Brut Security
@brutsecurity
14.7K subscribers
911 photos
73 videos
287 files
967 links
✅Queries: @wtf_brut
🛃WhatsApp: wa.link/brutsecurity
🈴Training: brutsec.com
📨E-mail: [email protected]
Download Telegram
About
Blog
Apps
Platform
Join
Brut Security
14.7K subscribers
Brut Security
This media is not supported in your browser
VIEW IN TELEGRAM
👀Just because a subdomain exists in public sources doesn’t mean it’s live.

You can chain Subfinder with Shuffledns to enumerate subdomains & resolve only valid ones.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥18❤6👍2👏2
4.06K viewsedited  
Brut Security
SSTI.txt
17.8 KB
100+ SSTI Payloads
👍10🔥6❤1
4.4K views
Brut Security
Recon Skills and Tips.pptx.pdf
825.4 KB
💵💵💵Recon Skills and Tips by Godfather ORWA ⚡️
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥13❤4👍3
4.06K views
Brut Security
Browser Syncjacking
Check it out: lnkd.in/gBnd-YJu
🔥18🤨7👍4
4.13K views
Brut Security
Where is the reactions guys??
❤19
3.78K views
Brut Security
Cross Site Scripting (XSS) Through File Upload SVG ---> https://t.iss.one/brutsecurity_poc/38
❤15
3.82K viewsedited  
Brut Security
🤣26🗿4👍3🐳3❤2
3.82K views
Brut Security
⚠️Data Breach Alert - OpenAI⚠️

A threat actor claims to be in possession of login credentials (email and password) for 20 million OpenAI accounts.
Please open Telegram to view this post
VIEW IN TELEGRAM
🗿25🔥3😱3👍1👨‍💻1
3.9K viewsedited  
Brut Security
🔥Gourlex is a simple tool that can be used to extract URLs and paths from web pages. It can be helpful during web application assessments to uncover additional targets.

✅https://github.com/trap-bytes/gourlex
Please open Telegram to view this post
VIEW IN TELEGRAM
❤13👍3🐳1
4.35K viewsedited  
Brut Security
🔥 CRTO Aspirants & Red Teamers – Must-Check Resource!

⚡If you're preparing for the Certified Red Team Operator (CRTO) or want to refine your red teaming skills, this GitHub repo is a goldmine.

https://github.com/h3ll0clar1c3/CRTO
👍13❤8🔥3
4.89K views
Brut Security
☄️☄️User information Leak Vulnerability in GitHub P1 Bug Bounty live __ POC

https://t.iss.one/brutsecurity_poc/39
Please open Telegram to view this post
VIEW IN TELEGRAM
❤13🔥7👍1🗿1
3.91K views
Brut Security
Reactions Please 👀
Please open Telegram to view this post
VIEW IN TELEGRAM
❤18🤝2👍1
3.88K views
Brut Security
☄️CVE-2023-34960
Root cause:
- https://github.com/chamilo/chamilo-lms/blob/d24bddb2227d226fdd1bfaa31f51850d7343186a/public/main/webservices/additional_webservices.php#L63
Please open Telegram to view this post
VIEW IN TELEGRAM
❤12🗿4🤔2🐳1
4.04K views
Brut Security
📚 Good collection of cheat sheets, guides and resources on #Pentesting, reverse engineering and exploit dev 🛡️

- https://x0rb3l.github.io/Cyber-Bookmarks/bookmarks.html
🔥15❤5👍3🗿2
4.59K views
Brut Security
Advanced Web Hacking.pdf
10.2 MB
NotSoSecure Advanced Web Hacking
👍13🔥6
4.64K views
Brut Security
⚡️Misconfig Mapper - A fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets.

☄️https://github.com/intigriti/misconfig-mapper
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥17👍5
4.28K views
Brut Security
☄️SubCerts is an automated tool designed to extract subdomains from certificate transparency logs using the crt.sh API. This tool is able to identify subdomains of a target domain by leveraging publicly available certificates.

⚠️https://github.com/0xJin/SubCerts
Please open Telegram to view this post
VIEW IN TELEGRAM
👍27🔥11🫡8❤2
4.28K views
Brut Security
📈📉Your one Reaction is my reason to post such contents.
Please open Telegram to view this post
VIEW IN TELEGRAM
👍55🫡18🔥10🗿4❤2👨‍💻1
3.84K views
Brut Security
🔒Bug Bounty Tip: Algolia API Key Exposure Can Lead to Web Log Access with CRUD Permissions

⭐️If an Algolia API key is exposed, it may allow access to search logs with Create, Read, Update, and Delete (CRUD) privileges. This can reveal user queries and other sensitive data.

🔍 Tip: Always inspect main.js files for exposed keys.

#bugbountytip #bugbounty #infosec #hacking #hacker
Please open Telegram to view this post
VIEW IN TELEGRAM
❤13👍7🔥3
4.09K viewsedited  
Brut Security
CTF Search with 24k+ CTF writeups, covering everything from web exploitation to reverse engineering. Check it out!

- ctfsearch.hackmap.win

#infosec #cybersec #bugbountytips
20🔥22❤6👍2
4.53K views
Brut Security
Bleach's Bug Bounty Blues
<unknown>
🫡6❤3🤣2👍1
4.15K viewsMr Rahim,