🎯 TryHackMe Voucher Giveaway at 1000 Members! 🎯

We’re on the road to 1,000 members in our Discord community! 🚀
Currently at 700+ strong, and once we hit 1K, we’ll be giving away a TryHackMe Voucher to Three lucky member! 🔐💻

🟢 What You Need to Do:
Join the Discord: https://discord.gg/u7uMFV833h
Stay active, invite your friends
Once we reach 1,000 members, the giveaway will go live!

📢 Let’s grow this amazing community together – learning, hacking, and winning! 💥

CVE-2025-42963: Deserialization of Untrusted Data in SAP NetWeaver Application server for Java, 9.1 rating 🔥

A vulnerability in the LogViewer component allows an authenticated attacker to exploit unsafe Java object deserialization, which could lead to complete control over the system.

Search at Netlas.io:
👉 Link: https://nt.ls/0c6Ud
👉 Dork: http.headers.server:"NetWeaver"

Vendor's advisory: https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2025.html

CVE-2025-49704: Code Injection in Microsoft SharePoint, 8.8 rating❗️

The vulnerability allows an authenticated attacker to execute code over the network.

Search at Netlas.io:
👉 Link: https://nt.ls/1egrV👉 Dork: http.headers.microsoftsharepointteamservices:*
Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704

🚨 Bug Bounty Tip: Takeover Vulnerable S3 Buckets in Under a Minute! ☁️

Want to identify exposed Amazon S3 buckets linked to a target? Here's a quick method:

echo REDACTED.COM | cariddi | grep js | tee js_files | httpx -mc 200 | nuclei -tags aws,amazon

🔍 Then check for public S3 buckets:

aws s3 ls s3://REDACTEDCOM.s3.amazonaws.com

👉 If the bucket name isn’t obvious:

echo REDACTED.COM | cariddi -e -s -info

⚠️ Found a vulnerable bucket? Don’t delete anything!
# Do NOT run this. Just for awareness:


aws s3 rm s3://REDACTEDCOM.s3.amazonaws.com --recursive

✅ Always report responsibly. Never exploit — you're here to help, not harm.

⚡️ Happy Hunting!

To all my dear students and subscribers,
On this special occasion of Guru Purnima, remember:

🧠 “Your knowledge is your antivirus. Your guru is your source code.”

Stay curious, stay humble, and always keep learning.
– With gratitude,
Brut Security

Tired of switching tabs for OSINT and recon? Just join our Discord and type sudo help to unlock powerful tools in seconds!

✅ IP & Domain Lookup
✅ Email & Phone OSINT
✅ Subdomain Enumeration
✅ Reverse Image Search
✅ URL & Virus Scanners
✅ Temp Email, QR Tools, and more

🌟 You can create and play your own CTF in a minute , right inside Discord!

Try it out now — it’s fast, simple, and all in one chat.
🔗 https://discord.gg/u7uMFV833h

#ctf #bugbounty #osint #cybersecurity #discordtools #infosec

⚡Scanning github repos is a great way to find juicy information, secrets and credentials!

Trufflehog makes this easy.

With one scan you can find AWS keys, FTP creds, crypto keys and more!

✅Check this out - https://github.com/trufflesecurity/trufflehog