❤12
Unauthorized Data Upload in Alibaba Cloud – PoC by Chirag Artani 🔥
A new video is out on our friend’s channel, showcasing the discovery of a fresh vulnerability. The video includes an interesting query and a practical example of exploitation. Don’t miss it! 🔍
We also recommend checking out Chirag Artani’s website and Twitter for more cybersecurity insights:
👉 Website: 3rag.com
👉 Twitter: x.com/Chirag99Artani
A new video is out on our friend’s channel, showcasing the discovery of a fresh vulnerability. The video includes an interesting query and a practical example of exploitation. Don’t miss it! 🔍
We also recommend checking out Chirag Artani’s website and Twitter for more cybersecurity insights:
👉 Website: 3rag.com
👉 Twitter: x.com/Chirag99Artani
YouTube
I found 9322 Targets For Unauthorized Data Upload In Alibaba Cloud | POC Exploit Explained Live
Note: do not harm any server, do not upload any malicious files like malware or anything. This is high severity bug which is leading to upload unauthorized data.
I found 9321 targets which are vulnerable for this vulnerability. This is just for learning…
I found 9321 targets which are vulnerable for this vulnerability. This is just for learning…
👍7
One-liner to gather and crawl subdomains, then generate a custom wordlist from the target's discovered URLs 👇🏽
subfinder -d bugcrowd.com -silent | httpx -silent | hakrawler | tr '[:punct:]' '\n' | sort -u
subfinder -d bugcrowd.com -silent | httpx -silent | hakrawler | tr '[:punct:]' '\n' | sort -u
👍13❤3
🚀 Brut Security Hits 10K Subscribers! 🎉
Thank you all for being part of this journey! From sharing knowledge and resources to building a strong cybersecurity community, Brut Security has grown beyond expectations.
Your support fuels everything we do—training, tools, research, and challenges like Breaking O-Auth. Whether you’re here for bug bounty tips, pentesting insights, or DFIR knowledge, this is just the beginning.
🔥 More exclusive content, live bug hunting, and deep-dive discussions coming soon! Stay tuned, stay curious, and keep hacking ethically.
#BrutSecurity #10KStrong #BugBounty #Cybersecurity
Thank you all for being part of this journey! From sharing knowledge and resources to building a strong cybersecurity community, Brut Security has grown beyond expectations.
Your support fuels everything we do—training, tools, research, and challenges like Breaking O-Auth. Whether you’re here for bug bounty tips, pentesting insights, or DFIR knowledge, this is just the beginning.
🔥 More exclusive content, live bug hunting, and deep-dive discussions coming soon! Stay tuned, stay curious, and keep hacking ethically.
#BrutSecurity #10KStrong #BugBounty #Cybersecurity
🔥10❤4
https://portswigger.net/research/top-10-web-hacking-techniques-of-2024
Please open Telegram to view this post
VIEW IN TELEGRAM
PortSwigger Research
Top 10 web hacking techniques of 2024
Welcome to the Top 10 Web Hacking Techniques of 2024, the 18th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year
🔥3👍2❤1
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥4
This media is not supported in your browser
VIEW IN TELEGRAM
You can chain Subfinder with Shuffledns to enumerate subdomains & resolve only valid ones.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥18❤6👍2👏2
Recon Skills and Tips.pptx.pdf
825.4 KB
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥13❤4👍3
Cross Site Scripting (XSS) Through File Upload SVG ---> https://t.me/brutsecurity_poc/38
❤15