Forwarded from Brut Security (Saumadip Mandal)
157 Methods for Privilege Escalation (WindowsLinuxMacos) PDF.pdf
84.9 MB
👍10❤3🤝2
Please do share and like . Thanks 🙏❤️
Please open Telegram to view this post
VIEW IN TELEGRAM
❤3👍1🔥1
I am sharing 10 additional coupons on LinkedIn upon reaching 12,000 followers (60 remaining). 🎫📊
https://www.linkedin.com/posts/mandal-saumadip_cybersecurity-bugbounty-ethicalhacking-share-7479612184960909313-sG9F/
Please follow and like; the coupon will be available in the comments after reaching 12k followers. ⏱️💬
Thank you to everyone who participated today! 🙏
https://www.linkedin.com/posts/mandal-saumadip_cybersecurity-bugbounty-ethicalhacking-share-7479612184960909313-sG9F/
Please follow and like; the coupon will be available in the comments after reaching 12k followers. ⏱️💬
Thank you to everyone who participated today! 🙏
LinkedIn
2026 Bug Bounty Guide - Brut Security | Saumadip Mandal posted on the topic | LinkedIn
🔥 Just dropped — 2026 Bug Bounty Guide
🔖 86 pages. 25 chapters. Built on real data.
🟢What's inside:
→ The AI shift — what it means for your bounties
→ Full recon workflow (subfinder → puredns → httpx → nuclei)
→ Every major vuln class with payloads — XSS…
🔖 86 pages. 25 chapters. Built on real data.
🟢What's inside:
→ The AI shift — what it means for your bounties
→ Full recon workflow (subfinder → puredns → httpx → nuclei)
→ Every major vuln class with payloads — XSS…
❤2🔥2👍1
The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities.
Resource: github.com/usestrix/strix
Resource: github.com/usestrix/strix
❤4👍4
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥6❤3👍1
🚀 Admissions Open | Upcoming Cybersecurity Batches
Enrollment is now open for our upcoming batches:
• Web Penetration Testing
• Bug Bounty Hunting
• Ethical Hacking
• VAPT (Vulnerability Assessment & Penetration Testing)
What you'll get:
✅ Live practical sessions
✅ Real-world labs
✅ Industry methodology
✅ Mentor support
✅ Certificate on completion
🎓 Student Discount Available (Limited Time)
📩 DM to enroll or visit: http://wa.link/brutsecurity
Enrollment is now open for our upcoming batches:
• Web Penetration Testing
• Bug Bounty Hunting
• Ethical Hacking
• VAPT (Vulnerability Assessment & Penetration Testing)
What you'll get:
✅ Live practical sessions
✅ Real-world labs
✅ Industry methodology
✅ Mentor support
✅ Certificate on completion
🎓 Student Discount Available (Limited Time)
📩 DM to enroll or visit: http://wa.link/brutsecurity
❤2🔥1
💥 KeyHunter: A fast Rust tool for finding leaked API keys across public GitHub repos.
It supports 45+ providers and can verify which exposed secrets are still active.
GitHub: https://github.com/fadidevv/keyhunter
It supports 45+ providers and can verify which exposed secrets are still active.
GitHub: https://github.com/fadidevv/keyhunter
👍2❤1
dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS queries, user supplied resolvers, DNS wildcard filtering like shuffledns etc.
Resource: https://github.com/projectdiscovery/dnsx
Resource: https://github.com/projectdiscovery/dnsx
❤6👍4
10 Free Coupons for New Subscribers - https://topmate.io/saumadip/2187710?coupon_code=BRUT
topmate.io
Bug Bounty Guide 2026 with Saumadip Mandal | Topmate
Bug Bounty Guide 2026 with Saumadip Mandal · Master modern bug bounty hunting with 86 pages, 25 chapter · Digital Product · ₹199 · Topmate
❤3🔥3👍1👏1
A full-chain exploit dubbed “IonStack” demonstrates how a single malicious URL click can hand attackers complete control over an Android device
Credit/Source: https://cybersecuritynews.com/android-17-root-1-click
Credit/Source: https://cybersecuritynews.com/android-17-root-1-click
👍5❤2
This media is not supported in your browser
VIEW IN TELEGRAM
PenTesting Agent : is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
red team ops, Automated recon & exploitation, smart task trees, multi-agent collab, and seamless tool chaining like Nmap, Metasploit, SQLMap, Amass etc
https://github.com/GH05TCREW/pentestagent
red team ops, Automated recon & exploitation, smart task trees, multi-agent collab, and seamless tool chaining like Nmap, Metasploit, SQLMap, Amass etc
https://github.com/GH05TCREW/pentestagent
🔥7❤2
This media is not supported in your browser
VIEW IN TELEGRAM
🐧GhostLock (CVE-2026-43499): a 15-year-old Linux kernel vulnerability that affects every distribution. Desktop, server, Android, IoT, embedded. $92,337 Google kernelCTF bounty.
https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499
A stack-UAF in the rtmutex subsystem. remove_waiter() uses current instead of waiter::task during proxy-lock rollback in futex_requeue(), leaving a dangling pointer to freed kernel stack memory. No special kernel modules needed, only CONFIG_FUTEX_PI which is enabled on every distro.
Nebula Security (NebuSec) turned it into a 97% stable privilege escalation and container escape. The exploit chains a dangling pointer into an arbitrary address write, hijacks a function table for control flow, and achieves root in about 5 seconds. Found by VEGA, their AI vulnerability scanner.
Part of IonStack, the first browser-to-kernel full-chain RCE on Android 17: CVE-2026-10702 (Firefox IonMonkey JIT 0-day, near 100% success rate) chained with GhostLock for kernel LPE.
Present since Linux 2.6.39 (2011). Fixed in Linux 7.1. Full exploit code published on GitHub.
Exploit:
https://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499
❤2👍1🗿1