Secrets File * Static Auth * Dynamic

Nuclei & Templates

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

We're thrilled to announce the launch of Nuclei v3.2.0. This latest version introduces a host of new features, enhancements, and bug fixes, significantly elevating the Nuclei engine's performance and capabilities. Notably, the inclusion of authentication support and advanced fuzzing support positions this release as a pivotal milestone, further building upon the foundation laid by version 3.0.0. In this blog, and a number of upcoming feature spotlights, you'll learn a lot more about all that nu

Vulnerability Management

Introducing Nuclei v3 with improved vulnerability scanning features

ProjectDiscovery has been working hard over the recent months! Recent template releases have been covering important CVEs and other exploitable vulnerabilities, we’ve been speaking at various conferences, and moreover, we’ve been crafting and writing major improvements for our flagship tool, Nuclei. That work has led us to the latest iteration of a product we have put countless hours of work into. 3️⃣Welcome to Nuclei v3! This release represents a significant leap forward and introduces a mult

Nuclei & Templates

Introducing Alterx: Efficient Active Subdomain Enumeration with Patterns

What is Alterx ? Alterx is a Fast and Customizable subdomain wordlist generator using patterns. alterx fits in the active subdomain enumeration pipeline, which involves creating a wordlist using permutations of passive subdomain enumeration results. Instead of hardcoding patterns in the tool itself, alterx uses a set of patterns that users can customize. This makes alterx more efficient and effective than other existing tools. To understand alterx better, we need to know what active subdomain e

Vulnerability Management

Tarun Koyalwar

Introducing the httpx dashboard

Fuzzing for Unknown Vulnerabilities with Nuclei v3.2

Scanning Login-Protected Targets with Nuclei v3.2

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

Introducing Nuclei v3 with improved vulnerability scanning features

Introducing Alterx: Efficient Active Subdomain Enumeration with Patterns

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company