Owner
projectdiscovery
43 indexed repositories · View on GitHub
-
nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabl...
Go · 32427 stars
-
katana
A next-generation crawling and spidering framework.
Go · 17764 stars
-
subfinder
Fast passive subdomain enumeration tool.
Go · 14679 stars
-
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
JavaScript · 13247 stars
-
httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
Go · 10555 stars
-
naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for att...
Go · 6335 stars
-
interactsh
An OOB interaction gathering server and client library
Go · 4608 stars
-
uncover
Quickly discover exposed hosts on the internet using multiple search engines.
Go · 3097 stars
-
proxify
A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.
Go · 3076 stars
-
dnsx
dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.
Go · 2917 stars
-
vulnx
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
Go · 2702 stars
-
notify
Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a ...
Go · 1620 stars
-
public-bugbounty-programs
Community curated list of public bug bounty and responsible disclosure programs.
Go · 1355 stars
-
nuclei-burp-plugin
Nuclei plugin for BurpSuite
Java · 1353 stars
-
mapcidr
Utility program to perform multiple operations for a given subnet/CIDR ranges.
Go · 1240 stars
-
pdtm
ProjectDiscovery's Open Source Tool Manager
Go · 1170 stars
-
tlsx
Fast and configurable TLS grabber focused on TLS based data collection.
Go · 1150 stars
-
asnmap
Go CLI and Library for quickly mapping organization network ranges using ASN information.
Go · 1145 stars
-
wappalyzergo
A high performance go implementation of Wappalyzer Technology Detection Library
Go · 1125 stars
-
cloudlist
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
Go · 1058 stars
- 23 more repositories live on View on GitHub
Issues somebody may already be working on are listed last. List everything by date
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
projectdiscovery/uncover#770 ·
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 66/100
projectdiscovery/notify#566 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 66/100
projectdiscovery/uncover#769 ·
Maintainers usually reply within 1 day
-
cut CI runtimeMay be free again @dogancanbakir claimed this 32 days ago, and no pull request is open. OpenType: Maintenance
projectdiscovery/nuclei#7803 · 1 assignee ·
Maintainers usually reply within 3 days
-
apply host backoff to non-http protocolsMay be free again @dogancanbakir claimed this 34 days ago, and no pull request is open. OpenType: Enhancement
projectdiscovery/nuclei#7794 · 1 assignee ·
Maintainers usually reply within 3 days
-
Add AI-suggested words for permutationsMay be free again @dogancanbakir claimed this 38 days ago, and no pull request is open. OpenType: Enhancement
projectdiscovery/alterx#298 · 1 assignee ·
-
additional code review from portswigger - nice to haveMay be free again @dogancanbakir claimed this 40 days ago, and no pull request is open. Open
projectdiscovery/nuclei-burp-plugin#166 · 1 assignee ·
-
Scan log has no record of what a chunk was asked to doMay be free again @ShubhamRasal claimed this 53 days ago, and no pull request is open. Open
projectdiscovery/pd-agent#171 · 1 assignee ·
-
Allow operators to declare agent subnets instead of relying on auto-discoveryMay be free again @ShubhamRasal claimed this 54 days ago, and no pull request is open. OpenType: Enhancement
projectdiscovery/pd-agent#169 · 1 assignee ·
-
[BUG] ThreadSafeNucleiEngine: live heap scales with concurrent ExecuteNucleiWithOptsCtx calls (compiled template store rebuilt per call, DoNotCache)May be free again @Mzack9999 claimed this 59 days ago, and no pull request is open. Open
projectdiscovery/nuclei#7686 · 1 comment · 1 assignee ·
Maintainers usually reply within 3 days
-
[BUG] Nuclei template signature bypass: mtime-only metadata cache runs unsigned code templatesMay be free again @dogancanbakir claimed this 69 days ago, and no pull request is open. OpenType: Bug
projectdiscovery/nuclei#7663 · 3 comments · 1 assignee ·
Maintainers usually reply within 3 days
-
[ENHANCEMENT] Expand AWS cloud security template coverageMay be free again @theamanrawat claimed this 84 days ago, and no pull request is open. Open
projectdiscovery/nuclei-templates#16807 · 1 assignee ·
Maintainers usually reply within 1 day
-
Elasticsearch ES|QL EXTERNAL Datasource SSRF to Cloud Metadata Credential DisclosureMay be free again @theamanrawat claimed this 91 days ago, and no pull request is open. Opentemplate-contribution
projectdiscovery/nuclei-templates#16724 · 1 assignee ·
Maintainers usually reply within 1 day
-
Type: Bug
Difficulty 5/5 Over a week Newbie friendliness 25/100
projectdiscovery/nuclei#7630 · 1 comment ·
Maintainers usually reply within 3 days
-
[FALSE-POSITIVE] CVE-2024-5333May be free again @ritikchaddha claimed this 100 days ago, and no pull request is open. Openfalse-positive
projectdiscovery/nuclei-templates#16655 · 2 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
[nuclei-template] Add Firebase Authentication fingerprint templateMay be free again @ritikchaddha claimed this 102 days ago, and no pull request is open. Open
projectdiscovery/nuclei-templates#16625 · 1 comment · 1 assignee ·
Maintainers usually reply within 1 day
-
Unauthenticated RCE in GitLabPossibly taken @Akokonunes claimed this 1 day ago. Opentemplate-requests
projectdiscovery/nuclei-templates#17619 · 1 comment · 1 assignee ·
Maintainers usually reply within 1 day
-
Headerless responses block while skipping duplicate status linesPossibly taken @mynhe claimed this 1 day ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 73/100
projectdiscovery/rawhttp#554 ·
-
Document template signing and the # digest line in CONTRIBUTING.mdPossibly taken @ritikchaddha claimed this 1 day ago. Open
projectdiscovery/nuclei-templates#17615 · 1 assignee ·
Maintainers usually reply within 1 day
-
[FALSE-POSITIVE] dell-idrac9-detect matches Apple AirPlay receivers (macOS and other AirPlay devices)Possibly taken @theamanrawat claimed this 1 day ago. Open
projectdiscovery/nuclei-templates#17611 · 1 assignee ·
Maintainers usually reply within 1 day
-
DNS interactions for HTTPS, ANY, CAA, SRV and other query types are stored with an empty q-typePossibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 1/5 1-3 hours Newbie friendliness 35/100
projectdiscovery/interactsh#1503 ·
Maintainers usually reply within 1 day
-
headless never visits links inside hidden dropdown menusPossibly taken @dogancanbakir claimed this 2 days ago. OpenType: Bug
projectdiscovery/katana#1960 · 1 assignee ·
Maintainers usually reply within 1 day
-
hybrid times out on pages that never fire first meaningful paintPossibly taken @dogancanbakir claimed this 2 days ago. OpenType: Bug
projectdiscovery/katana#1959 · 1 assignee ·
Maintainers usually reply within 1 day
-
absolute URLs with a port are mangled by body endpoint extractionPossibly taken @dogancanbakir claimed this 2 days ago. OpenType: Bug
projectdiscovery/katana#1958 · 1 assignee ·
Maintainers usually reply within 1 day
-
JSON-escaped URLs are extracted with a literal backslashPossibly taken @dogancanbakir claimed this 2 days ago. OpenType: Bug
projectdiscovery/katana#1957 · 1 assignee ·
Maintainers usually reply within 1 day
-
headless engine never calls OnResultPossibly taken @dogancanbakir claimed this 2 days ago. OpenType: Bug
projectdiscovery/katana#1956 · 1 assignee ·
Maintainers usually reply within 1 day
-
-ob drops endpoints found in response bodiesPossibly taken @dogancanbakir claimed this 2 days ago. OpenType: Bug
projectdiscovery/katana#1955 · 1 assignee ·
Maintainers usually reply within 1 day
-
MX, NS and SOA answers for names under a second -domain point to the first domain's serversPossibly taken @dwisiswant0 claimed this 2 days ago. Open
projectdiscovery/interactsh#1501 · 1 assignee ·
Maintainers usually reply within 1 day
-
SOCKS proxy connects to the tunnel host and to link-local addressesPossibly taken @Mzack9999 claimed this 2 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 35/100
projectdiscovery/tunnelx#26 ·
-
Update removes the installed binary when the download failsPossibly taken @Mzack9999 claimed this 2 days ago. OpenType: Bug
Difficulty 3/5 1-2 days Newbie friendliness 25/100
projectdiscovery/pdtm#461 ·
-
Tool names with path characters are used as file pathsPossibly taken @Mzack9999 claimed this 2 days ago. OpenType: Bug
Difficulty 3/5 1-2 days Newbie friendliness 25/100
projectdiscovery/pdtm#459 ·
-
Custom provider sends invalid JSON when the input has quotesPossibly taken A pull request linked to this issue is open or already merged. OpenType: Bug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
projectdiscovery/notify#569 ·
-
Output file names use the Host header value as it isPossibly taken A pull request linked to this issue is open or already merged. OpenType: Bug
Difficulty 2/5 1-3 hours Newbie friendliness 67/100
projectdiscovery/proxify#774 ·
-
Empty secret is accepted for shared bucketsPossibly taken A pull request linked to this issue is open or already merged. OpenType: Bug
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
projectdiscovery/interactsh#1499 ·
Maintainers usually reply within 1 day
-
Server keeps very large interaction bodies in memoryPossibly taken A pull request linked to this issue is open or already merged. OpenType: Bug
Difficulty 3/5 1-2 days Newbie friendliness 56/100
projectdiscovery/interactsh#1497 ·
Maintainers usually reply within 1 day
-
Results from sources can contain invalid host namesPossibly taken @Mzack9999 claimed this 2 days ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
projectdiscovery/subfinder#1983 ·
Maintainers usually reply within 1 day
-
Custom headers are sent on redirects to out-of-scope hostsPossibly taken @Mzack9999 claimed this 2 days ago. Open
Difficulty 3/5 1-2 days Newbie friendliness 66/100
projectdiscovery/katana#1953 ·
Maintainers usually reply within 1 day
-
Custom cookies and auth headers are kept on redirects to another hostPossibly taken @Mzack9999 claimed this 2 days ago. OpenType: Bug
Difficulty 3/5 1-2 days Newbie friendliness 55/100
projectdiscovery/httpx#2696 ·
Maintainers usually reply within 3 days
-
Screenshot requests do not follow the network policyPossibly taken @Mzack9999 claimed this 2 days ago. OpenType: Bug
Difficulty 3/5 1-2 days Newbie friendliness 45/100
projectdiscovery/httpx#2694 ·
Maintainers usually reply within 3 days
-
Global changes in one flow template stay in the shared JS runtimePossibly taken @Mzack9999 claimed this 2 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 48/100
projectdiscovery/nuclei#7986 ·
Maintainers usually reply within 3 days
-
postgres JS module uses local PG environment variables and .pgpassPossibly taken @Mzack9999 claimed this 2 days ago. Open
Difficulty 3/5 1-2 days Newbie friendliness 65/100
projectdiscovery/nuclei#7984 ·
Maintainers usually reply within 3 days
-
Headless host check misses some IPv6 address formsPossibly taken @Mzack9999 claimed this 2 days ago. Open
Difficulty 3/5 1-2 days Newbie friendliness 67/100
projectdiscovery/nuclei#7982 ·
Maintainers usually reply within 3 days
-
Self-update installs the asset when the checksum is missingPossibly taken @Mzack9999 claimed this 2 days ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
projectdiscovery/utils#811 ·
Maintainers usually reply within 1 day
-
[BUG] Spell Check fails on dev on a commit hash in SECURITY_CONTEXT.mdPossibly taken @kamilikamil claimed this 3 days ago. Open
Difficulty 1/5 Under an hour Newbie friendliness 25/100
projectdiscovery/nuclei#7978 ·
Maintainers usually reply within 3 days
-
[BUG] Request bodies of large templates are all held in memory at oncePossibly taken @kamilikamil claimed this 3 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 35/100
projectdiscovery/nuclei#7976 ·
Maintainers usually reply within 3 days
-
LDAP interactions never show in the web clientPossibly taken @nashcontrol claimed this 98 days ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
-
[BUG] Workflow steps selected by `tags:` never run their subtemplates when a template filter is setPossibly taken @dwisiswant0 claimed this 3 days ago. Open
projectdiscovery/nuclei#7966 · 1 assignee ·
Maintainers usually reply within 3 days
-
[BUG] CVE-2026-109618 active crash probes exhaust scan-worker memoryPossibly taken @DhiyaneshGeek claimed this 4 days ago. Open
projectdiscovery/nuclei-templates#17597 · 1 assignee ·
Maintainers usually reply within 1 day
-
OUI update workflow fails on releasePossibly taken @dogancanbakir claimed this 4 days ago. OpenType: Bug
projectdiscovery/naabu#1804 · 1 assignee ·
Maintainers usually reply within 4 days
-
data race on BrowserPage.Page in the headless crawl loopPossibly taken @dogancanbakir claimed this 5 days ago. OpenType: Bug
projectdiscovery/katana#1946 · 1 assignee ·
Maintainers usually reply within 1 day
Showing the newest 100
This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.