projectdiscovery

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

A next-generation crawling and spidering framework.

Fast passive subdomain enumeration tool.

AIx is a cli tool to interact with Large Language Models (LLM) APIs.

Fast and customizable subdomain wordlist generator using DSL

Go CLI and Library for quickly mapping organization network ranges using ASN information.

Community curated list of search queries for various products across multiple search engines.

A utility to detect various technology for a given IP address.

Go client to communicate with Chaos DB API.

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

Malicious package & supply-chain intelligence

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

DSL engine

Dialer with DNS Cache + Dial History

A go flag wrapper with convenience helpers

A simple layer for leveled logging in go

Hybrid memory/disk map

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

An OOB interaction gathering server and client library

IP/FQDN data structure helper with randomization of hosts and ports based on masscan internal logic

Utility program to perform multiple operations for a given subnet/CIDR ranges.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

A fingerprint generation helper for nuclei network templates

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

openrisk is a tool that generates a risk score based on the results of a Nuclei scan.

ProjectDiscovery's Open Source Tool Manager

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Community curated list of public bug bounty and responsible disclosure programs.

A Golang blocking rate limit implementation

Raw HTTP client in Go for complete request control and customization.

Retryable DNS client in Go

Package retryablehttp provides a familiar HTTP client interface with automatic retries and exponential backoff

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

Go alternative of python SimpleHTTPServer

Tiny embeddable dns server

A streamlined tool for discovering private TLDs for security research.

Fast and configurable TLS grabber focused on TLS based data collection.

Quickly discover exposed hosts on the internet using multiple search engines.

A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

Curated list of categorized User Agents

Helper Libraries

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

A high performance go implementation of Wappalyzer Technology Detection Library