Brut Security
17.9K subscribers
1.15K photos
103 videos
362 files
1.26K links
βœ…DM: @wtf_brut
βœ…For Ad: https://tlmtr.io/p/2flAsc
πŸ›ƒWhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
πŸ“¨Mail: info@brutsec.com
Download Telegram
⚑Sn1per - Automate your recon like never before!

βœ… https://github.com/1N3/Sn1per
πŸ”₯19❀9😱2
⚑S3Scan - A powerful S3 bucket security scanner designed for penetration testing and bug bounty hunting. This tool automatically detects misconfigurations and security vulnerabilities in AWS S3 buckets.

βœ…https://github.com/KingOfBugbounty/s3tk
πŸ‘20❀6πŸ‘¨β€πŸ’»2
Mobile Hacking Bug Bounty.pdf
4.4 MB
Mobile Hacking Bug Bounty: The Practical Checklist
1πŸ‘18πŸ”₯10❀2πŸ‘2🐳1
⚑Bug Bounty Reports Extractor - CLI tool that fetches resolved & disclosed HackerOne reports by vulnerability and exports them to CSV.

βœ…
https://github.com/newstartlikenoneanthor-pixel/report-extractor
❀17πŸ”₯6😱2
😁56πŸ‘5πŸ—Ώ2πŸ‘¨β€πŸ’»1🫑1
⚑️Recently updated Proof-of-Concepts

βœ”οΈLink to Download - https://github.com/0xMarcio/cve
Please open Telegram to view this post
VIEW IN TELEGRAM
❀17πŸ‘5πŸ”₯5πŸ‘1
This media is not supported in your browser
VIEW IN TELEGRAM
β˜„οΈFind new associated domains with this simple Google dork:

"Β© <COMPANY>. all rights reserved." -".<COMPANY>.com"
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ”₯17❀8πŸ‘4😱1
dON'T fORGET tO gIVE rEACTIONS
❀22πŸ—Ώ8πŸ”₯2🀨2
Hey Hunter's,
DarkShadow here back again!

A hidden backdoor was in PHP version which allow remote code execution In user-agent header.

Guess Guy's which version it is?

#backdoor
❀19😁2πŸ‘¨β€πŸ’»1
πŸ”₯Google Dork - Exposed Configs πŸ”

site:example[.]com ext:log | ext:txt | ext:conf | ext:cnf | ext:ini | ext:env | ext:sh | ext:bak | ext:backup | ext:swp | ext:old | ext:~ | ext:git | ext:svn | ext:htpasswd | ext:htaccess | ext:json

Β©TakSec
Please open Telegram to view this post
VIEW IN TELEGRAM
❀31πŸ‘14πŸ”₯6
β˜„οΈJSRecon-Buddy - A simple browser extension to quickly find interesting security-related information on a webpage.

πŸ”΄https://github.com/TheArqsz/JSRecon-Buddy
Please open Telegram to view this post
VIEW IN TELEGRAM
1πŸ”₯24❀8πŸ‘4πŸ‘4🀝1
dON'T fORGET tO gIVE rEACTIONS
πŸ”₯15
β˜„οΈ Malicious PDF Generator - Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

✨ https://github.com/jonaslejon/malicious-pdf
Please open Telegram to view this post
VIEW IN TELEGRAM
❀14πŸ‘9πŸ‘2
Google Dork - XSS Prone Parameters πŸ”₯

site:example[.]com inurl:q= | inurl:s= | inurl:search= | inurl:query= | inurl:keyword= | inurl:lang= inurl:&
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ‘11❀8🀨1
β˜„οΈ Cheapest VPS for Bug Bounty & Pentesting

⚠️ https://brutsecurity.medium.com/cheapest-vps-for-bug-bounty-pentesting-fc6686572ee3
Please open Telegram to view this post
VIEW IN TELEGRAM
❀10πŸ‘4πŸ”₯3πŸ‘2
πŸ”₯Oneliner to download ALL of @assetnote's wordlists:

⌨️ wget -r --no-parent -R "index.html*" wordlists-cdn.assetnote.io/data/ -nH -e robots=off
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ”₯14