Nuclei uses a vast templating library to scan applications, cloud infrastructure, and networks to find and remediate vulnerabilities.
- Tweets 2,047
- Following 183
- Followers 38,335
- Likes 1,185
Pinned Tweet
Nuclei just crossed 30,000 stars.
Thank you to everyone who starred it, wrote a template, filed an issue, or shipped a fix. This one belongs to the community.
1
4
24
4,727
Nuclei by ProjectDiscovery retweeted
How is AI changing bug bounty hunting, and where do human hackers still make the difference?
@NahamSec and @ehrishiraj discuss AI agents, ethical hacking, and the future of vulnerability research from reconnaissance and code review to building security agents and verifying findings.
From their first hacking experiments to building tools for the security community, they share the experiences that shaped their work. They explore how collaboration makes better researchers, the role of open-source security tools, and why verifying vulnerabilities matters as much as finding them.
00:00 AI at ProjectDiscovery
01:21 Getting into hacking
04:49 First hacking stories
07:53 Hacking as a career
12:55 Bug bounty collaboration
17:34 Human hackers + AI
18:59 AI recon & exploit chains
24:06 AI code review
25:53 Building open-source tools
31:26 Nuclei, Katana & Interactsh
36:49 The future of security tools
41:51 False positives & triage
45:41 Building security agents
50:54 Orchestration & verification
55:48 AI costs & duplicate reports
56:45 Building Neo
1:00:58 Background AI agents
1:02:46 ProjectDiscovery resources
Youtube: piped.video/watch?v=6ajeZq9Q…
1
9
26
9,658
Nuclei by ProjectDiscovery retweeted
🚨 CVE-2026-82329 - JFrog Artifactory Access Blank Join Key Authentication Bypass
Nuclei Template - github.com/projectdiscovery/…
Reference: pruva.dev/reproductions/REPR…
#bugbountytips #hackwithautomation #jfrog
1
26
122
5,956
Detect using nuclei template
Keycloak is vulnerable to a critical unauthenticated account takeover (CVE-2026-18963)
I reproduced the bug locally; interesting one (power of LLM, I think)
github.com/keycloak/keycloak…
2
1
4
2,613
Nuclei by ProjectDiscovery retweeted
🚨 CVE-2026-18963 - Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass
Nuclei Template - github.com/projectdiscovery/…
Reference: github.com/keycloak/keycloak…
#hackwithautomation #bugbounty #keycloak
4
74
457
40,941
Nuclei by ProjectDiscovery retweeted
🚨CVE-2026-19478 - GitLab CE/EE - GraphQL @ gl_introduced Arbitrary Method Invocation
🔍Nuclei Template - github.com/projectdiscovery/…
🗒️Reference: github.com/davkharrr/CVE-202…
#hackwithautomation #bugbounty
1
36
184
9,818
Nuclei by ProjectDiscovery retweeted
🚨Unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers
🔍 Nuclei Template : cloud.projectdiscovery.io/li…
🔗 Reference: github.com/geotools/geotools…
#hackwithautomation #bugbounty
16
113
5,580
Nuclei by ProjectDiscovery retweeted
Most cybersecurity lessons never make it into a changelog.
They live in the stories of the researchers, builders, and hackers who found the bug, built the tool, or defended the system.
We’re bringing those stories to the ProjectDiscovery Podcast.
Who should we talk to first?
3
8
46
4,049
Nuclei by ProjectDiscovery retweeted
🚨 CVE-2026-72898 - Metabase - Unauthenticated SQL Injection
Nuclei Template: cloud.projectdiscovery.io/li…
Reference:
github.com/metabase/metabase…
#hackwithautomation #nuclei
4
80
459
21,555
Nuclei by ProjectDiscovery retweeted
@pdnuclei detection template - github.com/projectdiscovery/…
Introducing XSS2Shell ⛓️: WordPress Core preauth XSS→RCE vulnerability affecting 43% of the internet, discovered autonomously by pwn (using open-source models), affecting all WordPress versions.
pwn.ai/blog/xss2shell
Please patch CVE-2026-64638 as soon as possible!
1
5
20
3,496
Nuclei by ProjectDiscovery retweeted
This week we launched Neo v1, out of beta and available for everyone.
Neo is an autonomous security platform that runs continuous exploitability testing across your applications and APIs, maps your attack surface, reviews code and pull requests, red teams your internal network, and triages your vulnerability backlog, all inside one context layer purpose-built for your entire organization.
Check out our latest blog to learn more and get started → bit.ly/4fHH7PG
1
14
51
4,844
Neo, for the hackers of the world.
We built Neo for all security teams, big or small.
→ The two-person team with a long backlog.
→ The startup shipping fast with no pentest budget.
→ The enterprise scanning thousands of assets with only a few people to cover them.
Try it today → neo.projectdiscovery.io/sign…
1
1
1,609
Browser Computer Use in NEO
Finding a potential XSS is only the first step.
Neo automatically :
-> opens a real browser
-> executes the payload
-> confirms JavaScript execution
-> captures the alert screenshot as evidence
-> Introducing Neo Browser Computer Use -- an autonomous PoC collector.
Finding XSS is only half the job. Verifying it is the painful part.
2
1
3
2,735
Browser Sessions in Neo is finally here.
You can now run multiple cloud browsers inside Neo at the same time.
-> Spin up a few sessions, select the ones you care about, and send one prompt.
-> Neo can work across all of them
open pages, click through flows, and check that things like login and signup actually work.
Useful when you’re finding auth-related issues, checking edge cases, or just don’t want to babysit five tabs yourself.
Browser Sessions is live in Neo.
1
4
3,088
Nuclei by ProjectDiscovery retweeted
Neo, for the hackers of the world. You, at machine scale.
neo.projectdiscovery.io
2
19
129
210,602
Nuclei by ProjectDiscovery retweeted
🚨 CVE-2026-63030 - critical 🚨
WordPress Core 6.9-7.0.1 - Pre-Auth Blind SQL Injection (Batch-Route Confusion)
> WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to...
👾 cloud.projectdiscovery.io/li…
@pdnuclei #Nu...
10
43
2,449
Nuclei by ProjectDiscovery retweeted
Today we're launching securitycontext.dev
It gives any AI agent ready-to-use security context for thousands of open source projects, built from each project's commit history of security fixes and its disclosed CVEs.
Useful whether your agent is writing code or reviewing it for bugs. Free, no auth, over MCP and API.
12
95
529
41,230
Nuclei by ProjectDiscovery retweeted
Today we're launching securitycontext.dev
It gives any AI agent ready-to-use security context for thousands of open source projects, built from each project's commit history of security fixes and its disclosed CVEs.
Useful whether your agent is writing code or reviewing it for bugs. Free, no auth, over MCP and API.
5
22
141
14,066
Nuclei by ProjectDiscovery retweeted
Transformer Visualized: How GPT decides "Paris" with live GPT-2 running in browser
Created with @OpenAI GPT 5.5 and @AnthropicAI Opus 4.7
2
4
10
1,681