Brut Security
@brutsecurity
17.9K subscribers
1.15K photos
103 videos
362 files
1.26K links
โœ…DM: @wtf_brut
โœ…For Ad: https://tlmtr.io/p/2flAsc
๐Ÿ›ƒWhatsApp: https://wa.link/brutsecurity
๐ŸˆดTraining: https://brutsecurity.com
๐Ÿ“จMail: info@brutsec.com
Download Telegram
About
Blog
Apps
Platform
Join
Brut Security
17.9K subscribers
Brut Security
๐Ÿ•ต๏ธโ€โ™‚๏ธ Bug Bounty Hunters, Hereโ€™s a Hidden Gem! ๐Ÿ’Ž
๐Ÿ“Œ Grab it now : https://gowsundar.gitbook.io/book-of-bugbounty-tips

---------------------------------------------------------
๐Ÿš€ ๐‹๐ž๐ฏ๐ž๐ฅ ๐”๐ฉ ๐˜๐จ๐ฎ๐ซ ๐‚๐ฒ๐›๐ž๐ซ๐’๐ž๐œ ๐†๐š๐ฆ๐ž! ๐Ÿ”ฅ
๐ŸŒ brutsec.com
๐Ÿ“ฑ ๐“๐ž๐ฅ๐ž๐ ๐ซ๐š๐ฆ: t.me/brutsecurity
๐Ÿ’ผ ๐—: x.com/brutsecurity
๐Ÿ“– ๐„๐ญ๐ก๐ข๐œ๐š๐ฅ ๐‡๐š๐œ๐ค๐ข๐ง๐  ๐‘๐จ๐š๐๐ฆ๐š๐ฉ: topmate.io/saumadip/1391531
๐ŸŽ“ ๐‚๐จ๐ฎ๐ซ๐ฌ๐ž ๐„๐ง๐ซ๐จ๐ฅ๐ฅ๐ฆ๐ž๐ง๐ญ: wa.link/brutsecurity
โญ ๐‹๐ข๐ค๐ž ๐ญ๐ก๐ข๐ฌ ๐ฉ๐จ๐ฌ๐ญ? โ†’ ๐…๐จ๐ฅ๐ฅ๐จ๐ฐ, ๐‰๐จ๐ข๐ง, ๐’๐ฎ๐›๐ฌ๐œ๐ซ๐ข๐›๐ž & ๐’๐ž๐ง๐ ๐’๐ญ๐š๐ซ๐ฌ ๐ญ๐จ ๐ฌ๐ก๐จ๐ฐ ๐ฒ๐จ๐ฎ๐ซ ๐ฌ๐ฎ๐ฉ๐ฉ๐จ๐ซ๐ญ!
๐Ÿ”ฅ7โค3๐Ÿ—ฟ1
4.12K views
Brut Security
๐Ÿ”–The ultimate 403 Bypass wordlists and tester notes by JHaddix

๐Ÿ“ฑ Github: ๐Ÿ”— Link

---------------------------------------------------------
๐Ÿš€ ๐‹๐ž๐ฏ๐ž๐ฅ ๐”๐ฉ ๐˜๐จ๐ฎ๐ซ ๐‚๐ฒ๐›๐ž๐ซ๐’๐ž๐œ ๐†๐š๐ฆ๐ž! ๐Ÿ”ฅ
๐ŸŒ brutsec.com
๐Ÿ“ฑ ๐“๐ž๐ฅ๐ž๐ ๐ซ๐š๐ฆ: t.me/brutsecurity
๐Ÿ’ผ ๐—: x.com/brutsecurity
๐Ÿ“– ๐„๐ญ๐ก๐ข๐œ๐š๐ฅ ๐‡๐š๐œ๐ค๐ข๐ง๐  ๐‘๐จ๐š๐๐ฆ๐š๐ฉ: topmate.io/saumadip/1391531
๐ŸŽ“ ๐‚๐จ๐ฎ๐ซ๐ฌ๐ž ๐„๐ง๐ซ๐จ๐ฅ๐ฅ๐ฆ๐ž๐ง๐ญ: wa.link/brutsecurity
โญ ๐‹๐ข๐ค๐ž ๐ญ๐ก๐ข๐ฌ ๐ฉ๐จ๐ฌ๐ญ? โ†’ ๐…๐จ๐ฅ๐ฅ๐จ๐ฐ, ๐‰๐จ๐ข๐ง, ๐’๐ฎ๐›๐ฌ๐œ๐ซ๐ข๐›๐ž & ๐’๐ž๐ง๐ ๐’๐ญ๐š๐ซ๐ฌ ๐ญ๐จ ๐ฌ๐ก๐จ๐ฐ ๐ฒ๐จ๐ฎ๐ซ ๐ฌ๐ฎ๐ฉ๐ฉ๐จ๐ซ๐ญ!

#bugbounty #bugbountytips #cybersecurity #infosec #brutsecurity
๐Ÿ”ฅ8โค2
4.42K viewsedited  
Brut Security
Whatttt!!! ๐Ÿค”๐Ÿค”๐Ÿค”๐Ÿค”
https://hackerone.com/reports/2553026
Please open Telegram to view this post
VIEW IN TELEGRAM
HackerOne
HackerOne disclosed on HackerOne: Domain highlighting on External...
There have been multiple issues with External Link Warning in the past. Sometimes it's Homograph, sometimes more than 2 slashes in link, sometimes domain highlighting and/or weird markdown. And...
๐Ÿคฃ9๐Ÿซก1
4K views
Brut Security
๐Ÿ‘ปCVE-2025-24071: Windows Explorer initiates an SMB authentication request upon extracting a .library-ms file from a .rar archive, exposing NTLM hashes. Extraction alone triggers the vulnerability.

โญ๏ธPOC- https://t.me/brutsecurity_poc/45
Please open Telegram to view this post
VIEW IN TELEGRAM
1๐Ÿ”ฅ17๐Ÿ˜ฑ4โค3
4.18K viewsedited  
Brut Security
dON'T fORGET tO gIVE rEACTIONS
๐Ÿ˜ฑ11๐Ÿ”ฅ7โค5๐Ÿ‘4
3.92K views
Brut Security
โšกThe Ultimate PNPT Study Guide โ€“ Master Pentesting & Crush the Exam!

๐Ÿ”—Link: https://github.com/TrshPuppy/PNPT-study-guide
โค10๐Ÿ”ฅ4๐Ÿ‘3
4.05K views
Brut Security
๐Ÿ‘ปFind open Juice S3 Bucket using lazys3

๐ŸŽคLink: https://github.com/nahamsec/lazys3

๐Ÿ›กWriteups-

https://medium.com/me/stats/post/f6ae24cdcdfa

https://medium.com/securing/exploring-25k-aws-s3-buckets-f22ec87c3f2a

https://suleyman-celik8.medium.com/enumerate-s3-buckets-using-lazys3-d2f5de14d31
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ‘10โค3๐Ÿ”ฅ3
4.19K viewsedited  
Brut Security
โšกSubDomain Grabber - A bug bounty tool to download, unzip, and clean subdomains from Chaos ProjectDiscovery.

๐ŸšจConverts *.abc.com to http://abc.com, organizes into directories, and removes ZIPs. Offers a colorful CLI, filters (BugCrowd, HackerOne, etc.), sorting, and pagination.

โœ…https://github.com/MuhammadWaseem29/SubDomain-Grabber
๐Ÿ”ฅ10๐Ÿ‘6
4.14K views
Brut Security
Subdominator - Unleash the Power of Subdomain Enumeration

https://github.com/RevoltSecurities/Subdominator
โค19๐Ÿ‘3
4.3K views
Brut Security
๐Ÿ‘ป Looking for a Discord Moderator!๐Ÿ‘ป

โš ๏ธWe need an active mod to help manage the Brut Security server. Based on performance, youโ€™ll be rewarded with swags, gift cards, or TryHackMe vouchers!

๐Ÿ”ฅJoin & Apply Now: https://discord.gg/u7uMFV833h
Please open Telegram to view this post
VIEW IN TELEGRAM
Discord
Join the Brut Security Discord Server!
Check out the Brut Security community on Discord - hang out with 1001 other members and enjoy free voice and text chat.
๐Ÿ‘4
4.22K views
Brut Security
Brut Security pinned ยซ๐Ÿ‘ป Looking for a Discord Moderator!๐Ÿ‘ป โš ๏ธWe need an active mod to help manage the Brut Security server. Based on performance, youโ€™ll be rewarded with swags, gift cards, or TryHackMe vouchers! ๐Ÿ”ฅJoin & Apply Now: https://discord.gg/u7uMFV833hยป
Brut Security
Free Study Guide --> https://topmate.io/saumadip/1391531
topmate.io
Ethical Hacking Study Guide - 2025 with Saumadip Mandal
Free guide on 17 key ethical hacking topics by Brut Security
๐Ÿ”ฅ5โค1๐Ÿ‘1
4.1K views
Brut Security
๐Ÿ›กResearch Paper ๐Ÿ“–Next.js and the corrupt middleware: the authorizing artifact

๐Ÿ”ฅhttps://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware
Please open Telegram to view this post
VIEW IN TELEGRAM
๐Ÿ”ฅ14โค4
4.21K views
Brut Security
โ˜บ๏ธYour support keeps me motivated to share more valuable content! If you found this helpful, drop a like & send stars โญ to help me keep going.

๐Ÿ’ฌ For queries, message me on Telegram: @wtf_brut
๐ŸŽ“ For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
4๐Ÿ‘31๐Ÿ”ฅ9โค3๐Ÿ‘จโ€๐Ÿ’ป1๐Ÿซก1
3.91K viewsedited  
Brut Security
๐Ÿ” Want to find exploitable CVEs for cybersecurity testing?

Use CVEmap to spot vulnerabilities with public proof-of-concept, marked exploitable by CISA, remotely exploitable, and without Nuclei templates yet!

Flags to use: -k (CISA exploitable), -t=false (no template), -poc (has proof-of-concept), -re (remote).

Happy hunting! ๐Ÿ› ๏ธ
๐Ÿ‘18โค9
4.56K views
Brut Security
If you found a file upload function for an image, try introducing an image with XSS in the filename like so:
<img src=x onerror=alert('XSS')>.png
"><img src=x onerror=alert('XSS')>.png
"><svg onmouseover=alert(1)>.svg
<<script>alert('xss')<!--a-->a.png
โค13๐Ÿ‘6
4.59K viewsedited  
Brut Security
Use Vulhub to reproduce Next.js Middleware Authorization Bypass (CVE-2025-29927)
https://github.com/vulhub/vulhub/tree/master/next.js/CVE-2025-29927
๐Ÿ”ฅ7โค3๐Ÿ‘2๐Ÿ‘จโ€๐Ÿ’ป2
4.28K views
Brut Security
๐Ÿšจ 0day Hunters, Pay Attention! ๐Ÿšจ

CVE-2025-29927 โ€“ Next.js Middleware Auth Bypass [EXPLOIT]

Ever wondered what happens when middleware security checks fail silently? This vuln lets you slip past authentication like a ghost.

๐Ÿ’ฅ Reproduce it with Vulhub. Exploit it with Nuclei.

Itโ€™s waiting in our Discord.
๐Ÿ”— [Exploit Download]
๐Ÿ”ฅ13๐Ÿ‘3
4.67K views
Brut Security
Who wants a Spotify Premium 4-month coupon? ๐ŸŽง๐Ÿ’ฅ

Drop your favorite hacking playlist, and the best one wins the coupon! ๐Ÿ”ฅ๐ŸŽถ
โค18๐Ÿ‘5
4.36K views
Brut Security
๐Ÿ›  ExplainShell โ€“ Decode Shell Commands

Found a complex command in a PoC or exploit? Paste it into ExplainShell and see a breakdown of each argument.

๐Ÿ” Great for analyzing payloads, understanding Linux commands, and improving your skills.

Essential for Bug Bounty & Pentesting.
๐Ÿ”ฅ21๐Ÿ‘5โค2
4.8K views๐—•๐—ฒ๐—ฒ๐—ธ๐—ฒ๐—ฒ๐—ฝ๐—ฒ๐—ฟ, edited