# Install nuclei with Homebrew, apk, dnf, MacPorts, Nix, scoop HTTP/DNS scanner configurable via YAML templates. Version 3.11.0 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#nuclei. ## Install ```sh sudo av install brew:nuclei ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install nuclei ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install nuclei ``` Evidence: MacPorts ports tree: security/nuclei/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add nuclei ``` Evidence: Alpine Linux edge package indexes: nuclei from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install nuclei ``` Evidence: Fedora Rawhide package metadata: nuclei from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#nuclei ``` Evidence: nixpkgs package indexes: pkgs/by-name/nu/nuclei/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - Scoop (92%): ```sh scoop install main/nuclei ``` Evidence: Scoop official bucket manifest trees: bucket/nuclei.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:nuclei - **Package manager:** Homebrew - **Version:** 3.11.0 - **Source summary:** HTTP/DNS scanner configurable via YAML templates - **Homepage:** - **Repository:** - **Last updated:** 2026-07-26T19:43:17+02:00 - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - nuclei (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 3.11.0 ## Project history and usage Nuclei is ProjectDiscovery's Go-based, template-driven vulnerability scanner. Its core package identity is the split between a fast scanning engine and a community-maintained YAML template ecosystem. ### Project history The nuclei repository was created on 2020-04-03, and the companion nuclei-templates repository followed on 2020-04-04. The README describes Nuclei as a modern high-performance scanner using simple YAML templates to model real vulnerability checks with low false positives. ProjectDiscovery's documentation and README emphasize extensibility: templates can cover HTTP, DNS, TCP, SSL, WHOIS, JavaScript, code, file, headless, and other protocol modes, with bulk scanning, template filtering, workflows, output formats, and CI/CD integration. ### Adoption history Nuclei's adoption is inseparable from nuclei-templates. The template repository describes itself as a community-curated list for the nuclei engine; on 2026-07-01 its README statistics listed 11,997 files, 873 directories, thousands of CVE/vulnerability/discovery tags, and KEV-oriented coverage. The upstream README says Nuclei is used and contributed to by Fortune 500 enterprises, government agencies, and universities. It is common in bug bounty, attack-surface management, pentest regression, and DevSecOps workflows because checks can be shared as small YAML files rather than compiled scanner plugins. ### How it is used Typical package use starts with `nuclei -u target` or `nuclei -l targets.txt`, then narrows by template path, tags, severity, protocol type, or template ID. Users update templates, run new templates only, export JSONL or reports, write custom templates, and chain Nuclei after discovery tools that produce host or URL lists. Security teams use it as a repeatable regression scanner: turn a finding into a template, commit the template, rerun it across staging or production, and keep checking that the vulnerability does not reappear. ### Why package nerds care Nuclei matters because it made the packageable unit of vulnerability knowledge a readable YAML template. That lowered the cost of sharing checks across bug bounty hunters, consultancies, and internal security teams. ### Timeline - 2020-04-03: nuclei GitHub repository created. - 2020-04-04: nuclei-templates GitHub repository created. - 2026-07-01: point-in-time template README statistics listed 11,997 files and 873 directories. ### Related projects - nuclei-templates - ProjectDiscovery httpx - ProjectDiscovery subfinder - ProjectDiscovery naabu - Interactsh ### Sources - - - - - - - - ## Security Notes broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.config/nuclei/config.yaml ## Credential files - Unix: ~/.pdcp/credentials.yaml ## Other Package-Manager Records - Nix - nuclei: normalized package name match | nixpkgs package indexes: pkgs/by-name/nu/nuclei/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - nuclei - 3.11.0-r0: normalized package name match | Alpine Linux edge package indexes: nuclei from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Vulnerability scanner built on a simple YAML-based DSL | https://docs.projectdiscovery.io/tools/nuclei - apk - nuclei-doc - 3.11.0-r0: normalized package name match | Alpine Linux edge package indexes: nuclei-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Vulnerability scanner built on a simple YAML-based DSL (documentation) | https://docs.projectdiscovery.io/tools/nuclei - dnf - nuclei - 3.11.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: nuclei from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Fast, customizable YAML-based vulnerability scanner | https://github.com/projectdiscovery/nuclei - MacPorts - nuclei: normalized package name match | MacPorts ports tree: security/nuclei/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/nuclei: normalized package name match | Scoop official bucket manifest trees: bucket/nuclei.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/nuclei.yml](https://github.com/mxcl/pkgdb/blob/main/combined/nuclei.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph