This media is not supported in your browser
VIEW IN TELEGRAM
🚀 New Script Alert – Subdomain Monitoring (Coming Soon!)
from Brut Security
For those who’ve been waiting on a simple and efficient way to monitor subdomains automatically — your wait is almost over. 😌
We’ve been working on a Bash script that:
✅ Monitors your target domains every 6 hours
✅ Uses subfinder, anew, and notify
✅ Sends actual new subdomains as file attachments directly to your Discord webhook
✅ Clean, lightweight & made for practical usage in recon and bug bounty
The release isn’t today — dropping next week, but thought I’d give you all a heads-up.
If you’re into bug hunting, automation, or OSINT — this might be super useful for your workflow.
🔁 Share with your team
❤️ React if you’re excited
Let’s get the word out before the launch!
#BrutSecurity #bugbounty #subdomainmonitoring #infosec #recon #bashscript #automation
from Brut Security
For those who’ve been waiting on a simple and efficient way to monitor subdomains automatically — your wait is almost over. 😌
We’ve been working on a Bash script that:
✅ Monitors your target domains every 6 hours
✅ Uses subfinder, anew, and notify
✅ Sends actual new subdomains as file attachments directly to your Discord webhook
✅ Clean, lightweight & made for practical usage in recon and bug bounty
The release isn’t today — dropping next week, but thought I’d give you all a heads-up.
If you’re into bug hunting, automation, or OSINT — this might be super useful for your workflow.
🔁 Share with your team
❤️ React if you’re excited
Let’s get the word out before the launch!
#BrutSecurity #bugbounty #subdomainmonitoring #infosec #recon #bashscript #automation
21❤30👍6🔥4👏2
This media is not supported in your browser
VIEW IN TELEGRAM
Tired of manually collecting scopes from HackerOne, Bugcrowd, or other platforms? This upcoming Firefox extension is built just for bug bounty hunters like YOU!
🧪 Tested and working perfectly.
📦 Official launch coming SOON. Stay tuned for the drop!
#bugbounty #infosec #tools #bugbountyTips #recon #firefox #cybersecurity
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥27👍9❤4
Easily extract wildcard and normal domains from any bug bounty scope page with a single click.
#bugbounty #infosec #firefox #BrutSecurity #recon
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥16🗿10👍7❤3🤣1
⚡Google Dorks - Cloud Storage: site:s3.amazonaws.com "target[.]com" site:blob.core.windows.net "target[.]com" site:googleapis.com "target[.]com" site:drive.google.com "target[.]com"
👉Find buckets and sensitive data.
Combine:
site:s3.amazonaws.com | site:blob.core.windows.net | site:googleapis.com | site:drive.google.com "target[.]com"
Add something to narrow the results: "confidential” “privileged" “not for public release”
✅Credit- Mike Takahashi
#recon #bugbountytips #infosec #seo #dork
👉Find buckets and sensitive data.
Combine:
site:s3.amazonaws.com | site:blob.core.windows.net | site:googleapis.com | site:drive.google.com "target[.]com"
Add something to narrow the results: "confidential” “privileged" “not for public release”
✅Credit- Mike Takahashi
#recon #bugbountytips #infosec #seo #dork
🔥16❤9🗿4👍3
🔥 Bug Bounty Recon Tip: Find forgotten / hidden APIs & endpoints devs left behind! 🔥
Chain these 2 awesome free tools by @xnl-h4ck3r:
💡 Pro combo (most people run):
waymore -i example.com -oU urls.txt && xnLinkFinder -i urls.txt -sf example.com -o cli -sp
You’ll often discover undocumented /admin-api/v2, debug endpoints, old GraphQL paths, forgotten params with IDORs, leaked keys etc. → pure passive recon gold!
Install both via pip:
pip install waymore
pip install git+https://github.com/xnl-h4ck3r/xnLinkFinder.git
Repos:
→ https://github.com/xnl-h4ck3r/waymore
→ https://github.com/xnl-h4ck3r/xnLinkFinder
Happy hunting & don’t forget to chain → gau + katana + waymore + xnLinkFinder = monster recon list 😈
#BugBounty #Recon #WebHacking #APIHunting #CyberSecurity
Chain these 2 awesome free tools by @xnl-h4ck3r:
1️⃣ waymore → pulls massive archived URLs + responses from Wayback, Common Crawl, VirusTotal, URLScan, OTX & more
Basic command:
waymore -i target.com -oU waymore-urls.txt
2️⃣ xnLinkFinder → parses those responses / JS / pages and extracts juicy endpoints, parameters, secrets & even generates a target-specific wordlist
Chain it like this:
xnLinkFinder -i waymore-urls.txt -sf target.com -o results/💡 Pro combo (most people run):
waymore -i example.com -oU urls.txt && xnLinkFinder -i urls.txt -sf example.com -o cli -sp
You’ll often discover undocumented /admin-api/v2, debug endpoints, old GraphQL paths, forgotten params with IDORs, leaked keys etc. → pure passive recon gold!
Install both via pip:
pip install waymore
pip install git+https://github.com/xnl-h4ck3r/xnLinkFinder.git
Repos:
→ https://github.com/xnl-h4ck3r/waymore
→ https://github.com/xnl-h4ck3r/xnLinkFinder
Happy hunting & don’t forget to chain → gau + katana + waymore + xnLinkFinder = monster recon list 😈
#BugBounty #Recon #WebHacking #APIHunting #CyberSecurity
❤14👍7🔥2
BB Tip: Finding Potential SSRF Endpoints During Recon
SSRF often hides in plain sight. Many applications accept URLs or file paths as parameters, and those become prime targets.
A simple trick during recon is mining historical URLs and filtering parameters that typically fetch remote resources.
Example workflow:
What this does:
• Pulls archived endpoints from Wayback Machine
• Filters parameters commonly used for external requests
• Helps you quickly identify SSRF-like parameters
You will often find endpoints like:
Once you find them, start testing with payloads such as:
If the server makes the request on your behalf, you might have an SSRF.
Small recon tricks like this save hours of manual hunting.
#bugbounty #bugbountytips #ssrf #recon #pentesting #cybersecurity
SSRF often hides in plain sight. Many applications accept URLs or file paths as parameters, and those become prime targets.
A simple trick during recon is mining historical URLs and filtering parameters that typically fetch remote resources.
Example workflow:
echo "target.com" | waybackurls | grep -E "url=|uri=|path=|dest=|redirect=|window=|next=|target=|file=|html=|data=|reference="
What this does:
• Pulls archived endpoints from Wayback Machine
• Filters parameters commonly used for external requests
• Helps you quickly identify SSRF-like parameters
You will often find endpoints like:
/showimage.php?file=
/redirect?url=
/api/fetch?uri=
/download?path=
Once you find them, start testing with payloads such as:
http://127.0.0.1
http://169.254.169.254
http://burp-collaborator
If the server makes the request on your behalf, you might have an SSRF.
Small recon tricks like this save hours of manual hunting.
#bugbounty #bugbountytips #ssrf #recon #pentesting #cybersecurity
❤14🔥4👍2