PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Nuclei: Packing a Punch with Vulnerability Scanning

bishopfox.com | vulnerability | #attack-surface | #security-tools | #vulnerability-scanning | #nuclei | #projectdiscovery | #open-source-tools
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How Bishop Fox's teams use Nuclei, ProjectDiscovery's open-source, template-driven vulnerability scanner, for fast and customizable multi-protocol scanning, plus the tool's origin story.
Published
Collected

Related coverage

vulnerability · projectdiscovery.io
Securing the distributed perimeter: How Elastic scaled proactive detection with ProjectDiscovery Cloud
Elastic ran ~50,000 servers across AWS, Azure, and GCP and adopted ProjectDiscovery Cloud, scanning 14,500 external assets in under five minutes after outgrowing legacy scanners like BitSight.
vulnerability · projectdiscovery.io
Introducing Internal Network Scanning: see your network the way an attacker inside it would
Most breaches don't begin with a zero-day but with something ordinary like a forgotten server, an unmanaged network device, a service reachable across a segment that was supposed to be isolated. Internal scanning was supposed to catch exactly that but most scanners match a host's banner and version against a CVE list and flag everything potentially affected, so the few reachable exposures sit lost among thousands that were never exploitable. That noise is expensive now that the window to respon
vulnerability · projectdiscovery.io
Nuclei Templates - April 2026
Nuclei Templates v10.4.2 and v10.4.3 ship 226 new templates covering 123 CVEs—about 10 actively exploited KEV entries—and push deeper into AI/LLM attack surface with 27 first-time contributors joining.
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
vulnerability · projectdiscovery.io
From Detection to Validation: Fixing Broken Vulnerability Workflows
Version scanning lies by omission: only ~6% of CVEs are exploited. Nuclei validates exploitability at runtime with matchers, extractors, and multi-step flows, as the 2025 CrushFTP cases illustrate.
vulnerability · projectdiscovery.io
The Coverage Lie: Why Current Vulnerability Scanners Fail to Stop Breaches
Legacy scanners fail from untrusted version-based guesses, not coverage gaps: only ~6% of CVEs are exploited, yet weaponization is fast. Runtime validation plus KEV focus yields actionable results.
Back