Root Access Club
wp2shell poc โ๏ธ โ โ โ โ โ โ Independent proof-of-concept for the unauthenticated WordPress REST batch route-confusion SQL injection associated with Searchlight Cyber's wp2shell advisory โบ โ โ โ โ โ โ โ โ โ GitHub ๐ฑ โ โ โ โ โ โ โ โ โ For educational purposes only. Use at your ownโฆ
Please open Telegram to view this post
VIEW IN TELEGRAM
Root Access Club
CVE-2026-63030: wp2shell โ ๏ธ a critical remote code execution vulnerability in WordPress core ๐ ๐ @RootAccessClub
Please open Telegram to view this post
VIEW IN TELEGRAM
โก2
A curated, battleโtested collection of offensive, defensive and AIโpowered security tools
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM
โก2
SubCat โ Fast subdomain enumeration tool โ๏ธ
Lightning fast subdomain discovery tool for security professionals and bug bounty hunters๐
GitHub๐
โ๏ธ @RootAccessClub
Lightning fast subdomain discovery tool for security professionals and bug bounty hunters
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM
โคโ๐ฅ3
WifiForge ๐
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different WiFi attack vectors and Wireless capabilities
Github๐ฑ
โ๏ธ @RootAccessClub
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different WiFi attack vectors and Wireless capabilities
Github
Please open Telegram to view this post
VIEW IN TELEGRAM
ADWSDomainDump ๐ฆฎ
Active Directory information dumper via ADWS (Active Directory Web Services)
Github๐ฑ
๐ @RootAccessClub
Active Directory information dumper via ADWS (Active Directory Web Services)
Github
Please open Telegram to view this post
VIEW IN TELEGRAM
BountyForge v3.0.0 ๐ฅ
BountyForge is an open-source automation framework built for Bug Bounty Hunters and Penetration Testers, designed to streamline the reconnaissance phase from start to finish๐
โญ๏ธ Automated subdomain enumeration
โญ๏ธ URL collection & historical endpoint discovery
โญ๏ธ HTTP probing & technology fingerprinting
โญ๏ธ Directory and file discovery
โญ๏ธ Scope management & organized reporting
โญ๏ธ Modular workflow with support for popular recon tools
Instead of manually chaining multiple utilities together, BountyForge integrates them into a single workflow, helping security researchers save time and focus on finding real vulnerabilities๐
๐ฅ Ideal for Bug Bounty, Red Team, and Web Application Recon๐
GitHubโ
๐ฅ @RootAccessClub
BountyForge is an open-source automation framework built for Bug Bounty Hunters and Penetration Testers, designed to streamline the reconnaissance phase from start to finish
Instead of manually chaining multiple utilities together, BountyForge integrates them into a single workflow, helping security researchers save time and focus on finding real vulnerabilities
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM
Finding SQL databases without relying on SQL injection ๐ฅ
1๏ธโฃ Enumerate every subdomain you can find ๐ฅ
2๏ธโฃ Collect URLs with tools like katana, gau, waybackurls, and urlfinder โ
3๏ธโฃ Merge everything and remove duplicates ๐ฆ
4๏ธโฃ Look for sensitive files and keywords such as .sql, .db, .bak, .zip, and .env ๐
Read Full Writeup๐
๐ @RootAccessClub
Read Full Writeup
Please open Telegram to view this post
VIEW IN TELEGRAM
โก2
usbliter8 โ iOS 27 beta jailbreak with usbliter8 ๐ฑ
Supported targets๐ด
iPhone 11๐ฑ
iPhone 11 Pro / Pro Max๐ฑ
GitHub๐ฑ
๐ @RootAccessClub
Supported targets
iPhone 11
iPhone 11 Pro / Pro Max
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM
โคโ๐ฅ2
Osint bot ๐
Phone number lookup bot for linked Facebook profiles and related search results๐ค
link๐
โ๏ธ @RootAccessClub
Phone number lookup bot for linked Facebook profiles and related search results
link
Please open Telegram to view this post
VIEW IN TELEGRAM
A Practical Guide to Connecting Burp Suite to Claude Code via MCP ๐
Read more๐
๐ @RootAccessClub
Read more
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
โคโ๐ฅ4๐ฅ2
LeaksForums โ ๏ธ
A series of leaks from hacker forums๐จโ๐ป
GitHub๐งโ๐ป
๐ @RootAccessClub
A series of leaks from hacker forums
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM
โคโ๐ฅ3
๐๐ฎ๐ซ๐ฉ๐๐๐๐๐๐๐ฎ๐ซ๐ข๐ญ๐ฒ๐๐ฎ๐ข๐ญ๐ โญ๏ธ
Professional grade Burp Suite extension for comprehensive API reconnaissance, intelligent fuzzing, and AI powered security testing๐ก
Features๐ช
๐ต Reconnaissance
โก๏ธ Advanced Fuzzing
๐ Discovery Tools
๐ฅ Export & Integration
Installation๐ฅ
1๏ธโฃ ๐ฅ Burp โก๏ธ Extender โก๏ธ Extensions โก๏ธ Add โก๏ธ Python
2๏ธโฃ Select๐ฅ BurpAPISecuritySuite.py
Extension loads and starts capturing automatically
Requirementsโ๏ธ
Burp Suite (Professional or Community Edition)โ
Jython Standalone JARโ
GitHub๐ฑ
๐ @RootAccessClub
๐ @BugCod3
Professional grade Burp Suite extension for comprehensive API reconnaissance, intelligent fuzzing, and AI powered security testing
Features
Installation
Extension loads and starts capturing automatically
Requirements
Burp Suite (Professional or Community Edition)
Jython Standalone JAR
GitHub
Please open Telegram to view this post
VIEW IN TELEGRAM