nuclei-vault

327,008 unique, engine-validated nuclei templates merged from 45 community collections (personal GitHub stars + xm1k3/cent community list).

• Scanned: 888,659 YAML files
• Engine-valid: 638,330
• Content-deduplicated (SHA-256): 327,008 (dropped 311,322 duplicates)
• Invalid/discarded: 250,329 (broken YAML, missing id/info/http section)
• Generated: 2026-09-08

Layout — organized for bug bounty mass hunting

Folder	Count	Use
misc/	127,062	Uncategorized / unique tags
cve/2024/	33,531	CVE templates by year
cve/2023/	28,149	CVE templates by year
cve/2025/	18,858	CVE templates by year
cve/2022/	17,617	CVE templates by year
exposures-misconfig/	13,880	Exposed panels, configs, misconfigs
tech-detect-panels/	12,768	Tech/panel detection (low-noise)
cve/2021/	12,736	CVE templates by year
cve/2026/	7,704	CVE templates by year
cve/2010/	5,770	CVE templates by year
cve/2015/	5,336	CVE templates by year
cve/2020/	5,170	CVE templates by year
cve/2014/	4,347	CVE templates by year
cve/2019/	4,079	CVE templates by year
cve/2016/	3,355	CVE templates by year
cve/2018/	3,205	CVE templates by year
file-secrets/	3,187	File-based secret scans
cve/2017/	2,922	CVE templates by year
cve/2012/	1,928	CVE templates by year
secrets-tokens/	1,580	Exposed keys & tokens
cve/2013/	1,580	CVE templates by year
default-logins/	1,478	Default & weak credentials
xss/	1,455	Cross-site scripting
lfi-traversal/	1,304	LFI / path traversal
cve/2011/	1,287	CVE templates by year
cve/2008/	1,173	CVE templates by year
rce/	1,091	RCE / command injection
cve/2009/	945	CVE templates by year
sqli/	893	SQL injection
cve/2007/	608	CVE templates by year
takeovers/	377	Subdomain takeover
cve/2005/	309	CVE templates by year
ssrf/	280	Server-side request forgery
redirects/	250	Open redirects
cve/2006/	214	CVE templates by year
cve/2004/	136	CVE templates by year
cve/2000/	105	CVE templates by year
ssti/	101	SSTI / template injection
fuzz/	65	Fuzzing probes
cve/2002/	55	CVE templates by year
api/	55	API / GraphQL
cve/2001/	42	CVE templates by year
cve/2003/	12	CVE templates by year
cve/1999/	6	CVE templates by year
workflows/	3	Nuclei workflows

Bug bounty profile (high signal, low noise)

nuclei -l targets.txt -severity medium,high,critical \
  -t vault/takeovers -t vault/rce -t vault/xss -t vault/sqli \
  -t vault/ssrf -t vault/lfi-traversal -t vault/ssti \
  -t vault/default-logins -t vault/exposures-misconfig \
  -t vault/redirects -t vault/secrets-tokens

# everything at once:
nuclei -l targets.txt -t vault/

# newest CVEs first (they are the money):
nuclei -l targets.txt -t vault/cve/2026 -t vault/cve/2025 -t vault/cve/2024

Validation pipeline

1. Clone ~200 template collections (yours + cent list + aggregator crawl)
2. YAML parse + schema check (id, info.name, severity, an http/network/dns/file/ssl/code section)
3. SHA-256 content dedup — projectdiscovery/official copies win
4. Tag extraction from classification.tags for smart categorization
5. nuclei -validate regression on random samples per category (0 errors)

Sources

45+ contributing repositories

• adampielak/nuclei-templates — 165,927
• topscoder/nuclei-wordfence-cve — 82,062
• rix4uni/nucleihub-templates — 39,214
• projectdiscovery/nuclei-templates — 13,050
• ExpLangcn/NucleiTP — 8,847
• kh4sh3i/nuclei-templates — 4,818
• daffainfo/nuclei-templates — 3,973
• mosesrenegade/nuclei-templates — 3,787
• srkgupta/cent-nuclei-templates — 1,778
• 0xKayala/Custom-Nuclei-Templates — 1,047
• h0tak88r/nuclei_templates — 702
• ed-red/redmc_custom_templates_nuclei — 491
• daffainfo/my-nuclei-templates — 373
• solo10010/solo-nuclei-templates — 259
• ricardomaia/nuclei-template-generator-for-wordpress-plugins — 179
• projectdiscovery/nuclei-templates-ai — 93
• linuxadi/40k-nuclei-templates — 67
• thanhnx9/nuclei-templates-cutomer — 66
• Arvinthksrct/alltemplate — 52
• binod235/nuclei-templates-and-reports — 37
• 0xSojalSec/nuclei-templates-5 — 30
• reewardius/log4shell-templates — 23
• RandomRobbieBF/nuclei-drupal-sa — 21
• OWASP/www-project-asvs-security-evaluation-templates-with-nuclei — 20
• ARPSyndicate/kenzer-templates — 17
• projectdiscovery/fuzzing-templates — 17
• vulnspace/nuclei-templates — 9
• geeknik/the-nuclei-templates — 8
• PedroF-369/nuclei_templates — 6
• 0xSojalSec/kenzer-templates — 5
• Hunt2behunter/nuclei-templates — 5
• 0xmaximus/final_freaking_nuclei_templates — 4
• 0xPugazh/my-nuclei-templates — 3
• UltimateSec/ultimaste-nuclei-templates — 3
• Akokonunes/Private-Nuclei-Templates — 2
• AshiqurEmon/nuclei_templates — 2
• ping-0day/templates — 2
• th3r4id/nuclei-templates — 2
• Lopseg/nuclei-c-templates — 1
• NitinYadav00/My-Nuclei-Templates — 1
• SirBugs/Priv8-Nuclei-Templates — 1
• U53RW4R3/nuclei-fuzzer-templates — 1
• rix4uni/BugBountyTips — 1
• thelabda/labdanuclei — 1
• xinZa1/template — 1