☄️ Exciting News for Aspiring Bug Hunters! ☄️
💥 Enrollments are now open for Brut Ethical Hacking and Basic to Advanced Web Penetration Testing (Bug Bounty) courses, starting January 2025!
Get ready to dive deep into the world of ethical hacking and bug bounty hunting, guided by industry professionals. Whether you are a complete beginner or looking to advance your skills, this course is tailored for you.
Course Highlights:
• Comprehensive training on Business Logic, SQL Injection, and more.
• 40 hours of live, online sessions.
• Practical, hands-on exercises to master real-world vulnerabilities.
• Pathway to becoming a skilled bug hunter and advancing your cybersecurity career.
🗓 Classes Begin: January 2025 (PAID COURSE)
📞 Contact: Whatsapp for details and enrollment.
🌐 Visit: Brut Security
💥 Enrollments are now open for Brut Ethical Hacking and Basic to Advanced Web Penetration Testing (Bug Bounty) courses, starting January 2025!
Get ready to dive deep into the world of ethical hacking and bug bounty hunting, guided by industry professionals. Whether you are a complete beginner or looking to advance your skills, this course is tailored for you.
Course Highlights:
• Comprehensive training on Business Logic, SQL Injection, and more.
• 40 hours of live, online sessions.
• Practical, hands-on exercises to master real-world vulnerabilities.
• Pathway to becoming a skilled bug hunter and advancing your cybersecurity career.
Please open Telegram to view this post
VIEW IN TELEGRAM
👍3
Extract all endpoints from a JS File and take your bug 🐞
✅Method one
✅Method two
#infosec #cybersec #bugbountytips
✅Method one
waybackurls HOSTS | tac | sed "s#\\\/#\/#g" | egrep -o "src['\"]?
15*[=: 1\5*[ '\"]?[^'\"]+.js[^'|"> ]*" | awk -F '/'
'{if(length($2))print "https://"$2}' | sort -fu | xargs -I '%' sh
-c "curl -k -s \"%)" | sed \"s/[;}\)>]/\n/g\" | grep -Po \" (L'1|\"](https?: )?[/1{1,2}[^'||l"> 1{5,3)|(\.
(get|post|ajax|load)\s*\(\5*['||\"](https?:)?[/1{1,2}[^'||\"> ]
{5,})\"" | awk -F "['|"]" '{print $2}' sort -fu
✅Method two
cat JS.txt | grep -aop "(?<=(\"|\'|' ))\/[a-zA-Z0-9?&=\/-#.](?= (\"||'|'))" | sort -u | tee JS.txt
#infosec #cybersec #bugbountytips
1👍32❤11🔥10🤨3🐳2
Don’t forget the reactions and stars!
They fuel my energy to post such contents🔋 ✨ .
They fuel my energy to post such contents
Please open Telegram to view this post
VIEW IN TELEGRAM
👍17
⚡️A list of companies that accept Responsible Disclosure
✅bug-bounties.as93.net
#bugbountytips #bugbounty
✅bug-bounties.as93.net
#bugbountytips #bugbounty
👍7🤨4❤1🔥1👨💻1
Using TLDFinder with the Netlas Module 🔍
Check out our latest article, where we walk you through setting up ProjectDiscovery TLDFinder and using it alongside Netlas data for top-level domains and subdomains searching.
👉 Read now: https://netlas.io/blog/tldfinder_and_netlas/
Check out our latest article, where we walk you through setting up ProjectDiscovery TLDFinder and using it alongside Netlas data for top-level domains and subdomains searching.
👉 Read now: https://netlas.io/blog/tldfinder_and_netlas/
netlas.io
Using TLDFinder with Netlas - Netlas Blog
This article will look at using the TLDFinder tool to find top level domains and subdomains using the Netlas integration.
👍5❤4
⚡️CVE-2024-50379/CVE-2024-56337 : Apache Tomcat Patches Critical RCE Vulnerability
🔥Exploit : https://github.com/SleepingBag945/CVE-2024-50379
👇Dorks:
HUNTER :/product.name="Apache Tomcat"
FOFA : product="Apache-Tomcat"
SHODAN : product:"Apache-Tomcat"
🔥Exploit : https://github.com/SleepingBag945/CVE-2024-50379
👇Dorks:
HUNTER :/product.name="Apache Tomcat"
FOFA : product="Apache-Tomcat"
SHODAN : product:"Apache-Tomcat"
❤7👍2
🎄 Merry Christmas from Brut Security! 🎅
Wishing you and your loved ones a season filled with joy, peace, and happiness. May this festive time bring warmth to your heart and cherished moments with your loved ones.
Thank you for being a part of our community!
Happy Holidays! 🎉
#MerryChristmas #Cybersecurity #BrutSecurity
Wishing you and your loved ones a season filled with joy, peace, and happiness. May this festive time bring warmth to your heart and cherished moments with your loved ones.
Thank you for being a part of our community!
Happy Holidays! 🎉
#MerryChristmas #Cybersecurity #BrutSecurity
1❤14👍2🔥2
Please open Telegram to view this post
VIEW IN TELEGRAM
Medium
Best Bug Bounty and Pentesting Methodology for Beginners: A Step-by-Step Guide
Bug bounty programs and penetration testing (pentesting) are popular ways for ethical hackers to make money while helping companies enhance…
❤14👍2
⚡️Tiny-XSS-Payloads - A collection of tiny XSS Payloads that can be used in different contexts.
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
👍11
⚡You can use #httpx to request any path and see the status code and other details on the go, filter, or matcher flags if you want to be more specific.
✅httpx -path /swagger-api/ -status-code -content-length
✅httpx -path /swagger-api/ -status-code -content-length
👍16🔥6❤1
Fuxploider: a free tool for finding and exploiting flaws in file upload forms. It spots allowed file types and finds out the best way to upload malicious files onto a website.
https://t.co/uP1HxJIdpC
https://t.co/uP1HxJIdpC
❤7👍4
Using theHarvester with the Netlas Module 🔍
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
netlas.io
Using theHarvester with Netlas - Netlas Blog
In this article we will look at using theHarvester tool to find subdomains with the Netlas integration.
❤5👍3
🔖 Free Tool for Finding Open S3 Buckets and Files
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
❤10👍3🔥2
🎉 Happy New Year, Brut Fam! 🎉
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
❤14🔥3🤝1
👍1
⚡️SqliSniper: Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
✅https://github.com/danialhalo/SqliSniper
✅https://github.com/danialhalo/SqliSniper
👍8❤5
Learn from a proven bug hunter with extensive experience on platforms like Bugcrowd, HackerOne, and Immunefi.
Harsh D Ranjan is a recognized expert in bug bounty programs with verified profiles:
• Bugcrowd
• HackerOne
• Immunefi
• In-depth exploration of bug bounty methodologies
• Practical guidance for platforms like Bugcrowd, HackerOne, and Immunefi
• Real-world examples of impactful vulnerability reports
• Hands-on practice to prepare you for live bug bounty programs
🕒 Class Timings: Tuesday & Wednesday, 3:00–5:00 PM IST
📆 Duration: 2–3 months
👥 Max Slots: 10 participants per batch
📞 DM on WhatsApp to Book Your Slot: https://wa.link/7j7p6g
• Direct mentorship from an experienced bug hunter
• Small class size for personalized attention
• Gain skills for earning through bug bounty programs
Please open Telegram to view this post
VIEW IN TELEGRAM
1🔥5❤1👍1🗿1