Brut Security
17.8K subscribers
1.15K photos
102 videos
362 files
1.26K links
✅DM: @wtf_brut
✅For Ad: https://tlmtr.io/p/2flAsc
🛃WhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
📨Mail: info@brutsec.com
Download Telegram
The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities.

Resource: github.com/usestrix/strix
❤4👍4
Brut Security pinned Deleted message
🚨T3MP3ST - A multi-agent offensive-security framework, built to turn the AI coding agent you already run into a zero-day hunter.

⭐️Credit/Source: https://github.com/elder-plinius/T3MP3ST
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥6❤3👍1
🚀 Admissions Open | Upcoming Cybersecurity Batches

Enrollment is now open for our upcoming batches:

• Web Penetration Testing
• Bug Bounty Hunting
• Ethical Hacking
• VAPT (Vulnerability Assessment & Penetration Testing)

What you'll get:
✅ Live practical sessions
✅ Real-world labs
✅ Industry methodology
✅ Mentor support
✅ Certificate on completion

🎓 Student Discount Available (Limited Time)

📩 DM to enroll or visit: http://wa.link/brutsecurity
❤2🔥1
💥 KeyHunter: A fast Rust tool for finding leaked API keys across public GitHub repos.

It supports 45+ providers and can verify which exposed secrets are still active.

GitHub: https://github.com/fadidevv/keyhunter
👍2❤1
dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS queries, user supplied resolvers, DNS wildcard filtering like shuffledns etc.

Resource: https://github.com/projectdiscovery/dnsx
❤6👍4
A full-chain exploit dubbed “IonStack” demonstrates how a single malicious URL click can hand attackers complete control over an Android device

Credit/Source: https://cybersecuritynews.com/android-17-root-1-click
👍5❤2
This media is not supported in your browser
VIEW IN TELEGRAM
PenTesting Agent : is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

red team ops, Automated recon & exploitation, smart task trees, multi-agent collab, and seamless tool chaining like Nmap, Metasploit, SQLMap, Amass etc

https://github.com/GH05TCREW/pentestagent
🔥7❤2
SQL injection.pdf
599.4 KB
🚨SQL Injection Cheat Sheet
❤7👍3
This media is not supported in your browser
VIEW IN TELEGRAM
🐧GhostLock (CVE-2026-43499): a 15-year-old Linux kernel vulnerability that affects every distribution. Desktop, server, Android, IoT, embedded. $92,337 Google kernelCTF bounty.

A stack-UAF in the rtmutex subsystem. remove_waiter() uses current instead of waiter::task during proxy-lock rollback in futex_requeue(), leaving a dangling pointer to freed kernel stack memory. No special kernel modules needed, only CONFIG_FUTEX_PI which is enabled on every distro.

Nebula Security (NebuSec) turned it into a 97% stable privilege escalation and container escape. The exploit chains a dangling pointer into an arbitrary address write, hijacks a function table for control flow, and achieves root in about 5 seconds. Found by VEGA, their AI vulnerability scanner.

Part of IonStack, the first browser-to-kernel full-chain RCE on Android 17: CVE-2026-10702 (Firefox IonMonkey JIT 0-day, near 100% success rate) chained with GhostLock for kernel LPE.

Present since Linux 2.6.39 (2011). Fixed in Linux 7.1. Full exploit code published on GitHub.


Exploit:

https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499
❤2👍1🗿1
This media is not supported in your browser
VIEW IN TELEGRAM
The feeling of relief 😮‍💨
❤3🐳3😁1
This media is not supported in your browser
VIEW IN TELEGRAM
💥Feroxbuster: A fast recursive content discovery tool written in Rust.

Built for finding hidden files, directories, and endpoints using wordlists, with support for recursion, filters, extensions, headers, proxies, and more.

GitHub: https://github.com/epi052/feroxbuster
❤7👍3