Automated CVE scanning of Bug Bounty programs with Nuclei and Project Discovery
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 21 nodes and runs on a schedule (every day). Along the way it connects Gmail. It also calls raw.githubusercontent.com and api.projectdiscovery.io over HTTP.
How it runs
Trigger: On a schedule (every day).
- Get All Bug Bounty Domains (HTTP Request): calls raw.githubusercontent.com
- Create domains.txt (Convert to File): converts data to a file (to text)
- Upload domains.txt (SSH): work with file
- GET Last CVEs (PROJECT DISCOVERY) (HTTP Request): calls api.projectdiscovery.io
- Split CVEs (Split Out): splits a list into separate items
- Loop Over CVEs (Loop Over Items (Split in Batches)): loops over the items in batches
- Template Exists Filter (Filter): keeps only the items that match a condition
- Date Filter (If): checks a condition and branches into true / false
- Loop Over Templates (Loop Over Items (Split in Batches)): loops over the items in batches
- Set Variables (Edit Fields (Set)): sets 4 fields: CVE, CVSS-Score, Template…
…plus 10 more steps. See the full node list below.
Services it uses
HTTP calls to: raw.githubusercontent.com, api.projectdiscovery.io
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (11)
- Schedule Trigger
n8n-nodes-base.scheduleTrigger - HTTP Request
n8n-nodes-base.httpRequest - Convert to File
n8n-nodes-base.convertToFile - SSH
n8n-nodes-base.ssh - Loop Over Items (Split in Batches)
n8n-nodes-base.splitInBatches - Split Out
n8n-nodes-base.splitOut - Filter
n8n-nodes-base.filter - If
n8n-nodes-base.if - Edit Fields (Set)
n8n-nodes-base.set - Gmail
n8n-nodes-base.gmail - Summarize
n8n-nodes-base.summarize
From the author
Description Automates daily CVE-driven scanning against bug bounty scopes. It fetches bug-bounty domains, pulls newly published Project Discovery templates, converts them to Nuclei rules, runs targeted scans, and emails findings. Objective Help security…