projectdiscovery

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the...

A next-generation crawling and spidering framework.

Fast passive subdomain enumeration tool.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

An OOB interaction gathering server and client library

Quickly discover exposed hosts on the internet using multiple search engines.

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

Community curated list of public bug bounty and responsible disclosure programs.

Nuclei plugin for BurpSuite

Utility program to perform multiple operations for a given subnet/CIDR ranges.

ProjectDiscovery's Open Source Tool Manager

Fast and configurable TLS grabber focused on TLS based data collection.

Go CLI and Library for quickly mapping organization network ranges using ASN information.

A high performance go implementation of Wappalyzer Technology Detection Library

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Fast and customizable subdomain wordlist generator using DSL

A utility to detect various technology for a given IP address.

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Go client to communicate with Chaos DB API.

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

Go alternative of python SimpleHTTPServer

Community curated list of search queries for various products across multiple search engines.

A streamlined tool for discovering private TLDs for security research.

AIx is a cli tool to interact with Large Language Models (LLM) APIs.

Vulnerability Scan with Nuclei

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

Web dashboard for Interactsh client

Malicious package & supply-chain intelligence

openrisk is a tool that generates a risk score based on the results of a Nuclei scan.

Raw HTTP client in Go for complete request control and customization.

Package retryablehttp provides a familiar HTTP client interface with automatic retries and exponential backoff

Retryable DNS client in Go

Helper Libraries

Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀

DSL engine

Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage 👾

Curated list of categorized User Agents

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

A simple layer for leveled logging in go

A go flag wrapper with convenience helpers

Nuclei documentation

A fingerprint generation helper for nuclei network templates

IP/FQDN data structure helper with randomization of hosts and ports based on masscan internal logic

Dialer with DNS Cache + Dial History

A Golang blocking rate limit implementation

Hybrid memory/disk map

Tiny embeddable dns server