GitHunt
KA

KaanBicaklar/nuclei-MonaCodeScanner

Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 issues in code. Ideal for SAST and CI/CD integration.

๐Ÿง  Nuclei Source Code Analysis Templates

This repository contains a collection of custom Nuclei templates designed for source code security analysis. It includes rules to detect:

  • ๐Ÿ” Hardcoded secrets (API keys, tokens)
  • โš™๏ธ Configuration and .env leaks
  • ๐Ÿž Debug and test routes
  • ๐Ÿ“„ Exposed source code and backup files
  • โš ๏ธ OWASP Top 10 vulnerability patterns in source files

These templates are ideal for SAST (Static Application Security Testing) and CI/CD pipeline integration.

๐Ÿš€ Usage

echo "/path/to/source-code-dir/ | nuclei -t /path/to/templates/language/ -file

๐Ÿค Contributing

Contributions are welcome! Feel free to:

  • Submit new templates (for specific languages, frameworks, or patterns)
  • Improve existing detection rules
  • Report false positives or suggestions via Issues

๐Ÿ™‹โ€โ™‚๏ธ Support / Questions

If you find this project useful, feel free to โญ star it and share with others in the security community.
For any questions, feel free to open an issue.


๐Ÿ›ก๏ธ Stay Secure

Use responsibly. These templates are designed for ethical source code analysis, red team assessments, and CI/CD integration.

KaanBicaklar/nuclei-MonaCodeScanner | GitHunt