projectdiscovery/nuclei

This system is a modular vulnerability scanner and security assessment platform that executes templates across diverse protocols including HTTP, DNS, SSL, and headless browsers. It features a comprehensive JavaScript runtime for complex template logic and supports remote execution via WMI, DCOM, and Task Scheduler. The architecture includes a robust template management system with signing, caching, and multi-source loading, alongside extensive fuzzing and input parsing capabilities.

This period was defined by the comprehensive rewrite of the Nuclei engine to support a modular, multi-protocol execution framework and a public Go SDK. The work introduced a new template execution model with workflow support, expanded protocol coverage including SSL, WHOIS, and file operations, and integrated advanced JavaScript capabilities for template logic.

111 changes

This period focused on expanding the JavaScript runtime with extensive libraries for Active Directory attacks, remote execution, and network protocols, alongside the introduction of a modular fuzzing engine. The team also standardized input handling and authentication strategies to support diverse data sources and security testing workflows.

53 changes

projectdiscovery/nuclei was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.