Nuclei uses a vast templating library to scan applications, cloud infrastructure, and networks to find and remediate vulnerabilities.
Joined April 2020
- Tweets2K
- Following183
- Followers38.5K
- Likes1.2K
Pinned Tweet
Nuclei just crossed 30,000 stars.
Thank you to everyone who starred it, wrote a template, filed an issue, or shipped a fix. This one belongs to the community.
Nuclei by ProjectDiscovery retweeted
subfinder. httpx. nuclei. katana. naabu. dnsx. interactsh. cvemap. neo.
this is projectdiscovery.
CVE-2026-21589
🚨 CVE-2026-21589 - Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read
Nuclei Template : github.com/projectdiscovery/…
Reference: labs.watchtowr.com/you-wont-…
#bugbounty #hackwithautomation #atlassian
Nuclei by ProjectDiscovery retweeted
Neo is now free to try.
Neo runs long security tasks against your apps, network, code and vulnerability backlog, with shared agents context.
→ neo.projectdiscovery.io/sign…
Here’s what you can do with Neo:
Nuclei by ProjectDiscovery retweeted
How is AI changing bug bounty hunting, and where do human hackers still make the difference?
@NahamSec and @ehrishiraj discuss AI agents, ethical hacking, and the future of vulnerability research from reconnaissance and code review to building security agents and verifying findings.
From their first hacking experiments to building tools for the security community, they share the experiences that shaped their work. They explore how collaboration makes better researchers, the role of open-source security tools, and why verifying vulnerabilities matters as much as finding them.
00:00 AI at ProjectDiscovery
01:21 Getting into hacking
04:49 First hacking stories
07:53 Hacking as a career
12:55 Bug bounty collaboration
17:34 Human hackers + AI
18:59 AI recon & exploit chains
24:06 AI code review
25:53 Building open-source tools
31:26 Nuclei, Katana & Interactsh
36:49 The future of security tools
41:51 False positives & triage
45:41 Building security agents
50:54 Orchestration & verification
55:48 AI costs & duplicate reports
56:45 Building Neo
1:00:58 Background AI agents
1:02:46 ProjectDiscovery resources
Youtube: youtube.com/watch?v=6ajeZq9Q…
Nuclei by ProjectDiscovery retweeted
🚨 CVE-2026-82329 - JFrog Artifactory Access Blank Join Key Authentication Bypass
Nuclei Template - github.com/projectdiscovery/…
Reference: pruva.dev/reproductions/REPR…
#bugbountytips #hackwithautomation #jfrog
Detect using nuclei template nitter.cf/dhiyaneshdk/status/209…
Keycloak is vulnerable to a critical unauthenticated account takeover (CVE-2026-18963)
I reproduced the bug locally; interesting one (power of LLM, I think)
github.com/keycloak/keycloak…
Nuclei by ProjectDiscovery retweeted
🚨 CVE-2026-18963 - Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass
Nuclei Template - github.com/projectdiscovery/…
Reference: github.com/keycloak/keycloak…
#hackwithautomation #bugbounty #keycloak
Nuclei by ProjectDiscovery retweeted
🚨CVE-2026-19478 - GitLab CE/EE - GraphQL @ gl_introduced Arbitrary Method Invocation
🔍Nuclei Template - github.com/projectdiscovery/…
🗒️Reference: github.com/davkharrr/CVE-202…
#hackwithautomation #bugbounty
Nuclei by ProjectDiscovery retweeted
🚨Unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
🔍 Nuclei Template : cloud.projectdiscovery.io/li…
🔗 Reference: github.com/geotools/geotools…
#hackwithautomation #bugbounty
Nuclei by ProjectDiscovery retweeted
Most cybersecurity lessons never make it into a changelog.
They live in the stories of the researchers, builders, and hackers who found the bug, built the tool, or defended the system.
We’re bringing those stories to the ProjectDiscovery Podcast.
Who should we talk to first?
Nuclei by ProjectDiscovery retweeted
🚨 CVE-2026-72898 - Metabase - Unauthenticated SQL Injection
Nuclei Template: cloud.projectdiscovery.io/li…
Reference:
github.com/metabase/metabase…
#hackwithautomation #nuclei
Nuclei by ProjectDiscovery retweeted
@pdnuclei detection template - github.com/projectdiscovery/…
Introducing XSS2Shell ⛓️: WordPress Core preauth XSS→RCE vulnerability affecting 43% of the internet, discovered autonomously by pwn (using open-source models), affecting all WordPress versions.
pwn.ai/blog/xss2shell
Please patch CVE-2026-64638 as soon as possible!
Nuclei by ProjectDiscovery retweeted
This week we launched Neo v1, out of beta and available for everyone.
Neo is an autonomous security platform that runs continuous exploitability testing across your applications and APIs, maps your attack surface, reviews code and pull requests, red teams your internal network, and triages your vulnerability backlog, all inside one context layer purpose-built for your entire organization.
Check out our latest blog to learn more and get started → bit.ly/4fHH7PG
Neo, for the hackers of the world.
We built Neo for all security teams, big or small.
→ The two-person team with a long backlog.
→ The startup shipping fast with no pentest budget.
→ The enterprise scanning thousands of assets with only a few people to cover them.
Try it today → neo.projectdiscovery.io/sign…
Browser Computer Use in NEO
Finding a potential XSS is only the first step.
Neo automatically :
-> opens a real browser
-> executes the payload
-> confirms JavaScript execution
-> captures the alert screenshot as evidence
-> Introducing Neo Browser Computer Use -- an autonomous PoC collector.
Finding XSS is only half the job. Verifying it is the painful part.
Browser Sessions in Neo is finally here.
You can now run multiple cloud browsers inside Neo at the same time.
-> Spin up a few sessions, select the ones you care about, and send one prompt.
-> Neo can work across all of them
open pages, click through flows, and check that things like login and signup actually work.
Useful when you’re finding auth-related issues, checking edge cases, or just don’t want to babysit five tabs yourself.
Browser Sessions is live in Neo.
Nuclei by ProjectDiscovery retweeted
Neo, for the hackers of the world. You, at machine scale.
neo.projectdiscovery.io