projectdiscovery/nuclei

More in security

Ranked by stars gained in the last 24 hours.

• 

  ifixai-ai/iFixAi

  Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.

  Python35k+1k/dsecurity
• 

  YuJunZhiXue/dsh-purge

  DeepSeek Harness 破甲：让所有模型都能破甲，不同模型可换不同提示词；默认提示词面向国模「小码酱」。Jailbreak for every model — swap prompts per model. 求 Star 收藏 ⭐ 如要二开，请查看署名要求部分

  JavaScript11k+1k/d11% growthsecurity
• 

  DUNHKpcc/Claude-Guardian

  Claude Guardian is an all-in-one Claude account safety and risk prevention skill.Claude防封实战 It intelligently assesses your device, account history, network environment, and payment options, then provides personalized guidance for local, VPS, or virtual machine setups.

  Python975+602/d161% growthsecurityagent-skills
• 

  NVIDIA/SkillSpector

  Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

  Python22.7k+565/dsecurity
• 

  AhmadHassan-BTed/SilentSniffer

  A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for browser-based intelligence gathering, hardware fingerprinting, and security research.

  JavaScript4.4k+488/d12% growthsecurity
• 

  usestrix/strix

  Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

  Python72.3k+470/dsecurity
• 

  beenuar/AiSOC

  Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

  Python4.4k+428/d12% growthsecurity
• 

  DrWhax/unfairplay

  Decrypt IPA's on MacOS

  Go650+413/d645% growthsecurity

Star history

Weekly, from GitHub's stargazers history, over a 30-day window.

1. 4 Dec 2025Hacker News threadread the thread
2. 23 Sep 2026First seen on GitHub Trending · rank 18· 293 days later
3. 30 Sep 2026Entered our index· 7 days later

Stars: 31.6k when it entered our index, 32.3k on the last capture we hold (25 Oct 2026), so +674 in that span. That span is our own measurement window, not a claim about what happened before it.

Its most recent thread before Trending is more than 90 days older than that day, so the two are not the same story and we do not claim lead time.

We hold 4 mentions for it, the oldest dated 20 Jan 2021 and the first written into our database on 24 Oct 2026. Thread dates come from the source, not from when we fetched them.

Shares topics with

Repositories that share at least two topics with this one: most shared topics first, then stars gained in the last 24 hours.

• 

  vigolium/vigolium

  Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

  Shared: dast, hacktoberfest, security, security-scanner +1 more

  Go1.1k+2/dsecurity
• 

  future-architect/vuls

  Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

  Shared: security, security-scanner, vulnerability-assessment, vulnerability-detection +1 more

  Go12.3k+5/dsecurity
• 

  vmfunc/sif

  the blazing-fast pentesting suite.

  Shared: attack-surface, cve-scanner, hacktoberfest, security +1 more

  Go5790/dsecurity
• 

  zaproxy/zaproxy

  The ZAP by Checkmarx Core project

  Shared: dast, hacktoberfest, security, security-scanner

  Java16k+10/d0% growthsecurity
• 

  CERT-Polska/Artemis

  A modular vulnerability scanner with automatic report generation capabilities.

  Shared: security, security-scanner, vulnerability-detection, vulnerability-scanner

  Python1.2k+1/dsecurity

4 items so far: 4 on Hacker News, 0 on Reddit; 0 in the last 7 days, 0 in the last 30. Checked by the pipeline, which re-scans trending repositories every few hours. Last check 2 days ago.

• Tunnl.ggHNcomment · by patricklorio · 4 Dec 2025

  I run playit.gg. Abuse is a big problem on our free tier. I’d get https://github.com/projectdiscovery/nuclei setup to scan your online endpoints and autoban detections of c2 servers.

• Almost every publicly available CVE PoCHNcomment · by daehee · 16 Feb 2022

  For a curated collection of CVE PoCs that is continuously updated by the bug bounty community, check out the projectdiscovery nuclei repo: https://github.com/projectdiscovery/nuclei-templates/tree/ma...

• Log4j RCE FoundHNcomment · by ievans · 10 Dec 2021

  If you'd like to detect whether you're affected by this dynamically, it looks like https://github.com/google/tsunami-security-scanner-plugins/i... will eventually make it into Google's dynamic scanner: https://github.com/google/tsunami-security-scanner (I bet it would be easy to write a plugin for https://github.com/projectdiscovery/nuclei as well.) To see if there are injection points statically…

• Nuclei – http vulnerability scanning based on templatesHNstory · 1 points · 0 comments · by salzig · 20 Jan 2021

Reddit (fetched when this page is opened)

A Reddit search for github.com/projectdiscovery/nuclei runs while this page is rendered, at most once every 6 hours per repository. What it finds is stored in our database (25 posts per fetch, at most 200 repositories a day), so the numbers on this site can be reproduced later. Reddit's feed has no scores or comment counts, so none are shown.

Reddit is rate limited; next request in 1s.