ProjectDiscovery Stories

We are going fulltime

Most of you probably don't know, but ProjectDiscovery has been maintained in free-time, and we have been doing it so for the past 2 years. It was initially started when we met through the subfinder repository [https://github.com/projectdiscovery/subfinder] where we exchanged our ideas and started creating solutions out of a passion for open-source. We still remember when we released our first project, we were flipping out after getting the first 100 stars. There are so many memories around this

Nuclei - Fuzz all the things

The latest nuclei release has been a pretty big one with lots of new features added as well as bug fixes to existing code base. Significant new additions have been made in fuzzing as well templating capabilities of nuclei. Non-RFC Compliant Requests Earlier versions of nuclei used the base Go HTTP library. The requests were strictly validated and non-spec compliant requests were dropped. The new release comes with an unsafe attribute using our rawhttp library which allows sending any kind of

Nuclei & Templates

Nuclei Unleashed - Quickly write complex exploits

If you’re reading about nuclei for the first time, we suggest you start here at this blog post which introduces the basic idea behind nuclei. Stateful Dynamic requests One of the major limitation with previous versions of nuclei was the inability to perform multi-step or chained requests making it impossible to use it in a process where some dynamic state needed to be maintained or session needed to be created. With the latest release, you can very easily create such complex workflows with

Nuclei & Templates

Introducing Chaos Bug bounty recon data API

We’re proud to announce release of our Chaos Bug bounty recon data API today. This API will allow hackers to get instant data on targets of their choice without running any additional tools at just single hit of request. Goals behind the project Reconnaissance is complex, it requires a proper setup and not everyone is equally good at it. People are skilled differently, some are amazing at looking at Web Attack Surfaces, some prefer to dive deep into logic bugs. Being good at recon requires some

Learning & Automation Attack Surface Management

Community-powered scanning with Nuclei

Nuclei is a new breed of scanners, that moves away from the traditional model of vulnerability scanners allowing complete extensibility with a very simple and easy to use templating syntax. Introduction At its basic level, Nuclei is a scanner - it sends HTTP/DNS requests and checks for some response to discover anomalies in the target. It works on top of YAML files allowing the users to define the behaviour they are looking for in a readable format. Users can easily define Matchers which che

Nuclei & Templates

Reconnaissance - The way it should be

Last year, we were sitting and discussing over coffee how the current reconnaissance techniques we used were outdated and cumbersome. We decided to do some research and improve the overall process. As a result, we set out to create a dataset of DNS Names. The service we created used multiple steps to gather all the assets for a given Domain Name. But there was a major problem with this approach - the system had lesser results than many public alternatives, it wasn’t scalable so the system couldn

Attack Surface Management

ProjectDiscovery Stories

We are going fulltime

Nuclei - Fuzz all the things

Nuclei Unleashed - Quickly write complex exploits

Introducing Chaos Bug bounty recon data API

Community-powered scanning with Nuclei

Reconnaissance - The way it should be

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company