14 stories

Vulnerability Management

Stay informed on best practices in vulnerability management, from exploit handling to PDCP updates, with insights on identifying, prioritizing, and remediating security risks in systems and applications.

Advancing Asset Management - PDCP v0.8.9

We're excited to announce the release of version 0.8.9 of the ProjectDiscovery Cloud Platform. This update introduces significant enhancements to our asset management capabilities, focusing on asset inventory, AI-powered search, and improved user experience. Key Features in v0.8.9 Asset Inventory and Technologies The new interface for cataloging and organizing all assets along with their associated technologies in one place represents a significant advancement in asset management. Now, rega

Enhancing Asset Discovery: ProjectDiscovery Cloud Platform (v0.8.8)

We're excited to announce the release of version 0.8.8 of the ProjectDiscovery Cloud Platform. This update brings significant enhancements to our asset discovery capabilities, introduces new features for Basic Tier (Free) users, and resolves several critical issues. Our primary focus remains on improving the visibility and analysis of discovered assets and refining the insights available to our users. Empowering Basic Tier (Free) Users Our mission at ProjectDiscovery is to make advanced secur

Vulnerability Management

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

We're thrilled to announce the launch of Nuclei v3.2.0. This latest version introduces a host of new features, enhancements, and bug fixes, significantly elevating the Nuclei engine's performance and capabilities. Notably, the inclusion of authentication support and advanced fuzzing support positions this release as a pivotal milestone, further building upon the foundation laid by version 3.0.0. In this blog, and a number of upcoming feature spotlights, you'll learn a lot more about all that nu

Vulnerability Management

Announcing cvemap from ProjectDiscovery

Security professionals are constantly on guard against cyber threats, especially given the rising number and sophistication of attacks. However, there's a less obvious, yet increasingly alarming "enemy" in cybersecurity: the surge in reported Common Vulnerabilities and Exposures (CVEs). Though CVEs are vital for identifying and discussing vulnerabilities, their rapid increase and sometimes exaggerated severity can be misleading. This "noise" in the CVE system poses a significant challenge. In s

Vulnerability Management

If Everything is a 9.8, Then Nothing Is

In the age of digitization, there's an imperative for companies, developers, and users to prioritize security. The Common Vulnerabilities and Exposures (CVE) system, and its associated CVSS scores, have played a pivotal role in helping the industry identify, categorize, and react to security issues. However, when every potential flaw is rated with a sky-high CVSS score, or when bugs are reported as CVEs even when they lack genuine exploitability, we find ourselves grappling with an alarming dilu

Vulnerability Management

CVE-2023-36934 Analysis: MOVEit Transfer SQL Injection

Introduction At ProjectDiscovery, our focus is on enhancing our open-source solution, Nuclei, by incorporating templates for trending CVEs. Our collaborative efforts involve constant additions of templates by the open-source community, internal template and research team to stay updated on emerging exploits. One such notable case involves MOVEit Transfer, a widely utilized web application, which recently came under scrutiny due to a series of SQL injection (SQLi) vulnerabilities. These vulnera

Vulnerability Management Nuclei & Templates

How to run Nuclei & other ProjectDiscovery tools in Docker

Some of the most popular tools by ProjectDiscovery are Nuclei (template-based vulnerability scanner), HTTPx (multipurpose HTTP toolkit), and Subfinder (subdomain enumeration and discovery tool). While the installation process is typically very straightforward for ProjectDiscovery tools, one can often encounter some difficulty setting up a proper environment to run the tool, especially when performing an assessment on a temporary VPS or client-provided system. In instances like this, running too

Nuclei & Templates Vulnerability Management

Introducing Alterx: Efficient Active Subdomain Enumeration with Patterns

What is Alterx ? Alterx is a Fast and Customizable subdomain wordlist generator using patterns. alterx fits in the active subdomain enumeration pipeline, which involves creating a wordlist using permutations of passive subdomain enumeration results. Instead of hardcoding patterns in the tool itself, alterx uses a set of patterns that users can customize. This makes alterx more efficient and effective than other existing tools. To understand alterx better, we need to know what active subdomain e

Vulnerability Management

Implementing Nuclei into your Bitbucket CI/CD Pipeline for Scanning Live Web Applications

Security is a crucial factor for both small and large enterprises. This has led to the evolution of DevOps into DevSecOps, which integrates security at an internal level. As we have discussed in previous blogs, it is important to implement security within your DevOps cycle to ensure that it becomes DevSecOps. This approach introduces security at an early phase and helps mitigate multiple misconfigurations early on. In this blog, we will explore how to use Nuclei, a powerful open-source tool for

Nuclei & Templates Vulnerability Management

Implementing Nuclei into your GitLab CI/CD Pipeline for Scanning Live Web Applications

Security is a fundamental requirement for businesses of all sizes. In recent years, DevOps has evolved into DevSecOps, which emphasizes the integration of security at every stage of the development process. As previously discussed, it is critical to incorporate security into the DevOps cycle to detect and mitigate potential security risks early on. This approach enables organizations to identify and address security vulnerabilities and misconfigurations before they escalate into significant issu

Nuclei & Templates Vulnerability Management

Implementing Nuclei into your GitHub CI/CD pipelines

It is critical that an organisation secures all of their assets along their entire software supply chain. For instance, in a DevOps lifecycle, as a developer, ensuring the security and stability of your code is crucial. One effective way to do this is by implementing automated security testing as part of your continuous integration and deployment (CI/CD) pipeline. In this blog, we will explore how to use Nuclei, a powerful open-source tool for scanning web applications, in your GitHub CI/CD pip

Nuclei & Templates Vulnerability Management

Interactsh v1.0.0

Interactsh v1.0.0 brings more stability, new protocols support, and a slew of other improvements and security fixes. Server Pool Support + random selection With new vulnerabilities being released recently which relied on DNS interactions (log4j), interactsh servers started receiving lot more load from nuclei scans than they could withstand. With the new interactsh release, the client has been modified to support a list of interactsh servers from which a server is randomly selected for use. T

Vulnerability Management

Vulnerability Management

Advancing Asset Management - PDCP v0.8.9

Enhancing Asset Discovery: ProjectDiscovery Cloud Platform (v0.8.8)

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

Announcing cvemap from ProjectDiscovery

If Everything is a 9.8, Then Nothing Is

CVE-2023-36934 Analysis: MOVEit Transfer SQL Injection

How to run Nuclei & other ProjectDiscovery tools in Docker

Introducing Alterx: Efficient Active Subdomain Enumeration with Patterns

Implementing Nuclei into your Bitbucket CI/CD Pipeline for Scanning Live Web Applications

Implementing Nuclei into your GitLab CI/CD Pipeline for Scanning Live Web Applications

Implementing Nuclei into your GitHub CI/CD pipelines

Interactsh v1.0.0

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company