
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Fast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…

A modular vulnerability scanner with automatic report generation capabilities.

Web Application Security Scanner

Free web-application vulnerability and version scanner

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14…

Module-based web vulnerability scanner and bug bounty automation framework with built-in XSS, SSTI, SSRF, and Firebase detection engines. Designed to…

AI-powered bug bounty hunting toolkit that works with or without subscription.

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

Passive security checker for CVE-2026-48908 affecting SP Page Builder.

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

Scans WordPress Forminator for CVE-2026-15748 unauthenticated RCE. Detects vulnerable sites, crawls forms, extracts nonces, runs safe upload tests.

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious…

Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator


CVE-2026-56292 - AcyMailing for Joomla unauthenticated SQL injection scanner

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit

Authorized WordPress XSS-to-RCE scanner with concurrent multi-target XSS reflection and version fingerprint detection, plus optional exploitation…