Utilities
Gather community nuclei templates into one directory
Organize community Nuclei templates from across the ecosystem in one place.
overview
What cent does
cent clones scattered community nuclei template repositories and gathers their YAML checks into a single folder. The official ProjectDiscovery set is large, but useful detection also lives in personal and team repos that nuclei does not pull by default. cent collects that long tail.
A config file lists the repositories to clone. cent fetches them in parallel with --threads, keeps only the YAML templates unless --keepfolders is set, and writes one directory you point nuclei at. Rerun whenever you want the newest community detections.
Trickest runs cent as a managed Utilities node: config in, folder of templates out. Run it ahead of nuclei to feed an expanded community-sourced template set, then scope the scan itself by tags or severity.
source github.com/xm1k3/cent
use cases
Where cent fits
Expand nuclei's template coverage
Pull community templates from many repositories into one folder so a nuclei scan checks for far more than the default set ships with.
Build a curated template directory
Maintain a config of trusted template repos and rerun cent to assemble a single, consistent directory the rest of your workflows share.
Refresh templates on a schedule
Run cent before each scan cycle so newly published community detections are pulled in and nuclei runs against current checks.
Keep only the YAML you need
Let cent save only the template files by default, or keep full folders with --keepfolders when a repo's structure matters, so the output stays lean.
reference
cent inputs and flags
| Name | Type | Flag | Description |
|---|---|---|---|
| config | FILE | · | Config file listing the template repositories to clone. |
| threads | STRING | --threads | Threads to use when cloning repositories (default 10). |
| keepfolders | BOOLEAN | --keepfolders | Keep full folders; by default cent saves only the YAML files. |
| console | BOOLEAN | --console | Print progress and collected templates to the console. |
Showing key inputs. cent exposes 4 inputs in total.
example
Run cent
# collect the configured community template repos into one foldercent --config repos.yaml -p community-templates --threads 20 --keepfolders[INF] reading config: repos.yaml (46 repositories)[INF] cloning with 20 threads, keeping .yaml onlycommunity-templates/cves/2023/CVE-2023-27350.yamlcommunity-templates/exposures/configs/exposed-env-file.yamlcommunity-templates/misconfiguration/http-missing-security-headers.yamlcommunity-templates/vulnerabilities/wordpress/wp-xmlrpc-pingback.yamlcommunity-templates/technologies/tech-detect.yaml[INF] deduplicated and saved 1,914 templates from 46 repositoriesguidance
Choosing cent
Use cent to assemble a community-sourced nuclei template set before a scan. It gathers templates; it does not scan. Its folder output feeds a nuclei templates input. Run it ahead of nuclei whenever you want broader coverage than the default templates provide.
nuclei
Runs the templates cent collects. cent is the upstream step that builds the expanded template directory.
find-gh-poc
Hunts GitHub for proof-of-concept exploits. cent specifically aggregates ready-to-run nuclei templates.
gh-scraper
General GitHub content scraper. cent is purpose-built to clone and organize nuclei template repos.
faq
cent questions
related
More Utilities tools
cewl
Spider a URL and return a wordlist for password crackers.
dnsgen
Wordlist and mined-word subdomain permutation.
pup
CSS selectors over HTML, the jq counterpart for markup.
unfurl
Extract chosen URL parts from stdin into clean line lists.
whisper
Speech to txt, vtt, srt, and json from an audio file or folder.
youtube-transcript
Public caption tracks to transcript.txt and results.jsonl.
Run cent yourself
A config of template repos feeds cent, which clones them into one folder and hands it to nuclei so a scan with the expanded community set writes findings as a queryable output.
Facts on this page come from the live Trickest tool library.