51 stories

Nuclei & Templates

Find comprehensive guides, updates, and best practices for using ProjectDiscovery's Nuclei vulnerability scanner and its templates to enhance your security assessments.

GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487)

Introduction In light of the recent Ruby-SAML bypass discovered in GitLab, we set out to examine the SAML implementation within GitHub Enterprise. During our research, we identified a significant vulnerability that enabled bypassing GitHub’s SAML authentication when encrypted assertions were in use. This blog post will provide an in-depth look at GitHub Enterprise’s SAML implementation and analyze the specific code issue that permitted this bypass. Although we uncovered this vulnerability inde

Vulnerability Research Nuclei & Templates

Announcing the Nuclei Templates Community Leaderboard and Rewards!

We’re thrilled to unveil our latest milestones: over 9,000 stars and 900 unique contributors on the templates project, along with a staggering 20,000 stars on the Nuclei repository. This phenomenal growth is a testament to our community’s unwavering dedication to security and their shared passion for safeguarding the digital world. As part of the next phase in the evolution of the Nuclei Templates repository as the central, open source way for security research and engineers to communicate about

Nuclei & Templates

Zimbra - Remote Command Execution (CVE-2024-45519)

Zimbra, a widely used email and collaboration platform, recently released a critical security update addressing a severe vulnerability in its postjournal service. This vulnerability, identified as CVE-2024-45519, allows unauthenticated attackers to execute arbitrary commands on affected Zimbra installations. In this blog post, we delve into the nature of this vulnerability, our journey in analyzing the patch, and the steps we took to exploit it manually. We also discuss the potential impact and

Nuclei & Templates

Simplifying XSS Detection with Nuclei - A New Approach

XSS (Cross-Site Scripting) detection has long been a challenge, balancing accuracy with avoiding excessive false positives. Traditionally, this meant creating specific reflection based string matchers for each target, leading to complex and hard-to-maintain configurations. But with headless modes, we can simplify and improve XSS detection in a more intuitive and efficient way. In this post, we'll explore how to leverage nuclei headless mode to detect XSS payloads more easily and accurately, usi

Nuclei & Templates

Azure Config Review - Nuclei Templates v10.0.0 🎉

We're excited to tell you about Nuclei Templates release v10.0.0! This new version includes newly added Azure Config Review templates. In this blog post, we'll discuss automating azure cloud misconfiguration review, creating custom Azure checks, and sharing results on the PDCP Cloud for review. Following our last release on AWS Cloud Security Config Review and Kubernetes Cluster Security, we decided to expand our coverage to include Azure as well. Azure is well-known for its powerful features

Nuclei & Templates

Kubernetes Cluster Security - Nuclei Templates v9.9.0 🎉

We're excited to tell you about Nuclei Templates release v9.9.0! This new version includes newly added Kubernetes Cluster Security templates. In this blog post, we'll discuss automating Kubernetes security review, creating custom k8s security checks, and sharing results on the PDCP Cloud for review. Kubernetes is often discussed for its complexity and steep learning curve. Its challenging nature has made it a frequent topic for memes in the developer community Hence, we've opted to simplify th

Nuclei & Templates

Hacking Apple - SQL Injection to Remote Code Execution

Introduction In our last blog post, we delved into the inner workings of Lucee and took a look at the source code of Masa/Mura CMS, and the vastness of the potential attack surface struck us. It became evident that investing time in understanding the code could pay off. After dedicating a week to our exploration, we stumbled upon several entry points for exploitation, including a critical SQL injection flaw that we were able to exploit within Apple's Book Travel portal. In this blog post, we a

Vulnerability Research Nuclei & Templates

Fuzzing for Unknown Vulnerabilities with Nuclei v3.2

At ProjectDiscovery, our goal is to democratize security. Nuclei, our flagship project, plays a pivotal role in achieving this by offering a fast, adaptable, and potent vulnerability scanner, powered by the innovative nuclei-templates. The launch of Nuclei v3.0 was a significant step, incorporating comprehensive capabilities for developing checks against Common Vulnerabilities and Exposures (CVEs). Earlier, with Nuclei v2.8.0, we ventured into Query Fuzzing. Table of Contents * Overv

Nuclei & Templates

Scanning Login-Protected Targets with Nuclei v3.2

With the release of Nuclei v3.2.0, we've introduced a more powerful and versatile approach to conducting authenticated scans. Previously, authentication headers were primarily included using the -H flag, a method that had its limitations. The introduction of the new -secret-file flag overcomes these challenges by accepting a YAML file capable of representing various authentication schemes. Table of Contents * Overview * Authentication Types * Secrets File * Static Auth * Dynamic

Nuclei & Templates

Hello Lucee! Let us hack Apple again?

Last year we conducted an in-depth analysis of multiple vulnerabilities within Adobe ColdFusion, we derived valuable insights, one of which revolved around CFM and CFC handling, parsing and execution. We wondered if there are any other CFML Servers. Does this ring a bell? Allow us to introduce Lucee. We've previously compromised Lucee's Admin panel, showcasing a pre-auth Remote Code Execution (RCE) on multiple Apple servers that utilized Lucee as its underlying server. Our journey led us throug

Vulnerability Research Nuclei & Templates

Nuclei Templates Monthly - Jan 2024

Summary of Releases v9.7.3, v9.7.4, and v9.7.5 This month, we've released multiple versions of Nuclei Templates that bring numerous enhancements to Nuclei users. Here are some highlighted stats from the combined releases: 🎉 157 new Templates added 🚀 20 first-time contributions 🔥 36 new CVEs added Introduction Welcome to the January 2024 edition of our Nuclei Templates Monthly Release. Kicking off the new year, the releases are packed with significant updates, including the addition of o

Nuclei & Templates

Atlassian Confluence - Remote Code Execution (CVE-2023-22527)

CVE-2023-22527 is a critical vulnerability within Atlassian's Confluence Server and Data Center. This vulnerability has the potential to permit unauthenticated attackers to inject OGNL expressions into the Confluence instance, thereby enabling the execution of arbitrary code and system commands. Technical Details Initial Analysis The CVE description provided by Atlassian made it clear that this vulnerability was automatically rendered unexploitable in version 8.5.4 due to certain incorpora

Vulnerability Research Nuclei & Templates

Nuclei & Templates

GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487)

Announcing the Nuclei Templates Community Leaderboard and Rewards!

Zimbra - Remote Command Execution (CVE-2024-45519)

Simplifying XSS Detection with Nuclei - A New Approach

Azure Config Review - Nuclei Templates v10.0.0 🎉

Kubernetes Cluster Security - Nuclei Templates v9.9.0 🎉

Hacking Apple - SQL Injection to Remote Code Execution

Fuzzing for Unknown Vulnerabilities with Nuclei v3.2

Scanning Login-Protected Targets with Nuclei v3.2

Hello Lucee! Let us hack Apple again?

Nuclei Templates Monthly - Jan 2024

Atlassian Confluence - Remote Code Execution (CVE-2023-22527)

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company