Brut Security

CVE-2024-50550: Privilege Escalation in LiteSpeed Cache WP Plugin, 8.1 rating 🔥

Weak security hash verification vulnerability allows an attacker to gain administrative privileges.

Search at Netlas.io:
👉 Link: https://nt.ls/A60iV
👉 Dork: http.body:"plugins/litespeed-cache"

Read more: https://patchstack.com/articles/rare-case-of-privilege-escalation-patched-in-litespeed-cache-plugin/

👍3

3.34K viewsMr Brut, 11:19

Brut Security

Best Motivation Tip Ever

1❤25👍2🔥1

3.63K viewsMr Brut, 13:58

Brut Security

Best Motivation Tip Ever

But Our Bro is Killing It 😂😂 Happy Diwali and 🎃

🗿12🔥5👍1🐳1

3.53K viewsMr Brut, 13:59

Brut Security

CVE-2024-49768: Race Condition in Waitress Python server, 9.1 rating 🔥

Due to an error, the server can process a request even if the connection should have been closed.

Search at Netlas.io:
👉 Link: https://nt.ls/VYS9t
👉 Dork: http.headers.server:"waitress"

Vendor's advisory: https://github.com/Pylons/waitress/security/advisories/GHSA-9298-4cf8-g4wj

👍2🗿2

3.62K viewsMr Brut, 08:10

Brut Security

Setup and host your own blind XSS and SSRF testing tool for free https://github.com/Rahim7X/Argus.git

2🔥9👍2

3.99K viewsMr Rahim, 10:33

Brut Security

🗿18🔥7🐳2❤1

3.39K viewsMr Brut, 04:28

Brut Security

🗡️ List of Websites Giving Free RDP/VPS 🖥️

🔹 sadd.io 🌐
🔸 vpswala.org 🚀
🔹 ihor.ru 💻
🔸 gratisvps.net 🌍
🔹 ionos.com ⚙️
🔸 vultr.com ☁️
🔹 skysilk.com 🌈
🔸 yellowcircle.net 🔆
🔹 apponfly.com/en 📲
🔸 cloudsigma.com 🔒
🔹 ezywatch.com/freevps 🕹️
🔸 digitalocean.com 🐳
🔹 ctl.io/free-trial 🔗
🔸 developer.rackspace.com 🛠️
🔹 my.letscloud.io/sign-up ✨
🔸 ohosti.com/vpshosting.php 🔋
🔹 neuprime.com/l_vds3.php 🖥️

🔔 Note: Some websites may require 💳 credit card verification for trial access.

👍13

4.34K viewsedited 05:26

Brut Security

Find sensitive files using Wayback

waybackurls 123.com | grep - -color -E "1.xls | \\.tar.gz | \\.bak | \\.xml | \\.xlsx | \\.json | \\.rar | \\.pdf | \\.sql | \\.doc | \\.docx | \\.pptx | \\.txt | \\.zip | \\.tgz | \\.7z"

#bugbountytip #bugbounty #bugbountytips

1👍13❤4🔥3

4.18K views10:54

Brut Security

a XSS payload with Alert Obfuscation, for bypass Regex filter

<img src="X" onerror=top[8680439..toString(30)](1337)>

<script>top[8680439..toString(30)](1337)</script>

#infosec #cybersec #bugbountytip

❤11👍6

3.79K views05:41

Brut Security

https://github.com/ferreiraklet/jeeves

Time Based Blind Injection Scanner

GitHub

GitHub - ferreiraklet/Jeeves: Jeeves SQLI Finder

Jeeves SQLI Finder. Contribute to ferreiraklet/Jeeves development by creating an account on GitHub.

1👍7

3.58K views15:00

Brut Security

Reduce Noise in Burp Suite with This Simple Trick! 🔥

💡 Just add the following patterns in Burp Suite under Proxy > Options > TLS Pass Through:

.*\.google\.com

.*\.gstatic\.com

.*\.googleapis\.com

.*\.pki\.goog

.*\.mozilla\..*

If you have any other filters to do share, drop it on comments!

1❤15👍9

4.04K viewsedited 05:09

Brut Security

🔖

Search for leaked Api keys on 📱github

⬇️

Azure open AI

AZURE_OPENAI_API_KEY /[a-f0-9]{32}$/

⬇️

Jira token

/ATATT3[a-zA-Z0-9_\-+=]{184,195}$/

#CyberSecurity #BugBounty #infosec #BugBountyTools #pentest #bugbountytips

Please open Telegram to view this post

VIEW IN TELEGRAM

👍4❤1

3.62K views11:34

Brut Security

🐳10

3.31K viewsMr Rahim, 14:35

Brut Security

❤6👍1

3.24K views15:30

Brut Security

Check for Subdomain Takeover Vulnerabilities

This enumerates subdomains and checks if they resolve. Subdomains that return NXDOMAIN may be vulnerable to takeover if they point to external services.

subfinder -d target.com -silent | while read sub; do host $sub; done | grep "NXDOMAIN"

Replace nasa.gov with your target.

👍12🗿6

3.43K views18:56

Brut Security

☄️ Level Up Your Hacking Skills with Hack The Box Pro Labs! ☄️

Hey everyone! 🔥 If you're looking to take your hacking journey to the next level, Hack The Box just expanded its Pro Labs with 8 new Mini Pro Labs! These advanced labs offer realistic, enterprise-level challenges that dive deep into red teaming, network exploitation, and more.

💥 And here’s the best part – you can now get 25% off the Pro Labs Bundle annual subscription until the end of November! Just use my affiliate link to sign up and support the channel: https://hacktheboxltd.sjv.io/YRDZKJ

✔️ Why go Pro?
- Access challenging, real-world environments to hone your skills.- Tackle new labs like Odyssey and Ascension as they roll out.
- Join a community of dedicated hackers pushing their skills to new heights.

🖥 Get your Pro Labs Bundle now and make the most of this limited-time discount! ✏️ Sign Up Here

Let’s hack and learn together! 🔥▶️📌 #HackTheBox #ProLabs #Cybersecurity

Please open Telegram to view this post

VIEW IN TELEGRAM

👍3❤2🔥1

3.71K viewsedited 06:14

Brut Security

Brut Security pinned a photo

06:14

Brut Security

☄️Bug Bounty Tip: Finding Confidential Documents Fast☄️

1.Use Katana to scan for document URLs:

katana -u subdomainsList -em pdf,docx | tee endpointsPDF_DOC

2. Filter for potentially unredacted files:

grep -i 'redacted.*\.pdf$' endpointsPDF_DOC | sed -E 's/[-_]?redacted//gi' | sort -u | httpx -mc 200 -sc

This script finds document URLs with "redacted" in the name, strips it out, and checks if the unredacted version is accessible.

Admins often leave these unredacted files online by mistake, making them a high-medium (P3) severity finding for bug bounty programs.

Please open Telegram to view this post

VIEW IN TELEGRAM

1❤14👍5

3.57K views10:13

Brut Security

🚨CVE-2024-51482: A 10/10 Severity Vulnerability Exposes ZoneMinder’s SQL Databases

👇Dorks
HUNTER:/product.name="ZoneMinder"
SHODAN: http.favicon.hash:-1218152116
FOFA: app="ZoneMinder"

📰Refer: https://securityonline.info/zoneminders-cve-2024-51482-a-10-10-severity-vulnerability-exposes-sql-databases/

#ZoneMinder #SQL #hunterhow #infosec #infosecurity #OSINT #Vulnerability

2👍7❤2

3.25K viewsedited 05:26

Brut Security

If you’re new to malware development, this playlist is a solid introduction! It covers:
• Native API
• A quick refresher on processes, threads, and handles
• Syscalls

Check it out here: YouTube Playlist

🔥9

3.41K viewsedited 18:57

Brut Security

This media is not supported in the widget

VIEW IN TELEGRAM

🗿31🐳5👍4

3.15K views09:13

About

Blog

Apps

Platform