This media is not supported in your browser
VIEW IN TELEGRAM
How to manually check for CL.TE Request Smuggling Vulnerabilities:
1️⃣ See if a GET request accepts POST
2️⃣ See if it accepts HTTP/1
3️⃣ Disable "Update Content-Length"
4️⃣ Send with CL & TE headers:
POST / HTTP/1.1
Host: <HOST-URL>
Content-Length: 6
Transfer-Encoding: chunked
0
G
5️⃣ Send request twice.
If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability!
Try this out for yourself in our CL.TE lab: https://portswigger.net/web-security/request-smuggling/lab-basic-cl-te
1️⃣ See if a GET request accepts POST
2️⃣ See if it accepts HTTP/1
3️⃣ Disable "Update Content-Length"
4️⃣ Send with CL & TE headers:
POST / HTTP/1.1
Host: <HOST-URL>
Content-Length: 6
Transfer-Encoding: chunked
0
G
5️⃣ Send request twice.
If you receive a response like "Unrecognized method GPOST", you've just confirmed a CL.TE vulnerability!
Try this out for yourself in our CL.TE lab: https://portswigger.net/web-security/request-smuggling/lab-basic-cl-te
👏19❤8👍3🐳1
CVE-2025-7384: Critical PHP Object Injection in WordPress Plugin
A critical vulnerability has been found in the Database for Contact Form 7, WPForms, and Elementor forms WordPress plugin. Since this is a backend-only plugin, it is not directly detectable through standard search dorks. Supported frontend plugins could help determine the scope. However, only about 1% of hosts identified this way are actually vulnerable.
🔍 Netlas: https://nt.ls/Be3g6
ℹ️ Advisory: https://nt.ls/RoI8t
A critical vulnerability has been found in the Database for Contact Form 7, WPForms, and Elementor forms WordPress plugin. Since this is a backend-only plugin, it is not directly detectable through standard search dorks. Supported frontend plugins could help determine the scope. However, only about 1% of hosts identified this way are actually vulnerable.
🔍 Netlas: https://nt.ls/Be3g6
ℹ️ Advisory: https://nt.ls/RoI8t
😁5
🔥 Exclusive ZoomEye Offer for Brut Security Members
✅ZoomEye is giving Brut Security members 5% off any membership plan — monthly or yearly — through our special link.
📌 How it works:
✦ Click our link: https://www.zoomeye.ai/pricing?aff=INVITE-2SW2-FC96
✦ Get instant 5% discount on your purchase
💡 Perfect for bug bounty hunters, pentesters, and researchers who rely on fast, deep internet asset scanning.
#bugbounty #pentesting #osint #cybersecurity #tools
✅ZoomEye is giving Brut Security members 5% off any membership plan — monthly or yearly — through our special link.
📌 How it works:
✦ Click our link: https://www.zoomeye.ai/pricing?aff=INVITE-2SW2-FC96
✦ Get instant 5% discount on your purchase
💡 Perfect for bug bounty hunters, pentesters, and researchers who rely on fast, deep internet asset scanning.
#bugbounty #pentesting #osint #cybersecurity #tools
ZoomEye
Search Engine of Internet-Connected Devices. Create a Free Account to Get Started.
🔥3❤1
Brut Security pinned «🔥 Exclusive ZoomEye Offer for Brut Security Members ✅ZoomEye is giving Brut Security members 5% off any membership plan — monthly or yearly — through our special link. 📌 How it works: ✦ Click our link: https://www.zoomeye.ai/pricing?aff=INVITE-2SW2-FC96…»
Hey Hunter's,
DarkShadow here back again, just look at this...
IP Abuse Reports for 127.0.0.1
abuseipdb.com/check/127.0.0.1
DarkShadow here back again, just look at this...
IP Abuse Reports for 127.0.0.1
abuseipdb.com/check/127.0.0.1
😁6❤1🤝1🫡1
✅To detect Credit & Debit Card Number Leakage use this Nuclei Template - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/miscellaneous/credit-card-number-detect.yaml
1👍9👏4❤1
Hey Hunter's,
DarkShadow here back again, just dropping a unique XSS method which execute in response header.
XSS in Facebook Response header💥
show your love Guy's ❤️🔥
#bugbountytips #xss
DarkShadow here back again, just dropping a unique XSS method which execute in response header.
XSS in Facebook Response header💥
Tip: Always check XSS in redirection parameters.
show your love Guy's ❤️🔥
#bugbountytips #xss
❤18🔥6👍5🗿3
Hey Hunter's,
DarkShadow here back again, just dropping a unique method to bypass waf for XSS 🔥
Waf Blocked ❌
javascript:alert()
Waf welcome ✅
javascript:new Function
#bugbountytips #xss
DarkShadow here back again, just dropping a unique method to bypass waf for XSS 🔥
Waf Blocked ❌
javascript:alert()
Waf welcome ✅
javascript:new Function
document.body.style.background="red"✔️ If waf Blocked additional functions then try to change the background color💥
#bugbountytips #xss
👏10❤7👍4
Shodan.io $5 Lifetime Membership sale is live for the next 24 hours: account.shodan.io/billing/member
Go Grab it Now ✨
Go Grab it Now ✨
😁14👏1🗿1
Brut Security pinned «Shodan.io $5 Lifetime Membership sale is live for the next 24 hours: account.shodan.io/billing/member Go Grab it Now ✨»
Hunter's, DarkShadow here!
One liner for finding files
#bugbountytips
One liner for finding files
subfinder -d domain.com -silent | \
while read host; do \
for path in /config.js /config.json /app/config.js /settings.json /database.json /firebase.json /.env /.env.production /api_keys.json /credentials.json /secrets.json /google-services.json /package.json /package-lock.json /composer.json /pom.xml /docker-compose.yml /manifest.json /service-worker.js; do \
echo "$host$path"; \
done; \
done | httpx -mc 200#bugbountytips
❤29👨💻3🗿3🔥2
Hunter's, the vulnerability was SSRF loading AWS cloud access.
and effects:
IITE – Institute of Information Technology & Education: Access to confidential student information, assessment data, and internal records.
MUHS – Maharashtra University of Health Sciences: Exposure of examination content, student records, and academic documents.
GSEB – Gujarat Secondary & Higher Secondary Education Board: Exposure of sensitive student records, exam papers, hall tickets, and related educational data.
RGUHS – Rajiv Gandhi University of Health Sciences: Access to examination papers, student records, and other confidential academic information.
And don't forget to follow me 👉🏼 x.com/darkshadow2bd
#ssrf
and effects:
IITE – Institute of Information Technology & Education: Access to confidential student information, assessment data, and internal records.
MUHS – Maharashtra University of Health Sciences: Exposure of examination content, student records, and academic documents.
GSEB – Gujarat Secondary & Higher Secondary Education Board: Exposure of sensitive student records, exam papers, hall tickets, and related educational data.
RGUHS – Rajiv Gandhi University of Health Sciences: Access to examination papers, student records, and other confidential academic information.
i have a video POC wanna see how i was able exploit this bug!?
And don't forget to follow me 👉🏼 x.com/darkshadow2bd
#ssrf
👏10👍3🫡2🔥1