Nuclei Python Packages

ruoyi-scan

RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器

napari-nuclephaser

A Napari plugin for automated cell nuclei detection, cell proliferation & population growth analysis, and single-cell tracking in brightfield and fluorescence microscopy images

astrarecon

A Linux-first, plugin-based recon workflow engine with DAG execution, persistent sessions, AI-ready exports, and Rich CLI.

reconninja

⚡ ReconNinja v10.6.0— 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

webenum-ng

All-in-one web recon orchestrator (the "enum4linux-ng of the web"): parallel fingerprint, content discovery, vuln scan and CMS tools, with product-aware nuclei and prioritized next-step recommendations.

wpsecscan

Defensive WordPress security scanner — 189 checks, 8-source nightly CVE aggregator, SLSA L3 + Sigstore-signed releases, 10-provider threat-intel federation, continuous monitoring, active exploit verification (consent-gated), enterprise SSO/RBAC/audit/multi-tenant, distribution to Docker/K8s/Homebrew/Snap/winget/AUR. AGPLv3.

nucleivuln

A client designed to retrieve vulnerability-related information from the Nuclei Git repository of templates. The gathered data is subsequently transmitted to the Vulnerability-Lookup API.

iflow-mcp-asaotomo-fofamap

一款证据驱动的 FOFA 资产测绘智能体：支持自然语言侦察、AI 反思、CLI / MCP / Skill / REST API，以及经人工审批的 Nuclei 扫描。

spyhunt

SpyHunt v4.0: A comprehensive Network Scanner & Vulnerability Assessment tool. Automate OSINT, Reconnaissance, and Bug Bounty hunting with advanced scanners (XXE, SSRF, SSTI, SQLi) plus Nuclei & Shodan integration. (Fork from @gotr00t0day)

nucleiparser

A Nuclei output parser for CLI

pentest-framework

Low-noise pentest orchestration: recon + scanning + passive checks normalized into one schema, deduplicated, and rendered to a professional PDF. Authorized testing only.

aegis-devin

AI autonomous penetration testing + network forensics platform. Groq-powered, 100% free. One command full pentest

secscan-tool

Automated web security scanner with HTML/Markdown/JSON reports and AI-tailored remediation

bladerecon

Intelligence-driven reconnaissance framework for bug bounty hunters and security professionals.

driftmux

Driftmux is a black-box auditing tool focused on service discovery, classification, and adaptive scan routing.

pygpseq

Python3 package to analyse GPSeq images and manage TIFF files.

intrascan

Mobile security scanner that runs Nuclei templates via Frida to test MDM app APIs through their VPN tunnels.

fofamap

一款证据驱动的 FOFA 资产测绘智能体：支持自然语言侦察、AI 反思、CLI / MCP / Skill / REST API，以及经人工审批的 Nuclei 扫描。