Please open Telegram to view this post
VIEW IN TELEGRAM
👍4
CVE-2024-11667: Directory Traversal in Zyxel Firewalls, 7.3 rating❗️
A vulnerability in the web interface of some firewalls allows an attacker to download or upload files using a special URL.
Search at Netlas.io:
👉 Link: https://nt.ls/agozE
👉 Dork: http.favicon.hash_sha256:9a02f3cf948f9409c25070f2f057b69dda5d0aaf7fa8d056552e8bda8295ca1f
Vendor's advisory: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024
A vulnerability in the web interface of some firewalls allows an attacker to download or upload files using a special URL.
Search at Netlas.io:
👉 Link: https://nt.ls/agozE
👉 Dork: http.favicon.hash_sha256:9a02f3cf948f9409c25070f2f057b69dda5d0aaf7fa8d056552e8bda8295ca1f
Vendor's advisory: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-27-2024
👍9❤1🗿1
Please open Telegram to view this post
VIEW IN TELEGRAM
1👍3🔥2❤1
This media is not supported in your browser
VIEW IN TELEGRAM
“It’s the 1st of December Again!”
Another year is slipping by, but guess what? There’s still a whole month left to make it count. For all the bug hunters out there, this is your sign to look back and appreciate how far you’ve come—and to push even harder.
Remember that first bounty? That late-night rush when you cracked a tough challenge? The time you got that “Valid Vulnerability” email that made the sleepless nights worth it?
Bug bounty is a journey. It’s a grind, a game of patience, persistence, and passion. It’s about falling in love with the process—of learning, breaking, fixing, and growing.
If you’re stuck or frustrated, don’t let it define you. Learn from your misses, keep reading, practicing, and hunting. The next breakthrough might be just a scan, payload, or overlooked endpoint away.
December is the perfect month to reflect and refocus. Write those reports, finish that pending recon, or master a new skill. Close the year knowing you gave it your all.
Let’s finish this year strong, hunters. The world’s full of bugs waiting to be squashed—and the next one could be yours.
✈️BrutSecurity
#KeepHunting #BugBountyLife #1stDecemberMomentum
Another year is slipping by, but guess what? There’s still a whole month left to make it count. For all the bug hunters out there, this is your sign to look back and appreciate how far you’ve come—and to push even harder.
Remember that first bounty? That late-night rush when you cracked a tough challenge? The time you got that “Valid Vulnerability” email that made the sleepless nights worth it?
Bug bounty is a journey. It’s a grind, a game of patience, persistence, and passion. It’s about falling in love with the process—of learning, breaking, fixing, and growing.
If you’re stuck or frustrated, don’t let it define you. Learn from your misses, keep reading, practicing, and hunting. The next breakthrough might be just a scan, payload, or overlooked endpoint away.
December is the perfect month to reflect and refocus. Write those reports, finish that pending recon, or master a new skill. Close the year knowing you gave it your all.
Let’s finish this year strong, hunters. The world’s full of bugs waiting to be squashed—and the next one could be yours.
✈️BrutSecurity
#KeepHunting #BugBountyLife #1stDecemberMomentum
2👍14❤5🗿3
Exploit AWS metadata & user data access in Bug Bounty & CTF challenges!
🔗 https://github.com/Lu3ky13/Unauthorized-Access-to-Metadata-and-User-Data-like-CTF
#BugBounty #bugbountytip
🔗 https://github.com/Lu3ky13/Unauthorized-Access-to-Metadata-and-User-Data-like-CTF
#BugBounty #bugbountytip
👍9
🔖Ex-param - an automated tool designed for finding reflected parameters for XSS vulnerabilities
✅https://github.com/rootDR/ex-param
✅https://github.com/rootDR/ex-param
❤7👍3🗿1
This media is not supported in your browser
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥14👍6❤5🤨1
Please open Telegram to view this post
VIEW IN TELEGRAM
👍12🔥4🐳2
Please open Telegram to view this post
VIEW IN TELEGRAM
❤6🔥4👍1
🔍Morpheus IOC Scanner - A powerful tool for detecting and analyzing suspicious files, including ransomware and Indicators of Compromise (IOCs). With custom-built rules and advanced integrations, it offers detailed insights to identify sophisticated threats and bolster your defense against cyber risks.
🔗https://github.com/phantom0004/morpheus_IOC_scanner
🔗https://github.com/phantom0004/morpheus_IOC_scanner
👍20🔥5
Do give reaction on the post guys, it helped me to stay motivated and to post content like this.🥸
Please open Telegram to view this post
VIEW IN TELEGRAM
👍41❤5🔥2
CVE-2024-8672: Code Injection in Widget Options WordPress Plugin, 9.9 rating 🔥
The vulnerability allows an attacker to enter data that is transmitted without proper filtering. This could potentially lead to remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/xOEZp
👉 Dork: http.body:"plugins/widget-options"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/widget-options/widget-options-the-1-wordpress-widget-block-control-plugin-407-authenticated-contributor-remote-code-execution
The vulnerability allows an attacker to enter data that is transmitted without proper filtering. This could potentially lead to remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/xOEZp
👉 Dork: http.body:"plugins/widget-options"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/widget-options/widget-options-the-1-wordpress-widget-block-control-plugin-407-authenticated-contributor-remote-code-execution
❤5👍5
💖🦄 FAVICORN - A versatile tool to search websites using favicons!
🔍How it works:
Simply input a favicon, and Favicorn fetches search result links across 10+ platforms, making it a handy tool for researchers and testers alike.
🔗https://github.com/sharsil/favicorn
🔍How it works:
Simply input a favicon, and Favicorn fetches search result links across 10+ platforms, making it a handy tool for researchers and testers alike.
🔗https://github.com/sharsil/favicorn
👍14❤1
https://x.com/wtf_brut/status/1863893133379150234
Do Follow Me On🐣
Have Shared Almost 2000+ Bug Bounty Tips.😱 🇷🇺 🇺🇸
Do Follow Me On
Have Shared Almost 2000+ Bug Bounty Tips.
Please open Telegram to view this post
VIEW IN TELEGRAM
What Browser Do You Use?
Anonymous Poll
37%
Chrome
52%
FireFox
2%
Arc
28%
Brave
3%
Safari
3%
Opera GX
👍7❤2
🎉 Unlock That 20% Pro Labs Discount! 🎉
Alright, hackers, here’s the deal: Hack The Box Pro Labs just got REAL! 💥 If you’re ready to leave the beginner stuff in the dust and dive into legit red team missions, I’ve got an exclusive 20% off waiting for you. But here’s the catch – only 100 of you can snag this deal. 👀
💥 Use code:
at checkout for 20% off the annual Pro Labs subscription! It’s high-level hacking in real enterprise environments. Ready to go pro? 🕶️
🔗Checkout Here - https://hackthebox.com/hacker/pro-labs
Jump on this quick – or you might miss the boat. 🚤💨 #HackTheBox #LevelUp #ProLabs
Alright, hackers, here’s the deal: Hack The Box Pro Labs just got REAL! 💥 If you’re ready to leave the beginner stuff in the dust and dive into legit red team missions, I’ve got an exclusive 20% off waiting for you. But here’s the catch – only 100 of you can snag this deal. 👀
💥 Use code:
brutsecurityprolabs20
🔗Checkout Here - https://hackthebox.com/hacker/pro-labs
Jump on this quick – or you might miss the boat. 🚤💨 #HackTheBox #LevelUp #ProLabs
👍5❤1