⚡️CVE-2024-50379/CVE-2024-56337 : Apache Tomcat Patches Critical RCE Vulnerability
🔥Exploit : https://github.com/SleepingBag945/CVE-2024-50379
👇Dorks:
HUNTER :/product.name="Apache Tomcat"
FOFA : product="Apache-Tomcat"
SHODAN : product:"Apache-Tomcat"
🔥Exploit : https://github.com/SleepingBag945/CVE-2024-50379
👇Dorks:
HUNTER :/product.name="Apache Tomcat"
FOFA : product="Apache-Tomcat"
SHODAN : product:"Apache-Tomcat"
❤7👍2
🎄 Merry Christmas from Brut Security! 🎅
Wishing you and your loved ones a season filled with joy, peace, and happiness. May this festive time bring warmth to your heart and cherished moments with your loved ones.
Thank you for being a part of our community!
Happy Holidays! 🎉
#MerryChristmas #Cybersecurity #BrutSecurity
Wishing you and your loved ones a season filled with joy, peace, and happiness. May this festive time bring warmth to your heart and cherished moments with your loved ones.
Thank you for being a part of our community!
Happy Holidays! 🎉
#MerryChristmas #Cybersecurity #BrutSecurity
1❤14👍2🔥2
Please open Telegram to view this post
VIEW IN TELEGRAM
Medium
Best Bug Bounty and Pentesting Methodology for Beginners: A Step-by-Step Guide
Bug bounty programs and penetration testing (pentesting) are popular ways for ethical hackers to make money while helping companies enhance…
❤14👍2
⚡️Tiny-XSS-Payloads - A collection of tiny XSS Payloads that can be used in different contexts.
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
✅tinyxss.terjanq.me
#xss #BugBounty #CyberSecurity
👍11
⚡You can use #httpx to request any path and see the status code and other details on the go, filter, or matcher flags if you want to be more specific.
✅httpx -path /swagger-api/ -status-code -content-length
✅httpx -path /swagger-api/ -status-code -content-length
👍16🔥6❤1
Fuxploider: a free tool for finding and exploiting flaws in file upload forms. It spots allowed file types and finds out the best way to upload malicious files onto a website.
https://t.co/uP1HxJIdpC
https://t.co/uP1HxJIdpC
❤7👍4
Using theHarvester with the Netlas Module 🔍
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
In our latest article, we demonstrate how to leverage the theHarvester framework integrated with Netlas to efficiently discover subdomains.
👉 Read now: https://netlas.io/blog/theharvester_and_netlas/
netlas.io
Using theHarvester with Netlas - Netlas Blog
In this article we will look at using theHarvester tool to find subdomains with the Netlas integration.
❤5👍3
🔖 Free Tool for Finding Open S3 Buckets and Files
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
🎯 Purpose:Search for open Amazon S3 buckets and locate potentially interesting files efficiently.
✅ Tool Links:
Explore Open S3 Buckets: https://buckets.grayhatwarfare.com
📌 Why This is Useful:Helps identify misconfigured S3 buckets.
Uncover sensitive data or files accidentally exposed to the public.
❤10👍3🔥2
🎉 Happy New Year, Brut Fam! 🎉
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
2024 was incredible—together, we shared 1,500+ resources and grew to an 8.5K+ community! Your support makes it all worthwhile.
💪
If you’ve found value in this journey, you can support me with a ☕: https://buymeacoffee.com/brutsecurity
Wishing you a safe, successful, and prosperous 2025! Let’s make it even bigger and better! 🚀
❤14🔥3🤝1
👍1
⚡️SqliSniper: Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
✅https://github.com/danialhalo/SqliSniper
✅https://github.com/danialhalo/SqliSniper
👍8❤5
Learn from a proven bug hunter with extensive experience on platforms like Bugcrowd, HackerOne, and Immunefi.
Harsh D Ranjan is a recognized expert in bug bounty programs with verified profiles:
• Bugcrowd
• HackerOne
• Immunefi
• In-depth exploration of bug bounty methodologies
• Practical guidance for platforms like Bugcrowd, HackerOne, and Immunefi
• Real-world examples of impactful vulnerability reports
• Hands-on practice to prepare you for live bug bounty programs
🕒 Class Timings: Tuesday & Wednesday, 3:00–5:00 PM IST
📆 Duration: 2–3 months
👥 Max Slots: 10 participants per batch
📞 DM on WhatsApp to Book Your Slot: https://wa.link/7j7p6g
• Direct mentorship from an experienced bug hunter
• Small class size for personalized attention
• Gain skills for earning through bug bounty programs
Please open Telegram to view this post
VIEW IN TELEGRAM
1🔥5❤1👍1🗿1
⚡️Want to download 100+ Bug Bounty Tips collected from X?
✅Download the PDF from here - https://t.iss.one/brutsecurity/767
#BugBounty #bugbountytips
✅Download the PDF from here - https://t.iss.one/brutsecurity/767
#BugBounty #bugbountytips
👍7🔥3
⚡️GoSearch - OSINT tool for searching people's digital footprint and leaked passwords across various social networks, written in Go.
✅https://github.com/ibnaleem/gosearch
#bugbounty #bugbountytips #cybersecurity
✅https://github.com/ibnaleem/gosearch
#bugbounty #bugbountytips #cybersecurity
👍8❤4🔥2