Nuclei is a fast, customizable, YAML-driven vulnerability scanner designed for accurate and scalable security testing with minimal false positives.
🧛🏻 Nuclei is a fast Customizable SSL scanner powered by Offensive Community, built on .NET's DLR based DSL. Zero shot vulnerability discovery.
Nuclei is primarily used by security professionals, pentesters, and DevSecOps teams to automate vulnerability detection across various protocols and integrate security testing into CI/CD pipelines. It enables users to create and customize detection templates that simulate real-world attack scenarios, improving accuracy and reducing false positives.
Nuclei is primarily intended as a standalone CLI tool; running it as a service may introduce security risks and should be done with caution and additional security controls. The project is under active development with potential breaking changes, so reviewing changelogs before updates is recommended.
Follow the official installation guide at https://docs.projectdiscovery.io/tools/nuclei/install?utm_source=github&utm_medium=web&utm_campaign=nuclei_readme
Install Nuclei CLI on your local machine
Optionally sign up for the free cloud tier at https://cloud.projectdiscovery.io/sign-up to store and visualize findingsnuclei -t <template.yaml> -target <target_url>
Run a scan using a specific YAML template against the target URL
nuclei -update-templates
Update the local repository of vulnerability templates
nuclei -list-templates
List all available vulnerability templates