Security Cipher
Home Blog About Us
Resources ▼
🗺️ Penetration Testing Roadmap 🌐 Web Application Security Checklist 🤖 OWASP Top 10 for LLM Applications 🧠 LLM AI Security Checklist 🛠️ Security Tools 🎯 Penetration Testing Tricks 📄 Secure Code Explain 📖 Vulnerability Explain ☁️ AWS Cloud Security Checklist
My Resume
Contact UsContact
← Security Tools View on GitHub

nuclei-templates

Community-curated repository of Nuclei templates for known vulnerabilities and misconfigurations.

Nuclei Templates

Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.

Documentation • Contributions • Discussion • Community • FAQs • Join Discord


Templates are the core of the nuclei scanner which powers the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community. We hope that you also contribute by sending templates via pull requests or Github issues to grow the list.

Nuclei Templates overview

An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is available here, and also available in JSON format for integration.

🚨 Known Exploited Vulnerabilities (KEV) Coverage

Nuclei templates provide coverage for vulnerabilities actively exploited in the wild:

KEV SourceTemplatesDescription
🔴 CISA KEV454CISA Known Exploited Vulnerabilities Catalog
🟠 VulnCheck KEV1449 VulnCheck KEV - Enhanced vulnerability intelligence
🟢 Both Sources407Templates covering vulnerabilities in both catalogs

💡 Total unique KEV templates: 1496 - Use nuclei -tags kev,vkev to scan for actively exploited vulnerabilities


Nuclei Templates Top 10 statistics

TAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNT
vuln6468dhiyaneshdk1894http9281info4353file436
cve3587daffainfo905cloud659high2552dns26
discovery3265princechaddha854file436medium2457
vkev1394dwisiswant0805network259critical1555
panel1365ritikchaddha678code251low330
xss1269pussycat0x675dast240unknown54
wordpress1261pikpikcu353workflows205
exposure1141pdteam314javascript92
wp-plugin1103pdresearch275ssl38
osint848iamnoooob263dns23

873 directories, 11997 files.

📖 Documentation

Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new or your own custom templates. We have also added a set of templates to help you understand how things work.

💪 Contributions

Nuclei-templates is powered by major contributions from the community. Template contributions , Feature Requests and Bug Reports are more than welcome.

Alt

💬 Discussion

Have questions / doubts / ideas to discuss? Feel free to open a discussion on Github discussions board.

👨‍💻 Community

You are welcome to join the active Discord Community to discuss directly with project maintainers and share things with others around security and automation. Additionally, you may follow us on Twitter to be updated on all the things about Nuclei.

Thanks again for your contribution and keeping this community vibrant. ❤️

 

Press Escape to close the search panel.

Donate

Buy me a Coffee

Penetration Testing Services - Fiverr

Buy me a Coffee

Penetration Testing Services

penetration Testing Services

Web Application Security Quiz

Web Application Security Quiz

Daily Bug Bounty Writeups - Twitter

Daily Bug Bounty Writeups

Download our Latest Android Application

Guide for Penetration Testing

Daily Bug Bounty Writeups - Telegram

Daily Bug Bounty Writeups

Author

Piyush
Senior Product Security Engineer

Ethical Hacker || Penetration Tester || Gamer || Blogger || Application Security Engineer

READ ARTICLE

Donate

Buy me a Coffee

Recent Posts

  • RAG Poisoning in 2026: A Practical Playbook for Hacking Answers Through Your Knowledge Base
    RAG Poisoning in 2026: A Practical Playbook for Hacking Answers Through Your Knowledge Base
    August 19, 2026/
    0 Comments
  • Secrets That Pay: Hunting Valid Credentials with TruffleHog for Bug Bounties
    Secrets That Pay: Hunting Valid Credentials with TruffleHog for Bug Bounties
    August 13, 2026/
    0 Comments
  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
    August 10, 2026/
    0 Comments

Follow Us

SecurityCipher

Practical security guides, vulnerability deep-dives, and hands-on resources for bug bounty hunters and penetration testers.

Useful Links

  • Start Here
  • Cybersecurity Jobs
  • CVE Lookup
  • Bug Bounty Programs
  • Security Conferences
  • Payload Cheatsheets
  • Interview Prep
  • Report Templates
  • Blogs
  • About
  • Contact
  • RSS Feed

Recent Post

  • RAG Poisoning in 2026: A Practical Playbook for Hacking Answers Through Your Knowledge Base
  • Secrets That Pay: Hunting Valid Credentials with TruffleHog for Bug Bounties
  • Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
© 2026 SecurityCipher. All rights reserved. Privacy Policies · Terms & Conditions