Brut Security
15.1K subscribers
960 photos
76 videos
290 files
1.01K links
βœ…DM: @wtf_brut
πŸ›ƒWhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
πŸ“¨Mail: [email protected]
Download Telegram
This media is not supported in your browser
VIEW IN TELEGRAM
πŸ”₯πŸ”₯ZeusLeak – Real-time detection for API keys & tokensβ€”no need to dig through JS files manually.
🀍https://github.com/zeusvlun/zeusleak
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ”₯18😱12❀7πŸ‘6
⚠️CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus

πŸ”½Dorks:
HUNTER :
https://product.name="ManageEngine ADSelfService Plus"
FOFA : product="ManageEngine-ADSelfService-Plus"
SHODAN : title:"ADSelfService Plus"

πŸ–₯Refer:https://securityonline.info/cve-2025-1723-zoho-patches-account-takeover-vulnerability-in-adselfservice-plus/
https://manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html

#hunterhow #infosec #infosecurity #OSINT #Vulnerability
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ‘12πŸ”₯10❀2🐳1
⭐️⭐️NEW BOUNTY PLATFORM https://t.iss.one/brutsecurity_poc/43
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ€”21πŸ‘6❀2
dON'T fORGET tO gIVE rEACTIONSπŸ‘€πŸ‘€
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ”₯32❀12🀝3
🚨 CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana

πŸ‘‡Dorks:
HUNTER : https://product.name="Elastic Kibana"
FOFA : product="Kibana"

πŸ“°Refer:https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution-vulnerability-patched-in-elastic-kibana/

#Kibana#hunterhow #infosec #infosecurity #OSINT #Vulnerability
πŸ”₯5❀3😱3
Please open Telegram to view this post
VIEW IN TELEGRAM
🫑7πŸ‘3😱2
πŸ‘»πŸ‘»πŸ‘»Penetration Testing Notes

πŸ›‘πŸ›‘https://github.com/0xDigimon/PenetrationTesting_Notes-
Please open Telegram to view this post
VIEW IN TELEGRAM
🀝14πŸ‘6❀3πŸ‘3
πŸ”Ž Search for Default Passwords !

pip3 install defaultcreds-cheat-sheet
πŸ‘21πŸ”₯8
πŸ‘»πŸ‘»Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking.

⚠️https://github.com/nicholasaleks/Damn-Vulnerable-Drone
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ”₯11❀6🫑4πŸ‘2
WANT SOME HACKTHEBOX SWAGS? 🎁πŸ”₯

Here’s your shot at winning exclusive Cyber Apocalypse 2025 swag packs – hoodies, coasters, phone stands, and more! πŸ’€πŸ’»

πŸ” Just
reshare this post as much as possible!
πŸ† Top 4 most reshared posts will WIN!

Tag your hacker buddies and spread the word! Let’s grab that HTB loot! πŸš€πŸ”₯

βœ…
https://x.com/wtf_brut/status/1898032895970922523

#CyberApocalypse2025 #HackTheBox #CTF
πŸ”₯9πŸ€”4πŸ‘3
🀣47πŸ‘2πŸ”₯2πŸ‘¨β€πŸ’»1
"If there’s a flaw in the system, then you have the skill to find it!" -Brut_Security
πŸ—Ώ18πŸ‘2🫑1
πŸ‘»πŸ‘»BACK-ME-UP - A tool to automate a bugbounty process as: Tool will execute multiple tools to collect URLs from internet archives then use some useful patterns/RegEx to look for Sensitive Data Leakage in the form of multiple juicy extensions.

⭐️⭐️https://github.com/Dheerajmadhukar/back-me-up
Please open Telegram to view this post
VIEW IN TELEGRAM
❀11πŸ‘10
CVE-2025-27622, -27623, -27624, -27625: Multiple vulnerabilitites in Jenkins, medium rating❗️

The vulnerabilities allow attackers to view encrypted secret values ​​and potentially store attacker-controlled content in other users' profiles.

Search at Netlas.io:
πŸ‘‰ Link: https://nt.ls/SyXh2
πŸ‘‰ Dork: http.headers.x_jenkins:*

Vendor's advisory: https://www.jenkins.io/security/advisory/2025-03-05/
πŸ‘¨β€πŸ’»5πŸ€”1
🚨 The Biggest CTF of the Year is HERE! 🚨

πŸ”₯ Cyber Apocalypse CTF 2025 is coming – and it’s FREE for everyone! Whether you’re a beginner or a seasoned hacker, this is your chance to compete, learn, and win from a massive $90,000 prize pool! πŸ’°πŸ’»

πŸ› οΈ Why Join?
βœ… Open to all skill levels – no prior experience needed!
βœ… Hands-on challenges in web, crypto, forensics, and more!
βœ… Battle it out with the best minds in cybersecurity!
βœ… A chance to grab exclusive HTB swag packs!

πŸ’‘ Join the competition now!
πŸ‘‰ https://hackthebox.com/events/cyber-apocalypse-2025
😱7πŸ‘1
Forwarded from MR. Z
Hey all Just released New tool Dnsprober v1.0.0 , a tool that helps you for dns reconnaissance and with more concurrent and scalable and easy to install run and ability to make different types of DNS queries efficiently, check it out here:
https://github.com/RevoltSecurities/Dnsprober
πŸ”₯21
Where is the reactions 🧐🀨
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ”₯28πŸ‘5😁2
AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories.

https://github.com/AggressiveUser/AllForOne
πŸ”₯32❀8πŸ‘8πŸ‘6