ProjectDiscovery Stories

Scanning Login-Protected Targets with Nuclei v3.2

With the release of Nuclei v3.2.0, we've introduced a more powerful and versatile approach to conducting authenticated scans. Previously, authentication headers were primarily included using the -H flag, a method that had its limitations. The introduction of the new -secret-file flag overcomes these challenges by accepting a YAML file capable of representing various authentication schemes. Table of Contents * Overview * Authentication Types * Secrets File * Static Auth * Dynamic

Nuclei & Templates

Fishing for Phishing with Nuclei Templates

This guest post is by Rishi (aka rxerium). Thanks for this post Rishi! If you have an idea for a blog post, reach out on our Discord server. Escalating Threat: The Rise of Phishing Attacks As a Cyber Risk Analyst at KYND, a cyber risk management company offering insights into the cyber posture for businesses of all sizes, I am always keeping up to date with the cyber threat landscape we face in the world today given the surge of cyber attacks following the conflicts in Russia and Ukraine and

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

We're thrilled to announce the launch of Nuclei v3.2.0. This latest version introduces a host of new features, enhancements, and bug fixes, significantly elevating the Nuclei engine's performance and capabilities. Notably, the inclusion of authentication support and advanced fuzzing support positions this release as a pivotal milestone, further building upon the foundation laid by version 3.0.0. In this blog, and a number of upcoming feature spotlights, you'll learn a lot more about all that nu

Vulnerability Management

Hello Lucee! Let us hack Apple again?

Last year we conducted an in-depth analysis of multiple vulnerabilities within Adobe ColdFusion, we derived valuable insights, one of which revolved around CFM and CFC handling, parsing and execution. We wondered if there are any other CFML Servers. Does this ring a bell? Allow us to introduce Lucee. We've previously compromised Lucee's Admin panel, showcasing a pre-auth Remote Code Execution (RCE) on multiple Apple servers that utilized Lucee as its underlying server. Our journey led us throug

Vulnerability Research Nuclei & Templates

Nuclei Templates Monthly - Jan 2024

Summary of Releases v9.7.3, v9.7.4, and v9.7.5 This month, we've released multiple versions of Nuclei Templates that bring numerous enhancements to Nuclei users. Here are some highlighted stats from the combined releases: 🎉 157 new Templates added 🚀 20 first-time contributions 🔥 36 new CVEs added Introduction Welcome to the January 2024 edition of our Nuclei Templates Monthly Release. Kicking off the new year, the releases are packed with significant updates, including the addition of o

Nuclei & Templates

Announcing cvemap from ProjectDiscovery

Security professionals are constantly on guard against cyber threats, especially given the rising number and sophistication of attacks. However, there's a less obvious, yet increasingly alarming "enemy" in cybersecurity: the surge in reported Common Vulnerabilities and Exposures (CVEs). Though CVEs are vital for identifying and discussing vulnerabilities, their rapid increase and sometimes exaggerated severity can be misleading. This "noise" in the CVE system poses a significant challenge. In s

Vulnerability Management

Atlassian Confluence - Remote Code Execution (CVE-2023-22527)

CVE-2023-22527 is a critical vulnerability within Atlassian's Confluence Server and Data Center. This vulnerability has the potential to permit unauthenticated attackers to inject OGNL expressions into the Confluence instance, thereby enabling the execution of arbitrary code and system commands. Technical Details Initial Analysis The CVE description provided by Atlassian made it clear that this vulnerability was automatically rendered unexploitable in version 8.5.4 due to certain incorpora

Vulnerability Research Nuclei & Templates

Community Spotlight: FailOpen

“I make all the mistakes, I might as well tell others before they make them. Fail is literally in my name.” -FailOpen If you’ve been on our Discord, you’ve probably seen FailOpen before. He is likely our most active user in Discord, can be seen in all of the channels, and almost always has an answer for any question. FailOpen is not only extremely present in Discord, he is also a valued contributor to our projects on GitHub. We were excited for the opportunity to chat with him just before our

Community & Open Source

Dashboard for Nuclei Results ProjectDiscovery Cloud Platform Integration

If you've been around our community for some time, you know that we've been hard at work getting ProjectDiscovery Cloud Platform ready for all of you. Our goal is to support community members using PD tools for everyone; from bug bounty hunting all the way through large enterprises who want to use cutting-edge tools to detect exploitable vulnerabilities in their external attack surface. While much of that work has been behind the scenes with design partners and others, we have released parts of

Nuclei & Templates

CrushFTP - CVE-2023-43177 Unauthenticated Remote Code Execution

CVE-2023-43177 is a critical vulnerability in CrushFTP. The vulnerability could potentially allow unauthenticated attackers with network access to the CrushFTP Instance to write files in the local file system and eventually in some versions could allow the executing of arbitrary system commands. Technical Details Based on the information shared in the original blog post at https://convergetp.com/2023/11/16/crushftp-zero-day-cve-2023-43177-discovered/, we embarked on an effort to gain a deeper

Vulnerability Research Nuclei & Templates

Nuclei Templates Monthly - November 2023 Edition

Summary of Releases v9.6.9 and v9.7.0 🎉 124 new Templates added 🚀 14 first-time contributions 🔥 31 new CVEs added Introduction This month, we've seen several high-profile CVEs impacting various technologies. Key among them is CVE-2023-46604, a significant vulnerability in Apache ActiveMQ, notable for its potential for remote code execution and widespread exploitation. CVE-2023-34039 in Aria Operations for Networks, an authentication bypass vulnerability, is another critical issue, charact

Nuclei & Templates

Community Spotlight: Geeknik

Welcome to our first community spotlight blog! We started the community spotlight recently for two major reasons: to recognize the work of some of our most active community members and to share that work with others. ProjectDiscovery is community driven, and all of our tools wouldn’t be possible without input from the community in the form of contributions, templates, and feedback. This month’s Community Spotlight is user Geeknik. You can find them on GitHub here. Geeknik has been participating

Community & Open Source

ProjectDiscovery Stories

Scanning Login-Protected Targets with Nuclei v3.2

Fishing for Phishing with Nuclei Templates

Nuclei v3.2 Release with Authenticated Scanning, Advanced Fuzzing & more

Hello Lucee! Let us hack Apple again?

Nuclei Templates Monthly - Jan 2024

Announcing cvemap from ProjectDiscovery

Atlassian Confluence - Remote Code Execution (CVE-2023-22527)

Community Spotlight: FailOpen

Dashboard for Nuclei Results ProjectDiscovery Cloud Platform Integration

CrushFTP - CVE-2023-43177 Unauthenticated Remote Code Execution

Nuclei Templates Monthly - November 2023 Edition

Community Spotlight: Geeknik

Monitor your infrastructure

Talk to sales

Platform

Open Source

Resources

Company