ProjectDiscovery Stories

AWS Cloud Security Config Review using Nuclei Templates

We're excited to tell you about Nuclei Templates release v9.8.5! This new version includes newly added AWS cloud review templates. In this blog post, we'll discuss automating cloud misconfiguration review, creating custom AWS checks, and sharing results on the PDCP Cloud for review. The AWS Cloud Security Configuration Review, also referred to as AWS Cloud Config Review or AWS Cloud Audit in pentesting circles, is a vital procedure for assessing the security posture of Amazon Web Services (AWS)

Counting Down to Hardly Strictly Security

This week sees the launch of our very first virtual event for the cybersecurity community. Hardly Strictly Security begins on April 25th at 8am PT (check how this works out in your own time zone here), and runs for the entire day, packed with thought-provoking and insightful talks from some of the leading minds in the cybersecurity field. Whether you’re brand new to the industry and don’t know where to start, or you’re looking to the future of AI’s relationship with security tooling and open so

Urgent Call to Action: Restoring the National Vulnerability Database

The National Vulnerability Database (NVD), managed by the National Institute of Standards and Technology (NIST), plays a pivotal role in cybersecurity. It is not just a repository but the backbone of vulnerability management across the globe. However, recent disruptions have raised concerns about the reliability and responsiveness of the NVD. Last week, over 50 distinguished cybersecurity professionals united to pen an open letter to Congress and Secretary of Commerce Gina Raimondo, highlightin

Nuclei Templates v9.8.0: A Leap Forward in Network Security Scanning

Our nuclei-templates library boasts over 8,000 templates, encompassing more than 7,200 templates for web applications. This collection includes 2,200 web-related CVEs and features more than 850 templates aimed at identifying diverse web vulnerabilities. With many active community contributions, we're continuously updating our database with the latest web CVEs and vulnerabilities. We're also expanding our templates to cover network vulnerabilities, aiming for the most thorough vulnerability scann

March 2024 Newsletter

The latest release of Nuclei, v3.2, introduces significant updates aimed at enhancing the security scanning capabilities of the Nuclei engine.

Announcements

Fuzzing for Unknown Vulnerabilities with Nuclei v3.2

At ProjectDiscovery, our goal is to democratize security. Nuclei, our flagship project, plays a pivotal role in achieving this by offering a fast, adaptable, and potent vulnerability scanner, powered by the innovative nuclei-templates. The launch of Nuclei v3.0 was a significant step, incorporating comprehensive capabilities for developing checks against Common Vulnerabilities and Exposures (CVEs). Earlier, with Nuclei v2.8.0, we ventured into Query Fuzzing. Table of Contents * Overv

Nuclei & Templates

Scanning Login-Protected Targets with Nuclei v3.2

With the release of Nuclei v3.2.0, we've introduced a more powerful and versatile approach to conducting authenticated scans. Previously, authentication headers were primarily included using the -H flag, a method that had its limitations. The introduction of the new -secret-file flag overcomes these challenges by accepting a YAML file capable of representing various authentication schemes. Table of Contents * Overview * Authentication Types * Secrets File * Static Auth * Dynamic

Nuclei & Templates

Fishing for Phishing with Nuclei Templates

This guest post is by Rishi (aka rxerium). Thanks for this post Rishi! If you have an idea for a blog post, reach out on our Discord server. Escalating Threat: The Rise of Phishing Attacks As a Cyber Risk Analyst at KYND, a cyber risk management company offering insights into the cyber posture for businesses of all sizes, I am always keeping up to date with the cyber threat landscape we face in the world today given the surge of cyber attacks following the conflicts in Russia and Ukraine and

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

We're thrilled to announce the launch of Nuclei v3.2.0. This latest version introduces a host of new features, enhancements, and bug fixes, significantly elevating the Nuclei engine's performance and capabilities. Notably, the inclusion of authentication support and advanced fuzzing support positions this release as a pivotal milestone, further building upon the foundation laid by version 3.0.0. In this blog, and a number of upcoming feature spotlights, you'll learn a lot more about all that nu

Vulnerability Management

Hello Lucee! Let us hack Apple again?

Last year we conducted an in-depth analysis of multiple vulnerabilities within Adobe ColdFusion, we derived valuable insights, one of which revolved around CFM and CFC handling, parsing and execution. We wondered if there are any other CFML Servers. Does this ring a bell? Allow us to introduce Lucee. We've previously compromised Lucee's Admin panel, showcasing a pre-auth Remote Code Execution (RCE) on multiple Apple servers that utilized Lucee as its underlying server. Our journey led us throug

Vulnerability Research Nuclei & Templates

Nuclei Templates Monthly - Jan 2024

Summary of Releases v9.7.3, v9.7.4, and v9.7.5 This month, we've released multiple versions of Nuclei Templates that bring numerous enhancements to Nuclei users. Here are some highlighted stats from the combined releases: 🎉 157 new Templates added 🚀 20 first-time contributions 🔥 36 new CVEs added Introduction Welcome to the January 2024 edition of our Nuclei Templates Monthly Release. Kicking off the new year, the releases are packed with significant updates, including the addition of o

Nuclei & Templates

Announcing cvemap from ProjectDiscovery

Security professionals are constantly on guard against cyber threats, especially given the rising number and sophistication of attacks. However, there's a less obvious, yet increasingly alarming "enemy" in cybersecurity: the surge in reported Common Vulnerabilities and Exposures (CVEs). Though CVEs are vital for identifying and discussing vulnerabilities, their rapid increase and sometimes exaggerated severity can be misleading. This "noise" in the CVE system poses a significant challenge. In s

Vulnerability Management

ProjectDiscovery Stories

AWS Cloud Security Config Review using Nuclei Templates

Counting Down to Hardly Strictly Security

Urgent Call to Action: Restoring the National Vulnerability Database

Nuclei Templates v9.8.0: A Leap Forward in Network Security Scanning

March 2024 Newsletter

Fuzzing for Unknown Vulnerabilities with Nuclei v3.2

Scanning Login-Protected Targets with Nuclei v3.2

Fishing for Phishing with Nuclei Templates

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

Hello Lucee! Let us hack Apple again?

Nuclei Templates Monthly - Jan 2024

Announcing cvemap from ProjectDiscovery

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company