Please open Telegram to view this post
VIEW IN TELEGRAM
🔥6
New Web Based Subdomain Discovery Service 🔍
crt.name is a new web based service for discovering subdomains through Certificate Transparency (CT) logs🌐
It searches publicly available certificate records to identify subdomains associated with a target domain🔵
Useful for❓
• Subdomain Enumeration
• Reconnaissance
• Asset Discovery
• Bug Bounty Recon
crt.name🔗
💎 @RootAccessClub
💎 @BugCod3
crt.name is a new web based service for discovering subdomains through Certificate Transparency (CT) logs
It searches publicly available certificate records to identify subdomains associated with a target domain
Useful for
• Subdomain Enumeration
• Reconnaissance
• Asset Discovery
• Bug Bounty Recon
crt.name
Please open Telegram to view this post
VIEW IN TELEGRAM
❤5🔥4👍1
🐞 Bug Bounty Quiz
Which vulnerability is this? GET /api/user/123 Changing 123 to 124 exposes another user's data.
Which vulnerability is this? GET /api/user/123 Changing 123 to 124 exposes another user's data.
Anonymous Quiz
18%
A) XSS
63%
B) IDOR
12%
C) SSRF
7%
D) CSRF
❤4❤🔥4
Media is too big
VIEW IN TELEGRAM
❄️ SubZer0 – Noise in. Priority out
Thousands of new CVEs every month
Only a few actually matter — SubZer0 shows you which ones to patch first
🔴 KEV · EPSS · PoC · Metasploit · Nuclei — all in one view
🔐 SHA-256 verified · auto-refreshed every 6h
⚡️ Free · no sign-up · no tracking
🌐 iliya-bashrc.github.io/SubZer0
💻 github.com/iliya-bashrc/SubZer0
💎 @RootAccessClub × @BugCod3
Thousands of new CVEs every month
Only a few actually matter — SubZer0 shows you which ones to patch first
🔴 KEV · EPSS · PoC · Metasploit · Nuclei — all in one view
🔐 SHA-256 verified · auto-refreshed every 6h
⚡️ Free · no sign-up · no tracking
🌐 iliya-bashrc.github.io/SubZer0
💻 github.com/iliya-bashrc/SubZer0
💎 @RootAccessClub × @BugCod3
🔥4⚡2❤1
BugCod3
Revelar – Origin Reveal PRO 👁🗨 Overview: Revelar (Origin Reveal PRO) is a professional Go-based CLI tool for uncovering real/origin IP addresses of websites behind CDNs such as Cloudflare, Akamai, Fastly, Imperva, and AWS CloudFront. 📊 Features: ⚪️ Detects…
This media is not supported in your browser
VIEW IN TELEGRAM
🩸 REVELAR v2.0 — Unmask the real origin IP behind any CDN. 👁️
Cloudflare. Fastly. Akamai. They only hide the front door.
Every origin still leaves a trace — Revelar locks onto it.
⚙️ 18+ OSINT sources · live CDN fingerprinting · DNS/SPF/ASN pivot
favicon mmh3 · TLS cert hunting · smart origin scoring (0–100)
One command. Full arsenal.
$ revelar -d target.com -active -deep
🐺 Free & open-source.
⭐ github.com/MRvirusIR/Revelar
📡 @BugCod3 🤝 @RootAccessClub
✖️ Twitter
#bugbounty #recon #osint #infosec #cybersecurity #Revelar
Cloudflare. Fastly. Akamai. They only hide the front door.
Every origin still leaves a trace — Revelar locks onto it.
⚙️ 18+ OSINT sources · live CDN fingerprinting · DNS/SPF/ASN pivot
favicon mmh3 · TLS cert hunting · smart origin scoring (0–100)
One command. Full arsenal.
$ revelar -d target.com -active -deep
🐺 Free & open-source.
⭐ github.com/MRvirusIR/Revelar
📡 @BugCod3 🤝 @RootAccessClub
✖️ Twitter
#bugbounty #recon #osint #infosec #cybersecurity #Revelar
⚡3🔥2
BugCod3
Dork Scraper Scrape website URLs using Google Dorks. GitHub #RedTeam #Dork #Scraper #Google ➖➖➖➖➖➖➖➖➖➖ 👤 T.me/MRvirusIRBOT 📢 T.me/BugCod3
🚀 Big Update: Dork-Scraper v2.0.0 is out!
I rewrote Dork-Scraper from scratch. It's no longer a simple script. It's now a full recon tool for bug bounty and pentesting 🔥
🧠 What's new?
🔎 4 search engines:
⚡️ Lightweight HTTP by default, so no browser needed (Selenium is optional)
📂 Batch mode: run dozens of d
0rks from a file + ready-made d0rk lists
🧹 Built-in cleaning: dedupe, strip tracking params, domain & parameter filters
💾 Export to
🥷 Rotating User-Agents, random delays, proxy support & CAPTCHA detection
✅ Unit tests + CI + full docs
🧪 Example:
📥 Download & docs:
🔗 github.com/MRvirusIR/Dork-Scraper
⚠️ For legal, authorized testing only.
👑 @BugCod3
#BugBounty #Recon #OSINT #Pentest #D0rking
I rewrote Dork-Scraper from scratch. It's no longer a simple script. It's now a full recon tool for bug bounty and pentesting 🔥
🧠 What's new?
🔎 4 search engines:
Google · Bing · DuckDuckGo · Yahoo⚡️ Lightweight HTTP by default, so no browser needed (Selenium is optional)
📂 Batch mode: run dozens of d
0rks from a file + ready-made d0rk lists
🧹 Built-in cleaning: dedupe, strip tracking params, domain & parameter filters
💾 Export to
TXT / JSON / CSV🥷 Rotating User-Agents, random delays, proxy support & CAPTCHA detection
✅ Unit tests + CI + full docs
🧪 Example:
dork-scraper -D d0rks/sqli.txt --params-only --unique pattern -f json -o targets.json📥 Download & docs:
🔗 github.com/MRvirusIR/Dork-Scraper
⚠️ For legal, authorized testing only.
👑 @BugCod3
#BugBounty #Recon #OSINT #Pentest #D0rking
⚡2❤2🔥1
📢 Service Update
Dear users,
Our bots were offline for a while and temporarily unavailable. We're happy to announce that all bots are now back online and ready to use! ✅
Thank you for your patience and continued support. ❤️
T.me/BugCod3BOT
T.me/BugCod3UPBOT
Dear users,
Our bots were offline for a while and temporarily unavailable. We're happy to announce that all bots are now back online and ready to use! ✅
Thank you for your patience and continued support. ❤️
T.me/BugCod3BOT
T.me/BugCod3UPBOT
❤2
BugCod3
This media is not supported in your browser
VIEW IN TELEGRAM
🚀 BugCod3 IP CDN Scanner v2.0 is out!
Find clean, low-latency CDN IPs, fast ⚡️
▫️ Async engine, 15+ CDNs detected
▫️ Real TLS/SNI test + Cloudflare PoP
▫️ Latency, jitter & loss with a 0–100 score
▫️ Live dashboard + interactive HTML report
▫️ Auto-updated CDN ranges & resume support
🛠 pip install git+https://github.com/MRvirusIR/BugCod3-IP-CDN-Scanner
🎯 bugcod3 ranges cloudflare | bugcod3 scan -i - --sample 2 -p cf-tls --sni your.domain.com
📦 github.com/MRvirusIR/BugCod3-IP-CDN-Scanner
⭐️ Star it if you like it!
⚠️ Authorized use only.
#BugCod3 #CDN #Cloudflare #CleanIP #OpenSource
📡 @BugCod3 | @RootAccessClub
Find clean, low-latency CDN IPs, fast ⚡️
▫️ Async engine, 15+ CDNs detected
▫️ Real TLS/SNI test + Cloudflare PoP
▫️ Latency, jitter & loss with a 0–100 score
▫️ Live dashboard + interactive HTML report
▫️ Auto-updated CDN ranges & resume support
🛠 pip install git+https://github.com/MRvirusIR/BugCod3-IP-CDN-Scanner
🎯 bugcod3 ranges cloudflare | bugcod3 scan -i - --sample 2 -p cf-tls --sni your.domain.com
📦 github.com/MRvirusIR/BugCod3-IP-CDN-Scanner
⭐️ Star it if you like it!
⚠️ Authorized use only.
#BugCod3 #CDN #Cloudflare #CleanIP #OpenSource
📡 @BugCod3 | @RootAccessClub
⚡2❤🔥1❤1👍1🔥1
This media is not supported in your browser
VIEW IN TELEGRAM
🤫 What they'd never say to your face… lands here, anonymously.
Create your personal WhisperTopic link, drop it in your bio or story, and let anyone message you without revealing who they are 👀
✨ Why WhisperTopic?
🗂 A private topic for every sender, no more messy chats
🎯 Message anyone anonymously
👀 Seen receipts, know when your message is read
✏️ Edits & ❤️ reactions, everything stays in sync
🛡 Profanity filter & one-tap block
🎭 Identity revealed only with consent
🎲 Ready-made story prompts
🔒 Your identity is never revealed.
👇 Get your free link now:
🤖 @WhisperTopicBot
https://t.me/WhisperTopicBot
⚡️ Powered by @BugCod3
Create your personal WhisperTopic link, drop it in your bio or story, and let anyone message you without revealing who they are 👀
✨ Why WhisperTopic?
🗂 A private topic for every sender, no more messy chats
🎯 Message anyone anonymously
👀 Seen receipts, know when your message is read
✏️ Edits & ❤️ reactions, everything stays in sync
🛡 Profanity filter & one-tap block
🎭 Identity revealed only with consent
🎲 Ready-made story prompts
🔒 Your identity is never revealed.
👇 Get your free link now:
🤖 @WhisperTopicBot
https://t.me/WhisperTopicBot
⚡️ Powered by @BugCod3
❤2⚡1🔥1
BugCod3
🤫 What they'd never say to your face… lands here, anonymously. Create your personal WhisperTopic link, drop it in your bio or story, and let anyone message you without revealing who they are 👀 ✨ Why WhisperTopic? 🗂 A private topic for every sender, no more…
🚀 Give it a try, share it with your friends 👥
and tell us what you think, we'd love to hear from you! 💜
and tell us what you think, we'd love to hear from you! 💜
❤1❤🔥1
Forwarded from Root Access Club
🚨 PHP2Shell is live on SubZer0
Two critical PHP core flaws, CVSS 9.2:
One unauthenticated request can lead to remote code execution.
✅ Fixed in: PHP 8.5.12 · 8.4.27 · 8.3.36 · 8.2.35
📂 On the site: 30+ public PoCs (updated every 15 min), scanners, Nuclei templates and official advisories
🔗 https://iliya-bashrc.github.io/SubZer0/
⚠️ Run PoCs only in a test lab
#PHP2Shell #PHP #RCE
@RootAccessClub × @BugCod3
Two critical PHP core flaws, CVSS 9.2:
CVE-2026-109618 + CVE-2026-109619One unauthenticated request can lead to remote code execution.
✅ Fixed in: PHP 8.5.12 · 8.4.27 · 8.3.36 · 8.2.35
📂 On the site: 30+ public PoCs (updated every 15 min), scanners, Nuclei templates and official advisories
🔗 https://iliya-bashrc.github.io/SubZer0/
⚠️ Run PoCs only in a test lab
#PHP2Shell #PHP #RCE
@RootAccessClub × @BugCod3
⚡4❤2
Media is too big
VIEW IN TELEGRAM
🚀 bugcod3.com is LIVE
From Shadows To Shells — the BugCod3 channel now has a home 🏴☠️
🧰 Arsenal — 176+ hacking tools, searchable, with live GitHub stars
📰 Feed — every post from this channel, filterable by tag
🧪 Lab — reverse shells, JWT debugger, XSS payloads, encoders, hash ID… 100% in-browser
🧠 Daily Quiz — earn points, keep your 🔥 streak, climb the leaderboard
✍️ Write-ups — deep-dive bug bounty articles
🔐 2FA + GitHub/Google login · 📲 installable on your phone
🎲 Hit "Surprise me" in the Arsenal
👀 Psst… type "hack" on the site
👉 https://bugcod3.com
Learn • Hunt • Dominate ⚡️
#BugBounty #Tools #CyberSecurity
From Shadows To Shells — the BugCod3 channel now has a home 🏴☠️
🧰 Arsenal — 176+ hacking tools, searchable, with live GitHub stars
📰 Feed — every post from this channel, filterable by tag
🧪 Lab — reverse shells, JWT debugger, XSS payloads, encoders, hash ID… 100% in-browser
🧠 Daily Quiz — earn points, keep your 🔥 streak, climb the leaderboard
✍️ Write-ups — deep-dive bug bounty articles
🔐 2FA + GitHub/Google login · 📲 installable on your phone
🎲 Hit "Surprise me" in the Arsenal
👀 Psst… type "hack" on the site
👉 https://bugcod3.com
Learn • Hunt • Dominate ⚡️
#BugBounty #Tools #CyberSecurity
🔥3⚡1❤1