Please open Telegram to view this post
VIEW IN TELEGRAM
🔥11❤6🫡4👍2
WANT SOME HACKTHEBOX SWAGS? 🎁🔥
Here’s your shot at winning exclusive Cyber Apocalypse 2025 swag packs – hoodies, coasters, phone stands, and more! 💀💻
🔁 Just reshare this post as much as possible!
🏆 Top 4 most reshared posts will WIN!
Tag your hacker buddies and spread the word! Let’s grab that HTB loot! 🚀🔥
✅https://x.com/wtf_brut/status/1898032895970922523
#CyberApocalypse2025 #HackTheBox #CTF
Here’s your shot at winning exclusive Cyber Apocalypse 2025 swag packs – hoodies, coasters, phone stands, and more! 💀💻
🔁 Just reshare this post as much as possible!
🏆 Top 4 most reshared posts will WIN!
Tag your hacker buddies and spread the word! Let’s grab that HTB loot! 🚀🔥
✅https://x.com/wtf_brut/status/1898032895970922523
#CyberApocalypse2025 #HackTheBox #CTF
🔥9🤔4👍3
Brut Security
WANT SOME HACKTHEBOX SWAGS? 🎁🔥 Here’s your shot at winning exclusive Cyber Apocalypse 2025 swag packs – hoodies, coasters, phone stands, and more! 💀💻 🔁 Just reshare this post as much as possible! 🏆 Top 4 most reshared posts will WIN! Tag your hacker…
Share the post as much as you can, I will do giveaway of HTB 1 SWAG kit to you guys :)
🔥5👍2
"If there’s a flaw in the system, then you have the skill to find it!" -Brut_Security
🗿18👍2🫡1
Please open Telegram to view this post
VIEW IN TELEGRAM
❤11👍10
CVE-2025-27622, -27623, -27624, -27625: Multiple vulnerabilitites in Jenkins, medium rating❗️
The vulnerabilities allow attackers to view encrypted secret values and potentially store attacker-controlled content in other users' profiles.
Search at Netlas.io:
👉 Link: https://nt.ls/SyXh2
👉 Dork: http.headers.x_jenkins:*
Vendor's advisory: https://www.jenkins.io/security/advisory/2025-03-05/
The vulnerabilities allow attackers to view encrypted secret values and potentially store attacker-controlled content in other users' profiles.
Search at Netlas.io:
👉 Link: https://nt.ls/SyXh2
👉 Dork: http.headers.x_jenkins:*
Vendor's advisory: https://www.jenkins.io/security/advisory/2025-03-05/
👨💻5🤔1
🚨 The Biggest CTF of the Year is HERE! 🚨
🔥 Cyber Apocalypse CTF 2025 is coming – and it’s FREE for everyone! Whether you’re a beginner or a seasoned hacker, this is your chance to compete, learn, and win from a massive $90,000 prize pool! 💰💻
🛠️ Why Join?
✅ Open to all skill levels – no prior experience needed!
✅ Hands-on challenges in web, crypto, forensics, and more!
✅ Battle it out with the best minds in cybersecurity!
✅ A chance to grab exclusive HTB swag packs!
💡 Join the competition now!
👉 https://hackthebox.com/events/cyber-apocalypse-2025
🔥 Cyber Apocalypse CTF 2025 is coming – and it’s FREE for everyone! Whether you’re a beginner or a seasoned hacker, this is your chance to compete, learn, and win from a massive $90,000 prize pool! 💰💻
🛠️ Why Join?
✅ Open to all skill levels – no prior experience needed!
✅ Hands-on challenges in web, crypto, forensics, and more!
✅ Battle it out with the best minds in cybersecurity!
✅ A chance to grab exclusive HTB swag packs!
💡 Join the competition now!
👉 https://hackthebox.com/events/cyber-apocalypse-2025
😱7👍1
Forwarded from MR. Z
Hey all Just released New tool Dnsprober v1.0.0 , a tool that helps you for dns reconnaissance and with more concurrent and scalable and easy to install run and ability to make different types of DNS queries efficiently, check it out here:
https://github.com/RevoltSecurities/Dnsprober
https://github.com/RevoltSecurities/Dnsprober
GitHub
GitHub - RevoltSecurities/Dnsprober: dnsprober is a fast and multipurpose DNS reconnaissance tool designed for efficient DNS probing…
dnsprober is a fast and multipurpose DNS reconnaissance tool designed for efficient DNS probing and enumeration. It supports multiple DNS queries, custom resolvers, wildcard filtering, and retryabl...
🔥21
AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories.
https://github.com/AggressiveUser/AllForOne
https://github.com/AggressiveUser/AllForOne
🔥32❤8👍8👏6
Please open Telegram to view this post
VIEW IN TELEGRAM
👏8👍5🔥5
Want to find the origin IP?
1-Hunt for a subdomain with no WAF
2-extract the ASN
2-check it on bgp.he.net
3- grab the IP range, and verify a live IP.
Welcome to their world!
#bugbountytips #BugBounty
1-Hunt for a subdomain with no WAF
2-extract the ASN
2-check it on bgp.he.net
3- grab the IP range, and verify a live IP.
Welcome to their world!
#bugbountytips #BugBounty
🔥29👍3😱1
CVE-2025-1661: Path Traversal in The HUSKY WordPress Plugin, 9.8 rating 🔥
The vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.
Search at Netlas.io:
👉 Link: https://nt.ls/OEg7k
👉 Dork: http.body:"plugins/woocommerce-products-filter"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion
The vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.
Search at Netlas.io:
👉 Link: https://nt.ls/OEg7k
👉 Dork: http.body:"plugins/woocommerce-products-filter"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion
😱6🔥4👍2👏1
CVE-2025-25291, -25292 and other: Multiple vulnerabilitites in GitLab, 8.8 rating❗️
Traditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/PDxYA
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/
Traditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/PDxYA
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/
👍4👨💻2