All Projects → xm1k3 → cent

xm1k3 / cent

Licence: Apache-2.0 license
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Programming Languages

go
31211 projects - #10 most used programming language

Projects that are alternatives of or similar to cent

nerdbug
Full Nuclei automation script with logic explanation.
Stars: ✭ 153 (-51.43%)
Mutual labels:  nuclei, bugbounty, nuclei-templates
Blind-SSRF
Nuclei Templates to reproduce Cracking the lens's Research
Stars: ✭ 111 (-64.76%)
Mutual labels:  nuclei, bugbounty, nuclei-templates
my-nuclei-templates
Some contributions in the nuclei-templates repository
Stars: ✭ 32 (-89.84%)
Mutual labels:  templates, nuclei, nuclei-templates
Virtual-Host
Modified Nuclei Templates Version to FUZZ Host Header
Stars: ✭ 38 (-87.94%)
Mutual labels:  nuclei, bugbounty, nuclei-templates
crtfinder
Fast tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com with standard and advanced search techniques
Stars: ✭ 96 (-69.52%)
Mutual labels:  penetration-testing, bugbounty
k8s-nuclei-templates
Nuclei templates for K8S security scanning
Stars: ✭ 85 (-73.02%)
Mutual labels:  templates, nuclei
vaf
Vaf is a cross-platform very advanced and fast web fuzzer written in nim
Stars: ✭ 294 (-6.67%)
Mutual labels:  penetration-testing, bugbounty
ObserverWard 0x727
Cross platform community web fingerprint identification tool
Stars: ✭ 529 (+67.94%)
Mutual labels:  nuclei, nuclei-templates
3klcon
Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.
Stars: ✭ 189 (-40%)
Mutual labels:  penetration-testing, bugbounty
tugarecon
Pentest: Subdomains enumeration tool for penetration testers.
Stars: ✭ 142 (-54.92%)
Mutual labels:  penetration-testing, bugbounty
bug-bounty
My personal bug bounty toolkit.
Stars: ✭ 127 (-59.68%)
Mutual labels:  penetration-testing, bugbounty
Wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Stars: ✭ 3,873 (+1129.52%)
Mutual labels:  penetration-testing, bugbounty
boxer
Boxer: A fast directory bruteforce tool written in Python with concurrency.
Stars: ✭ 15 (-95.24%)
Mutual labels:  penetration-testing, bugbounty
ncl
nuclei framework scripts
Stars: ✭ 25 (-92.06%)
Mutual labels:  nuclei, nuclei-templates
urldedupe
Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations
Stars: ✭ 208 (-33.97%)
Mutual labels:  penetration-testing, bugbounty
Awesome Bbht
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
Stars: ✭ 190 (-39.68%)
Mutual labels:  penetration-testing, bugbounty
KaliIntelligenceSuite
Kali Intelligence Suite (KIS) shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by executing standard penetration testing tools. The collected data is internally stored in a structured manner to allow the fast identification and visualisation of the collected information.
Stars: ✭ 58 (-81.59%)
Mutual labels:  penetration-testing, bugbounty
Garud
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
Stars: ✭ 183 (-41.9%)
Mutual labels:  penetration-testing, bugbounty
Knary
A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support
Stars: ✭ 187 (-40.63%)
Mutual labels:  penetration-testing, bugbounty
magicRecon
MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.
Stars: ✭ 478 (+51.75%)
Mutual labels:  nuclei, bugbounty

Cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place.


Apache license badge



Install

GO111MODULE=on go get -u github.com/xm1k3/cent

Or download from releases

after installation run cent init to initialize cent with the configuration files you find here

Supported commands

Command Description
init Cent init configuration file
update Update your repository
version Print cent version

Root flags

Flags:
      --config string   config file (default is $HOME/.cent.yaml)
  -C, --console         Print console output
  -k, --keepfolders     Keep folders (by default it only saves yaml files)
  -p, --path string     Root path to save the templates (default "cent-nuclei-templates")
  -t, --threads int     Number of threads to use when cloning repositories (default 10)

Update flags

This command helps you update your folder with templates by deleting unnecessary folders and files without having to do multiples git clones.

Flags:
  -d, --directories   If true remove unnecessary folders from updated $HOME/.cent.yaml
  -f, --files         If true remove unnecessary files from updated $HOME/.cent.yaml
  -p, --path string   Path to folder with nuclei templates

Init flags

This command will automatically download .cent.yaml from repo and copy it to $HOME/.cent.yaml

Flags:
  -h, --help         help for init
  -o, --overwrite    If the cent file exists overwrite it
  -u, --url string   Url from which you can download the configurations for .cent.yaml

Usage

▶ cent -h
▶ cent init -h
▶ cent update -h
▶ cent version

Example:

Clone and insert all the community templates into the cent-nuclei-templates folder

▶ cent -p cent-nuclei-templates -k

cent

If you have updated the cent.yaml file by adding new folders

exclude-dirs:
  - ...
  - dns
  - ...

just do:

▶ cent update -p cent-nuclei-templates -d

and cent will automatically delete all dns folder present in cent-nuclei-templates without cloning all the github repos.

cent update

Same thing with exclude-files

▶ cent update -p cent-nuclei-templates -f

Once cent has been configured correctly you can perform a scan with Nuclei.

Example

▶ nuclei -u https://example.com -t ./cent-nuclei-templates -tags cve
▶ nuclei -l urls.txt -t ./cent-nuclei-templates -tags cve

See here for more documentation about Nuclei

Config

You need to configure cent parameters in $HOME/.cent.yaml

# Directories to exclude
exclude-dirs:
  - SOMETHING

# Files to exclude
exclude-files:
  - README.md
  - .gitignore
  - .pre-commit-config.yaml
  - LICENSE

# Add github urls
community-templates:
  - https://github.com/projectdiscovery/nuclei-templates.git
  - https://gist.github.com/0x240x23elu
  - https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31
  - https://github.com/0x727/ObserverWard_0x727
  - https://github.com/1in9e/my-nuclei-templates
  - https://github.com/5cr1pt/templates
  - https://github.com/ARPSyndicate/kenzer-templates
  - https://github.com/AshiqurEmon/nuclei_templates.git
  - https://github.com/CharanRayudu/Custom-Nuclei-Templates
  - https://github.com/clarkvoss/Nuclei-Templates
  - https://github.com/d3sca/Nuclei_Templates
  - https://github.com/daffainfo/my-nuclei-templates
  - https://github.com/esetal/nuclei-bb-templates
  - https://github.com/ethicalhackingplayground/erebus-templates
  - https://github.com/foulenzer/foulenzer-templates
  - https://github.com/geeknik/nuclei-templates-1
  - https://github.com/geeknik/the-nuclei-templates
  - https://github.com/Harish4948/Nuclei-Templates
  - https://github.com/im403/nuclei-temp
  - https://github.com/javaongsan/nuclei-templates
  - https://github.com/joanbono/nuclei-templates
  - https://github.com/kabilan1290/templates
  - https://github.com/medbsq/ncl
  - https://github.com/meme-lord/Custom-Nuclei-Templates
  - https://github.com/MR-pentestGuy/nuclei-templates
  - https://github.com/n1f2c3/mytemplates
  - https://github.com/NitinYadav00/My-Nuclei-Templates
  - https://github.com/notnotnotveg/nuclei-custom-templates
  - https://github.com/obreinx/nuceli-templates
  - https://github.com/optiv/mobile-nuclei-templates
  - https://github.com/panch0r3d/nuclei-templates
  - https://github.com/peanuth8r/Nuclei_Templates
  - https://github.com/pikpikcu/my-nuclei-templates
  - https://github.com/pikpikcu/nuclei-templates
  - https://github.com/projectdiscovery/nuclei-templates.git
  - https://github.com/R-s0n/Custom_Vuln_Scan_Templates
  - https://github.com/rafaelcaria/Nuclei-Templates
  - https://github.com/rahulkadavil/nuclei-templates
  - https://github.com/randomstr1ng/nuclei-sap-templates
  - https://github.com/redteambrasil/nuclei-templates
  - https://github.com/ree4pwn/my-nuclei-templates
  - https://github.com/sadnansakin/my-nuclei-templates
  - https://github.com/Saimonkabir/Nuclei-Templates
  - https://github.com/Saptak9983/Nuclei-Template
  - https://github.com/securitytest3r/nuclei_templates_work
  - https://github.com/sharathkramadas/k8s-nuclei-templates
  - https://github.com/shifa123/detections
  - https://github.com/smaranchand/nuclei-templates
  - https://github.com/Str1am/my-nuclei-templates
  - https://github.com/System00-Security/backflow
  - https://github.com/test502git/log4j-fuzz-head-poc
  - https://github.com/thebrnwal/Content-Injection-Nuclei-Script
  - https://github.com/thelabda/nuclei-templates
  - https://github.com/yavolo/nuclei-templates
  - https://github.com/z3bd/nuclei-templates
  - https://github.com/zinminphyo0/KozinTemplates

Credits

License

Cent is distributed under Apache-2.0 License

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].