nuclei-templates 开源项目推荐（119 个）

projectdiscovery /nuclei-templates

社区为核心引擎策划了查找安全漏洞的模板列表。

0xKayala /NucleiFuzzer

NucleiFuzzer是一款强大的自动化工具，可利用高级扫描和URL列举技术有效检测Web应用程序漏洞，包括XSS、SQLi、SSRF和Open重定向

0x727 /FingerprintHub

侦查守卫(ObserverWard)的指纹库

topscoder /nuclei-wordfence-cve

75 k + WordPress核心模板，每天从Wordfence智能过滤器更新，通过严重性/标签/CVE和扫描在一行中。🚀🔒

fit2cloud /riskscanner

RiskScanner 是开源的多云安全合规扫描平台，基于 Cloud Custodian 和 Nuclei 引擎，实现对主流公(私)有云资源的安全合规扫描和漏洞扫描。

xm1k3 /cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

justakazh /sicat

实用漏洞利用查找器

projectdiscovery /nuclei-ai-extension

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

edoardottt /missing-cve-nuclei-templates

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

AiGptCode /AiGPT-WordPress-Exploitation-Framework

AiGPT起源于CVE-2024-27956的WP自动CSV注入概念，但已被完全重构为一个多向量、未认证的WordPress利用引擎。它现在通过13个真实世界的 CVE 链式链接创建管理员账户或直接发布网页外壳，然后自动向活跃主题注入反向shell

CharanRayudu /Custom-Nuclei-Templates

该项目在 GitHub 上没有填写描述

0xAwali /Blind-SSRF

Nuclei Templates to reproduce Cracking the lens's Research

projectdiscovery /nuclei-templates-ai

Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage 👾

0xKayala /Custom-Nuclei-Templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

adampielak /nuclei-templates

All Nuclei Templates

KaanBicaklar /nuclei-MonaCodeScanner

Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 issues in code. Ideal for SAST and CI/CD integration.

osintbrazuca /osint-brazuca-nuclei-templates

Repositório criado com intuito de reunir templates da ferramenta Nuclei dentro do contexto Brasil

MorDavid /ExternalAttacker-MCP

A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.

nuts7 /CVE-2023-27372

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

DeathShotXD /Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker