🚨 The Biggest CTF of the Year is HERE! 🚨
🔥 Cyber Apocalypse CTF 2025 is coming – and it’s FREE for everyone! Whether you’re a beginner or a seasoned hacker, this is your chance to compete, learn, and win from a massive $90,000 prize pool! 💰💻
🛠️ Why Join?
✅ Open to all skill levels – no prior experience needed!
✅ Hands-on challenges in web, crypto, forensics, and more!
✅ Battle it out with the best minds in cybersecurity!
✅ A chance to grab exclusive HTB swag packs!
💡 Join the competition now!
👉 https://hackthebox.com/events/cyber-apocalypse-2025
🔥 Cyber Apocalypse CTF 2025 is coming – and it’s FREE for everyone! Whether you’re a beginner or a seasoned hacker, this is your chance to compete, learn, and win from a massive $90,000 prize pool! 💰💻
🛠️ Why Join?
✅ Open to all skill levels – no prior experience needed!
✅ Hands-on challenges in web, crypto, forensics, and more!
✅ Battle it out with the best minds in cybersecurity!
✅ A chance to grab exclusive HTB swag packs!
💡 Join the competition now!
👉 https://hackthebox.com/events/cyber-apocalypse-2025
😱7👍1
Forwarded from MR. Z
Hey all Just released New tool Dnsprober v1.0.0 , a tool that helps you for dns reconnaissance and with more concurrent and scalable and easy to install run and ability to make different types of DNS queries efficiently, check it out here:
https://github.com/RevoltSecurities/Dnsprober
https://github.com/RevoltSecurities/Dnsprober
GitHub
GitHub - RevoltSecurities/Dnsprober: dnsprober is a fast and multipurpose DNS reconnaissance tool designed for efficient DNS probing…
dnsprober is a fast and multipurpose DNS reconnaissance tool designed for efficient DNS probing and enumeration. It supports multiple DNS queries, custom resolvers, wildcard filtering, and retryabl...
🔥21
AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories.
https://github.com/AggressiveUser/AllForOne
https://github.com/AggressiveUser/AllForOne
🔥32❤8👍8👏6
Please open Telegram to view this post
VIEW IN TELEGRAM
👏8👍5🔥5
Want to find the origin IP?
1-Hunt for a subdomain with no WAF
2-extract the ASN
2-check it on bgp.he.net
3- grab the IP range, and verify a live IP.
Welcome to their world!
#bugbountytips #BugBounty
1-Hunt for a subdomain with no WAF
2-extract the ASN
2-check it on bgp.he.net
3- grab the IP range, and verify a live IP.
Welcome to their world!
#bugbountytips #BugBounty
🔥29👍3😱1
CVE-2025-1661: Path Traversal in The HUSKY WordPress Plugin, 9.8 rating 🔥
The vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.
Search at Netlas.io:
👉 Link: https://nt.ls/OEg7k
👉 Dork: http.body:"plugins/woocommerce-products-filter"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion
The vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.
Search at Netlas.io:
👉 Link: https://nt.ls/OEg7k
👉 Dork: http.body:"plugins/woocommerce-products-filter"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion
😱6🔥4👍2👏1
CVE-2025-25291, -25292 and other: Multiple vulnerabilitites in GitLab, 8.8 rating❗️
Traditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/PDxYA
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/
Traditionally, GitLab publishes information about several vulnerabilities at once. These include Interpretation Conflict, DoS, Credentials Disclose, etc.
Search at Netlas.io:
👉 Link: https://nt.ls/PDxYA
👉 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:"gitlab" OR http.headers.location:"gitlab"
Vendor's advisory: https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/
👍4👨💻2
Disclosing YouTube Creator Emails for a $20k Bounty
From creator privacy to phishing paradise: How a secret parameter could have exposed the private email addresses of monetized YouTube channels
From creator privacy to phishing paradise: How a secret parameter could have exposed the private email addresses of monetized YouTube channels
brutecat.com
Disclosing YouTube Creator Emails for a $20k Bounty
From creator privacy to phishing paradise: How a secret parameter could have exposed the private email addresses of monetized YouTube channels
🔥10👍3🗿2
Nightmare
Nightmare is an intro to binary exploitation / reverse engineering course based around ctf challenges.
Nightmare is an intro to binary exploitation / reverse engineering course based around ctf challenges.
guyinatuxedo.github.io
Nightmare - Nightmare
Nightmare: an intro to binary exploitation / reverse engineering course based around CTF challenges.
❤7👍1
❤6👍1
🎯 Mastering CRTO? This Resource is Pure Gold!
If you're preparing for Certified Red Team Operator (CRTO) or want to sharpen your adversary emulation skills, I’ve found something invaluable for you!
🔗 Check here : https://m4lici0u5.com/notes/crto-notes/
🔍 What’s inside?
🏴☠️ Cobalt Strike – Beacons, pivoting & advanced tactics.
🏴☠️ AD Attacks – Lateral movement, Kerberoasting, DCSync & more.
🏴☠️ Bypassing Defenses – EDR evasion, AMSI bypass, OPSEC tricks.
🏴☠️ Persistence & PrivEsc – Staying stealthy like real APTs.
If you're preparing for Certified Red Team Operator (CRTO) or want to sharpen your adversary emulation skills, I’ve found something invaluable for you!
🔗 Check here : https://m4lici0u5.com/notes/crto-notes/
🔍 What’s inside?
🏴☠️ Cobalt Strike – Beacons, pivoting & advanced tactics.
🏴☠️ AD Attacks – Lateral movement, Kerberoasting, DCSync & more.
🏴☠️ Bypassing Defenses – EDR evasion, AMSI bypass, OPSEC tricks.
🏴☠️ Persistence & PrivEsc – Staying stealthy like real APTs.
🔥11👍4🗿4🫡3
CVE-2024-13918, -13919: XSS in Laravel Framework, 8.0 rating❗️
The vulnerabilities allow an attacker to execute code in the victim's browser via Reflected XSS if the victim clicks on a decoy link.
More then 770k instances at Netlas.io:
👉 Link: https://nt.ls/95OAY
👉 Dork: http.headers.set_cookie:"laravel_session="
Read more: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page
The vulnerabilities allow an attacker to execute code in the victim's browser via Reflected XSS if the victim clicks on a decoy link.
More then 770k instances at Netlas.io:
👉 Link: https://nt.ls/95OAY
👉 Dork: http.headers.set_cookie:"laravel_session="
Read more: https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-01_Laravel_Reflected_XSS_via_Request_Parameter_in_Debug-Mode_Error_Page
👍5❤3😱1👨💻1
function rappidns() {
curl -s "https://rapiddns.io/subdomain/$1?full=1" | grep -oE "[\.a-zA-Z0-9-]+\.$1" | tr '[:upper:]' '[:lower:]' | sort -u
}Please open Telegram to view this post
VIEW IN TELEGRAM
rapiddns.io
$1 Subdomain - RapidDNS Rapid DNS Information Collection
RapidDNS is a domain name information query system that supports querying information about websites, subdomains and the same ip website. RapidDNS supports A, AAAA, CNAME, CERTIFICATE and MX types.
👍17😢2