nuclei

Intermediate to Advanced

Actively maintained

Template-driven scanning for known vulnerabilities, exposures, and misconfigurations

https://github.com/projectdiscovery/nuclei

Installation

go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest

# Fetch/refresh the community templates
nuclei -update-templates

Usage

Basic Usage

# Scan a list of live hosts
nuclei -list live.txt

# Start with high-signal findings only
nuclei -list live.txt -severity critical,high

# Restrict to a category of checks
nuclei -list live.txt -tags exposure,misconfiguration
nuclei -list live.txt -tags cve -severity critical

# Be respectful: cap concurrency and request rate
nuclei -list live.txt -rate-limit 50 -concurrency 10

Basic Usage

# End-to-end: discover -> probe -> scan
subfinder -d example.com -silent \
  | httpx -silent \
  | nuclei -severity critical,high -o findings.txt

# JSONL output for correlation and ticketing
nuclei -list live.txt -jsonl -o findings.jsonl
jq -r '[.info.severity, .info.name, .host] | @tsv' findings.jsonl | sort

# Run only your own templates
nuclei -list live.txt -t ./custom-templates/