This is absolutely insane. The prompt: "Set up a lab for Log4Shell at localhost:8080 and find all nuclei templates for this vulnerability. Use OAST detection to demonstrate the JNDI injection exploit with live callback verification." Sign up for Neo today 👇 https://projectdiscovery.io/request-demo

An AI just found a CVE in a library with 1.1 billion downloads. No human guidance. No custom rules. Neo reviewed Faraday's code, traced the URL logic, and found an SSRF that Snyk and Semgrep both missed. Read the full breakdown: projectdiscovery.io/blog/how-neo...

Neo Security Engineer is like having a pro hacker in your pocket. Just ask it what you want, it will download and use the necessary tools to achieve it. In this video, I just asked Neo to find all subdomains and check which are live. And, it did.

Did you know Subfinder has a "Deep Mode"? 🕵️‍♂️ By adding -recursive, you aren't just looking for subdomains; you're looking for subdomains of subdomains. Give it a try today!👇

Got questions about our tools or anything security-related? 🌀 Join our Discord community and ask away! We’d love to have you. 👇

Don't just find subdomains, find out where they came from. Use the -cs flag to identify the specific source behind every lead and prioritize your targets.👇

Your PRs are getting pentested by attackers anyway. Why not test them first? Neo runs full exploit chains on every pull request: • Real browser sessions • Actual exploit attempts • Proof in PR comments • Verified remediations See Neo in action → projectdiscovery.io/solutions/pr...

Threat models shouldn’t go stale the moment you ship. Neo builds living threat models from your architecture + APIs, updates them as code changes, and even validates threats at runtime (with evidence). projectdiscovery.io/solutions/th...

We just leveled up Neo. Claude Opus 4.6 is officially here! Ready to build? projectdiscovery.io/request-demo

Stop inspecting every active host manually. Let httpx automate visual checks and capture screenshots, enabling rapid review and deeper analysis at scale.

Ever feel like you're missing something when researching domains? 🌀 You might be! Private TLDs are often overlooked and #tldfinder will help you discover them! https://github.com/projectdiscovery/tldfinder

PR security reviews weren’t designed for AI-generated code and nonstop merges. The State of AppSec Report shows why teams are moving beyond static findings and toward runtime proof of exploitability. Less guessing. Fewer debates. Faster decisions. projectdiscovery.io/whitepapers/...

Tired of manually managing your security tools? Meet PDTM the tool that lets you install, update, and uninstall all your project discovery tools with a single command. ✅ Get started here: https://github.com/projectdiscovery/pdtm

🚀 We just launched the ProjectDiscovery OSS Bounty Program! Contribute to our open source security tools, get your PRs merged & earn rewards! 💥 Read more 👇 🔗 projectdiscovery.io/blog/announc... #OpenSource #BugBounty #Infosec #ProjectDiscovery

What’s your biggest AppSec bottleneck right now? A) too many findings B) low dev adoption C) slow remediation / unclear ownership D) tool sprawl We cover what teams are doing to fix these in the Neo State of AppSec Report. 📥 projectdiscovery.io/whitepapers/... #AppSec #SecurityEngineering

🚀 The State of AppSec Report | Security at Engineering Speed is live: projectdiscovery.io/whitepapers/... Trying to improve AppSec without slowing dev teams down? This is for you: • trends shaping modern AppSec • what’s driving noise + delays • practical moves to improve adoption + remediation

Maximize your endpoint discovery by digging into JavaScript files. Using the -jc flag allows you to parse and crawl JS files to find hidden paths and APIs that standard crawls might miss Use this command👇 katana -jc -u https://target(.)com

Move beyond simple discovery. Pair Subfinder with httpx to instantly profile your attack surface by extracting tech stacks, status codes, and page titles at scale. Command👉 subfinder -d target(.)com | httpx -sc -td -title

Reply with your answer! 👇

ShuffleDNS is a fast Go tool for finding subdomains. It uses brute-force to identify valid targets and automatically filters out messy wildcard results Command👉 shuffledns -d example(.)com -list wordlist(.)txt -r resolvers(.)txt -r: Your list of DNS resolvers. -list: Your subdomain wordlist.

Vuln backlog triage is mostly mechanical. Neo pulls findings, clusters + prioritizes with your context, reproduces in an isolated sandbox, captures evidence, drafts remediation, and updates tickets until closure. See it: projectdiscovery.io

Stop just finding subdomains. Start finding endpoints. 🕸️ Recon doesn't end with a list of domains. By piping subfinder and httpx into katana, you can automatically crawl and map out the entire attack surface of a target in seconds.👇 #Recon #Katana #Subfinder

Security work doesn’t fit in a 15‑minute coding loop. Neo is an AI security copilot that plans + executes long‑running security tasks (recon, threat modeling, testing, triage) with real tools (browser, terminal, APIs.) See Neo in action: projectdiscovery.io

Here’s a technical look at discovery methods that adapt over time, including cert-based discovery and recursive subdomain expansion. If you’re doing recon or external asset discovery, this is a solid overview of techniques beyond basic DNS bruteforce. 📖 projectdiscovery.io/blog/surfaci...

🌀Naabu + Nmap = Port scan faster and inspect deeper. Stop wasting time with slow, full-range scans! Scan a host for open ports and use Nmap to detect the service versions. Use this 👇 naabu -host projectdiscovery(.)io -nmap-cli ‘nmap -sV’ #naabu #hackwithautomation #portscan

Welcome, 2026! We look forward to building more great things with you in the new year! With AI-driven threats emerging as the major challenge, our focus is clear: to bring you the defense you'll need for cutting-edge Attack Surface Management. #HappyNewYear #Infosec #2026

For 2026, the next generation of Attack Surface Management isn't just about seeing more; it's about knowing what's real. Want to learn why your security strategy needs proof? ➡️ Get our latest report now: https://projectdiscovery.io/whitepapers/attack-surface-management-2025

🌀Happy Holidays to everyone in our community who is celebrating! We hope you all have a wonderful time recharging and connecting with loved ones. [+] Santa_v2025.zip 🎅 — The ProjectDiscovery Team

Need to isolate common ports on a single host? Use Naabu to target specific, common ports and save the results for your next step.👇

2025 proved one thing: the gap between disclosure and exploitation is gone. We broke down the 5 vulnerabilities that actually shaped attacker behavior this year. Read the full analysis 👇 projectdiscovery.io/blog/year-in...

🚨 We’re presenting at #NahamCon24! Join us at 1:30 PM PT for a hands-on recon deep dive using free ProjectDiscovery tools: Subfinder → ShuffleDNS → AlterX → Katana + URLFinder Learn smart patterns, QPS tuning, rate-limit strategies, and see real demos in action. 🎟️Free registration: www.nahamcon.com

Tired of dealing with duplicate results in your scans? Httpx now has a cool feature for that: Filter Duplicates Tag! It allows you to filter duplicates as you scan, saving you time and giving you cleaner results. See how it works in 1 min 👇

Security leaders are aligned on this: the perimeter didn’t vanish… it became more dynamic, distributed, and influenced by AI-driven reconnaissance. As a result, visibility isn’t enough. Learn more: projectdiscovery.io/whitepapers/...

Tired of your recon data getting bloated with static files?  Here is a quick katana one-liner to actively crawl deep, parse JS, and strip out the noise (css, svg, fonts, etc.) automatically.👇 katana -u subdomains_alive.txt -d 5 -kf -jc -fx -ef woff,css,png,svg,jpg,woff2,jpeg,gif,svg -o allurls.txt

@NahamSec hacked a Wordpress website using Neo Watch it now → https://youtu.be/AnVONITvWw4?si=VW8RD_xDzogwXFqv

Your company passwords could be sitting in a malware log right now.  Don't wait for a breach to find out. We built free credential monitoring so you can spot exposures before attackers exploit them. Try it → https://cloud.projectdiscovery.io/leaks

Ever wonder if you can run Nuclei across multiple bug bounty programs effectively? 🤔 That's exactly what @NahamSec did a year ago! See how he leveraged Nuclei in diverse bug bounty programs to maximize his hunting. Watch the video and get inspired👇

How do you get comprehensive DNS insights from your subdomain list?  This powerful one-liner (cat subdomains.txt | dnsx -resp -o dns_responses.txt) helps you: ✅ Process lists of subdomains ✅ Perform rapid DNS resolution ✅ Save all responses for analysis Streamline your recon workflow!

🚨 New launch: Introducing Neo, your new AI security engineer. Neo executes complex, time-intensive security workflows across your stack. 📅 Request a demo to watch it work in your environment: 🔗 neo.projectdiscovery.io

Looking for a better way to store and manage your Nuclei scan results? MongoDB support allows you to export all your scan results to a MongoDB database for enhanced storage and reporting. Watch this one-minute video to see how it works 👇  

You've implemented a Content Security Policy (CSP) for your web application – great! But here's the catch: a CSP bypass occurs when an attacker finds a way around those restrictions. This often stems from improperly configured CSP headers, leaving your app vulnerable. (🧵👇)

Need to quickly map a target's tech stack? 👀 This command combines subfinder, httpx, and nuclei to detect web technologies on live subdomains, giving you crucial insights for your next steps. subfinder -d target(.)com -silent | httpx | nuclei -t technologies/tech-detect).)yaml

Are you tired of chasing vulnerability ghosts? We built ProjectDiscovery because we were. We saw too many security teams drowning in false positives and version-based alerts that didn't reflect the real-world risk.  We changed vulnerability management with four core principles👇

Recent AI-assisted intrusions have made something very clear for security leaders: the challenge isn’t visibility anymore; it’s confidence. Teams don’t need more alerts; they need to know which ones are real. Learn more in our new whitepaper: projectdiscovery.io/whitepapers/...

Introducing Neo: a cloud-based AI security engineer for real-world security work. Neo owns workflows like vuln triage, feature reviews, pentesting, and continuous compliance. It learns your stack, remembers context, & runs tasks in parallel in isolated sandboxes. projectdiscovery.io/blog/introdu...

Tired of manually tracking security vulnerabilities? Nuclei offers Linear issue tracking, a handy feature that creates and tracks issues directly from your scans, helping you get to resolution faster. Check out our GitHub repository. 👇  https://github.com/projectdiscovery/nuclei/pull/5601

Running into an error while writing a Nuclei template? Here's a simple way to fix them.👇

Are you the kind of bug bounty hunter people want to work with?  4 Essentials to build your reputation: ✅Get Permission ✅Stay in Scope ✅Be Transparent ✅Take Your Time Read the full blog to learn the 4 essentials of good bug bounty etiquette👇 https://tinyurl.com/4pvxtrhh

Need to confirm a vulnerability in Nuclei? Meet Analyzers!🤝 This is a concept introduced in Nuclei fuzzing that allows the engine to make additional verification requests, based on a specific logic, to confirm a vulnerability.

Happy Thanksgiving to those who celebrate today. 🌀 We are deeply grateful for our community, the base of everything. Thank you for making ProjectDiscovery what it is today. Spread the gratitude 👇 What are you grateful for today?