Brut Security

⚠️ CVE-2024-6387: Critical OpenSSH Unauthenticated RCE Flaw ‘regreSSHion’ Exposes Millions of Linux Systems

🎯96.4 million+ Results are found on the en.fofa.info nearly year.

💥FOFA Dork: app="OpenSSH"

🔖Refer: https://lnkd.in/gkENKHPv

ℹ️POC: https://lnkd.in/gzEWNHAX

#OSINT #FOFA #openssh #bugbounty #bugbountytips #cybersecurity #infosec

🔥2

2.31K viewsSaumadip Mandal, 06:10

Brut Security

Useful Google Dorks that bug bounty hunters can leverage to find sensitive information: 👇🏻

1. Discovering Exposed Files:
   - intitle:"index of" "site:target.com"
   - filetype:log inurl:log site:target.com
   - filetype:sql inurl:sql site:target.com
   - filetype:env inurl:.env site:target.com

2. Finding Sensitive Directories:
   - inurl:/phpinfo.php site:target.com
   - inurl:/admin site:target.com
   - inurl:/backup site:target.com
   - inurl:wp- site:target.com

3. Exposed Configuration Files:
   - filetype:config inurl:config site:target.com
   - filetype:ini inurl:wp-config.php site:target.com
   - filetype:json inurl:credentials site:target.com

4. Discovering Usernames and Passwords:
   - intext:"password" filetype:log site:target.com
   - intext:"username" filetype:log site:target.com
   - filetype:sql "password" site:target.com

5. Finding Database Files:
   - filetype:sql inurl:db site:target.com
   - filetype:sql inurl:dump site:target.com
   - filetype:bak inurl:db site:target.com

6. Exposed Git Repositories:
   - inurl:".git" site:target.com
   - inurl:"/.git/config" site:target.com
   - intitle:"index of" ".git" site:target.com

7. Finding Publicly Exposed Emails:
   - intext:"email" site:target.com
   - inurl:"contact" intext:"@target.com" -www.target.com
   - filetype:xls inurl:"email" site:target.com

8. Discovering Vulnerable Web Servers:
   - intitle:"Apache2 Ubuntu Default Page: It works" site:target.com
   - intitle:"Index of /" "Apache Server" site:target.com
   - intitle:"Welcome to nginx" site:target.com

9. Finding API Keys:
   - filetype:env "DB_PASSWORD" site:target.com
   - intext:"api_key" filetype:env site:target.com
   - intext:"AWS_ACCESS_KEY_ID" filetype:env site:target.com

10. Exposed Backup Files:
    - filetype:bak inurl:backup site:target.com
    - filetype:bak inurl:backup site:target.com
    - filetype:zip inurl:backup site:target.com
    - filetype:tgz inurl:backup site:target.com

Replace target.com with the domain or target you are focusing on.

#GoogleDorks
#BugHunting
#OSINT

❤13👍8🔥5🤣1

4.74K viewsSaumadip Mandal, 13:14

Brut Security

🚨CVE-2024-51482: A 10/10 Severity Vulnerability Exposes ZoneMinder’s SQL Databases

👇Dorks
HUNTER:/product.name="ZoneMinder"
SHODAN: http.favicon.hash:-1218152116
FOFA: app="ZoneMinder"

📰Refer: https://securityonline.info/zoneminders-cve-2024-51482-a-10-10-severity-vulnerability-exposes-sql-databases/

#ZoneMinder #SQL #hunterhow #infosec #infosecurity #OSINT #Vulnerability

2👍7❤2

3.34K viewsedited 05:26

Brut Security

🚫 CVE-2024-43468 : Microsoft Configuration Manager Remote Code Execution Vulnerability

🔥PoC:https://github.com/synacktiv/CVE-2024-43468

📌Dorks
HUNTER :http://product.name="Microsoft Configuration Manager Remote Control service"

▶️Refer:https://securityonline.info/cve-2024-43468-cvss-9-8-microsoft-configuration-manager-exploit-revealed-with-poc-code/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43468

#Microsoft #infosec #infosecurity #OSINT #Vulnerability

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥7🤝3❤2🗿2👍1

3.35K viewsedited 10:17

Brut Security

💡Snov finds email addresses on any website. #OSINT

snov.io/email-finder

👍10🔥6❤4🤨2

3.39K views10:37

Brut Security

⚠️CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus

🔽Dorks:
HUNTER : http://product.name="ManageEngine ADSelfService Plus"
FOFA : product="ManageEngine-ADSelfService-Plus"
SHODAN : title:"ADSelfService Plus"

🖥Refer:https://securityonline.info/cve-2025-1723-zoho-patches-account-takeover-vulnerability-in-adselfservice-plus/
https://manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html

#hunterhow #infosec #infosecurity #OSINT #Vulnerability

Please open Telegram to view this post

VIEW IN TELEGRAM

👍12🔥10❤2🐳1

4.84K views09:35

Brut Security

🚨 CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana

👇Dorks:
HUNTER : http://product.name="Elastic Kibana"
FOFA : product="Kibana"

📰Refer:https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution-vulnerability-patched-in-elastic-kibana/

#Kibana#hunterhow #infosec #infosecurity #OSINT #Vulnerability

🔥5❤3😱3

4.43K views13:04

Brut Security

🛡CVE-2025-27507(CVSS 9.0): Zitadel Insecure Direct Object Reference (IDOR) Vulnerability

👻Dork:
HUNTER : http://product.name="Zitadel"

⚠️Refer:https://securityonline.info/cve-2025-27507-cvss-9-0-zitadel-users-at-risk-of-account-takeover/

🖥

https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x

#hunterhow #infosec #infosecurity #OSINT #Vulnerability

Please open Telegram to view this post

VIEW IN TELEGRAM

🫡7👍3😱2

4.22K views16:42

Brut Security

a free online tool designed to generate dorks for precise, professional search. Built for the #OSINT community, ready to use. Better queries lead to better intelligence.🧠

🔗 syntax.goldenowl.ai

🤝9🔥7❤5👏1

4.36K viewsedited 05:15

Brut Security

Tired of switching tabs for OSINT and recon? Just join our Discord and type sudo help to unlock powerful tools in seconds!

✅ IP & Domain Lookup
✅ Email & Phone OSINT
✅ Subdomain Enumeration
✅ Reverse Image Search
✅ URL & Virus Scanners
✅ Temp Email, QR Tools, and more

🌟 You can create and play your own CTF in a minute , right inside Discord!

Try it out now — it’s fast, simple, and all in one chat.
🔗 https://discord.gg/u7uMFV833h

#ctf #bugbounty #osint #cybersecurity #discordtools #infosec

1🫡8❤4

4.78K views10:04

Brut Security

🔥 Exclusive ZoomEye Offer for Brut Security Members

✅ZoomEye is giving Brut Security members 5% off any membership plan — monthly or yearly — through our special link.

📌 How it works:

✦ Click our link: https://www.zoomeye.ai/pricing?aff=INVITE-2SW2-FC96
✦ Get instant 5% discount on your purchase

💡 Perfect for bug bounty hunters, pentesters, and researchers who rely on fast, deep internet asset scanning.

#bugbounty #pentesting #osint #cybersecurity #tools

ZoomEye

Search Engine of Internet-Connected Devices. Create a Free Account to Get Started.

🔥3❤1

3.55K viewsedited 09:49

Brut Security

Hey Hunter's,
DarkShadow here back again, just dropping a list of queries.

30K+ Search Queries 🚀
(Google | Shodan | FOFA)

For hunters, red teamers & OSINT warriors:

⚡ Hunt faster
⚡ Spot misconfigurations instantly
⚡ Scan the global surface with precision

GitHub →https://github.com/projectdiscovery/awesome-search-queries

Show your love Guy's ❤️

#bugbountytips #osint

🔥11❤7👍5😱4

4.35K viewsDarkShadow✨ ShellSec, 03:57

Brut Security