Nuclei

Nuclei is an open source vulnerability scanner built by ProjectDiscovery. It sends requests to targets and checks the responses against templates that describe known issues.

Each template describes one check, such as an exposed admin panel, a known misconfiguration or a vulnerable version. Because checks live in templates, the scanner can cover new issues by adding or updating templates rather than changing the program. Scans can be pointed at web applications and other network services.

• Runs checks from a library of community templates
• Templates are plain YAML files
• Lets you write your own templates
• Works in scripts and automated pipelines
• Runs from the command line

Nuclei suits security engineers, penetration testers and DevOps teams who want repeatable scans. It is also used by people who need to check many targets with the same set of checks.

Nuclei is open source under the MIT license, and it is free to use. Results depend on which templates you run, so pick templates that match your targets. Only scan systems you have permission to test.