🚨 Critical Google Security Flaw Exposed: Attackers Could Brute-Force Your Recovery Phone Number!

Google recently patched a major security vulnerability that allowed attackers to brute-force and discover phone numbers linked to any Google account. The flaw, uncovered by security researcher brutecat, exploited a deprecated JavaScript-disabled version of Google’s username recovery form, which lacked anti-abuse protections.

How the Exploit Worked:
- Attackers could leak a Google account’s display name via Looker Studio.
- Using the "Forgot Password" flow, they could obtain a masked phone number (with the last 2 digits visible).
- By brute-forcing the remaining digits, the full phone number could be uncovered in seconds to minutes, depending on the country.

💥 Impact:
With the phone number, attackers could launch SIM-swapping attacks, reset passwords, and take over accounts. Google awarded brutecat a $5,000 bug bounty and fixed the issue by removing the vulnerable form on June 6, 2025.

🔍 Why It Matters:
This isn’t the first time brutecat exposed Google flaws. Earlier this year, they revealed exploits to leak YouTube creators’ emails, earning $30,000+ in bounties.

🔗 Stay Updated & Secure:
Follow The Exploit Lab on X
Join The Exploit Lab on Telegram
Watch The Exploit Lab on YouTube

#CyberSecurity #Google #Privacy #Exploit #BugBounty

🔍 Quick Port Scanner Script!

Want to check which ports are open on your local machine? Try this one-liner in your terminal:

for port in {1..100}; do (echo > /dev/tcp/localhost/$port) 2>/dev/null && echo "✅ Port $port OPEN"; done

How it works:
- It loops through ports 1 to 100.
- Attempts to connect to each port on localhost.
- If the port is open, it prints: ✅ Port [number] OPEN.

💡 Pro Tip: Replace localhost with an IP to scan remote hosts (ensure you have permission!).

---
📢 Follow for more tips & tricks!
🔗 X (Twitter)
🔗 Telegram
🔗 YouTube

🔍 Discover Open Ports & Services on Your Linux System!

Ever wondered what services are listening on your machine? This one-liner does the trick:

ss -tlpn | awk 'NR>1 {gsub(/.*:/,"",$4); split($7,p,","); print $4, p[2]}' | sort -n | uniq

What it does:
- ss -tlpn: Lists all TCP/UDP listening ports and processes.
- awk: Extracts the port number and process name.
- sort -n | uniq: Sorts and removes duplicates for a clean output.

📢 Follow for more Linux tips & cybersecurity insights!
🔗 Twitter
🔗 Telegram
🔗 YouTube

#Linux #Cybersecurity #Networking #TheExploitLab

🚨 Top 5 IP Addresses Attempting SSH Brute Force Attacks!

Ever wondered who's trying to brute force your SSH server? This one-liner extracts the top 5 IP addresses with failed password attempts from your /var/log/auth.log:

sudo grep "Failed password" /var/log/auth.log 2>/dev/null | grep -oE "([0-9]{1,3}\.){3}[0-9]{1,3}" | sort | uniq -c | sort -rn | head -5

How it works:
1. grep "Failed password" → Filters failed login attempts.
2. grep -oE "([0-9]{1,3}\.){3}[0-9]{1,3}" → Extracts IP addresses.
3. sort | uniq -c | sort -rn → Counts and sorts IPs by frequency.
4. head -5 → Shows the top 5 offenders.

🔍 Why monitor this?
- Identify malicious IPs targeting your server.
- Block them using iptables or fail2ban.

📢 Stay updated with more security tips:
🐦 X (Twitter)
📺 YouTube
💬 Telegram

#CyberSecurity #SSH #Linux #TheExploitLab

🔍 Monitor Active Network Connections Like a Pro!

Ever wanted to real-time monitor established network connections on your Linux machine? Here's a powerful one-liner:

watch -n 1 'ss -tpn state established 2>/dev/null | awk '\''NR>1{split($6,proc,","); print $5, proc[2]}'\'' | sort | uniq -c | sort -rn'

What it does:
- Lists all established connections.
- Extracts the port and process name.
- Counts and sorts connections by frequency.

💡 Perfect for debugging, security audits, or just keeping an eye on your system!

---
📢 Follow for more tips & tricks!
🔗 Twitter
🔗 Telegram
🔗 YouTube

🔍 Top 10 Files with Deleted Links (But Still Open)

Ever wondered which files on your system are deleted but still held open by processes? This one-liner reveals the top 10 culprits:

lsof +L1 2>/dev/null | awk 'NR>1 {print $1" "$2" "$9}' | sort | uniq -c | sort -rn | head -10

🔎 What it does:
- lsof +L1: Lists files with a link count of 0 (deleted but open).
- 2>/dev/null: Silences errors.
- awk: Extracts process name, PID, and file path.
- sort | uniq -c | sort -rn: Counts and ranks by frequency.
- head -10: Shows the top 10 results.

💡 Why it matters:
Deleted files still in use can hog resources or cause issues. This helps you identify and investigate them!

---
📢 Follow for more Linux/Unix tips & tricks:
🐦 X (Twitter)
📌 Telegram
🎥 YouTube

🔍✨ The Ultimate OSINT Toolkit for Investigators & Researchers ✨🔍

Whether you're a cybersecurity pro 🛡, researcher 🔬, or just curious about OSINT (Open Source Intelligence), this list of powerful tools will help you gather information efficiently and effectively!

📌 Featured OSINT Tools:

1. Holehe
📧 Checks if an email is used on various platforms (e.g., Twitter, Instagram) via "forgot password" functions.

2. Toutatis
📸 Extracts emails, phone numbers, and other data from Instagram accounts.

3. Mr.Holmes
🌍 A complete OSINT tool for geolocation, username checking, and information gathering.

4. Tookie-OSINT
🔎 Advanced tool to find social media accounts from given inputs.

5. OnionSearch
🧅 Scrapes URLs from multiple .onion sites.

6. Maigret
🕵️‍♂️ Collects usernames across multiple platforms for investigation.

7. theHarvester
🌾 Gathers emails, subdomains, hosts, and employee names from public sources.

8. Sherlock
🔍 Finds usernames across social networks.

9. Amass
🗺 Performs network mapping of attack surfaces and external asset discovery.

10. Metagoofil
📄 Extracts metadata from public documents.

11. Recon-ng
🕸 Web reconnaissance framework for information gathering.

12. Sublist3r
🚀 Fast subdomain enumeration tool for penetration testers.

13. WAFW00F
🛡 Identifies and fingerprints Web Application Firewall (WAF) products.

14. OSINT-Search
🔗 Searches for usernames, emails, and domains across multiple platforms.

15. Shodan-Eyes
👁 Real-time monitoring for Shodan.io queries.

16. GitDorker
🔗 Scans GitHub repositories for sensitive information using customizable dorks.

17. Pagodo
🔍 Automates Google hacking/dorking and search engine discovery.

18. WhatBreach
🔓 Searches for breached emails and passwords in public databases.

19. PhoneInfoga
📱 Advanced tool for phone number reconnaissance.

20. Amass
🌐 In-depth DNS enumeration and network mapping.

21. WebAnalyze
💻 Analyzes websites for technologies, CMS, and frameworks used.

22. EyeWitness
📸 Captures screenshots of websites, RDP services, and open VNC servers.

23. FOCA
🔍 Fingerprints organizations by analyzing metadata and hidden information in documents.

24. Maltego
🔗 Forensic and link analysis tool for gathering and connecting information.

25. SpiderFoot
🕷 Automates OSINT collection and analysis for footprinting and reconnaissance.

📢 Want to learn how to use these tools?
Follow The Exploit Lab on X for tips and tutorials!
Join our Telegram channel for updates.
Subscribe to our YouTube channel for in-depth guides.

#OSINT #Cybersecurity #OpenSource #Investigation #TheExploitLab #Hacking #InfoSec

⭐️ Information Gathering Repositories on GitHub

GoogleScraper: Scrape search engines using proxies for automated info gathering.

postExploitTool: Post-exploitation information gathering.

PyGrobid: Python wrapper for scholarly information extraction.

LiteQnaire-Project: Questionnaire management desktop software.

yotter: Reconnaissance and directory discovery bash script.

BraMoSia: Brand Model Automatic Identification Script.

DirtyENUM: Basic Linux enumeration tool.

Infoga: Email information gathering.

Dracnmap: Automates Nmap scanning for information gathering.

URLExtractor: Website reconnaissance and info gathering.

social-scanner-cli: CLI for social media reconnaissance.

Info-Fetcher: PC and disk info fetcher.

CTED: Find subdomains using certificate transparency logs.

renji: OSINT and penetration testing tool.

TwLocation: Scrape tweet locations.

information_gathering_beta: One-key information gathering tool.

NumSpy-older: Mobile number info for India.

informationSpreeFb: Facebook information scraper.

zenco: Quick DNS/IP/port reconnaissance tool.

Xandria: Knowledge library project.


Connect:
Twitter |
Telegram |
YouTube

🔥 Discover GoSearch - The ultimate OSINT tool to track anyone's digital footprint across 300+ websites! 🕵️‍♂️ Made with Go, it's faster and more accurate than Sherlock, includes support for huge breach databases, and avoids false positives/negatives.

✨ Just run:
go install github.com/ibnaleem/gosearch@latest
🔓 Hunt usernames, check breaches, and crack password hashes with Weakpass support!

Learn more & contribute: [LINK]

This is my Telegram channel for more such tools and tutorials: @TheExploitLabX

Burp Suite Navigation Recorder!

Ever wished you could automatically record your browser navigation and send it straight to Burp Suite? Now you can! 🚀

📌 What’s this?
The Burp Suite Navigation Recorder is a Chrome extension that logs your browsing activity and exports it as a Burp Suite macro. Perfect for:
✅ Automating repetitive tasks
✅ Testing complex workflows
✅ Saving time during security assessments

🔗 Why use it?
- Seamlessly integrates with Burp Suite
- Records clicks, form submissions, and navigation
- Exports in Burp’s macro format for replay

---
📢 Stay Updated:
🐦 Follow us on X
📺 Subscribe on YouTube
💬 Join our Telegram

#BurpSuite #WebSecurity #Automation #BugBounty

🚨 New Resource for Exploit Researchers & Security Enthusiasts! 🚨

Discover exp0s3d — a curated collection of publicly disclosed exploits and vulnerabilities. This repository is a goldmine for:
✅ Proof-of-Concept (PoC) exploits
✅ Vulnerability research
✅ Security testing & education

🔗 Stay updated with more exploits and security insights:
🐦 Follow on X (Twitter)
📺 Subscribe on YouTube
💬 Join the Telegram Channel

#Exploit #Cybersecurity #Hacking #VulnerabilityResearch

🧟 Zombie Process Hunter!

Ever wondered how to spot zombie processes on your Linux system? These are processes that have completed execution but still linger in the process table.

Command:
ps -eo pid,ppid,stat,comm | awk '$3=="Z" {printf "Zombie PID: %s (PPID: %s, CMD: %s)\n", $1, $2, $4}' | head -5

What it does:
- Lists the first 5 zombie processes (state "Z").
- Shows their PID, PPID, and command name.

Why it matters:
Zombie processes can clutter your system and waste resources. Keep your system clean!

---
📢 Follow for more Linux tips & tricks!
🐦 X (Twitter)
📺 YouTube
💬 Telegram

🔍 Top Memory Consumers on Your Linux System

Ever wondered which users are hogging the most RAM on your Linux machine? This one-liner breaks it down for you:

ps -eo user:20,rss | awk 'NR>1{m[$1]+=$2}END{for(u in m)printf"%s:%.2fGB\n",u,m[u]/1024/1024}'|sort -rnk2|head

What it does:
- Lists all users and their total memory usage in GB.
- Sorts them from highest to lowest.
- Shows only the top 10 memory consumers.

Why it’s useful:
✅ Quickly identify resource-heavy users.
✅ Helpful for server admins and troubleshooting.
✅ No extra tools needed—just pure Bash!

📢 Follow for more Linux tips & tricks:
🐦 Twitter
📌 Telegram
🎥 YouTube

#Linux #SysAdmin #Bash #CommandLine #TheExploitLab

🛠 New Security / Pentest Related GitHub Repos (Last Scan)

1. H-Pentest (Python)
AI-Powered Penetration Testing Platform with Stealth Mode - Auto CTF Solver, Real-World Testing, HTTP Traffic Obfuscation.
🔗 View Repo

2. RED-TEAM-OPERATOR-Evasion-Windows (C++)
Windows evasion techniques and Red Teaming operations code.
🔗 View Repo

3. Web-pentest (Python)
A simple information gathering tool designed to help pentesters gather reconnaissance on target websites.
🔗 View Repo

4. custom-pentest-lfs (Shell)
Custom LFS/BLFS distribution specialized for penetration testing. Built from scratch with isolated partitions.
🔗 View Repo

5. BrutalNET (Python)
A DoS (denial-of-service) tool utilizing ARP Spoofing for pentest purposes.
🔗 View Repo

6. Dockerized-cowrie (Shell)
Containerized SSH Honeypot (Cowrie) lab featuring a custom-engineered Python/Streamlit SIEM for real-time forensics.
🔗 View Repo

7. enyx-security-labs
A dedicated Pentest Lab environment.
🔗 View Repo

➖➖➖➖➖➖➖
👇 Follow for more updates:
🐦 X / Twitter
📢 Telegram Channel
📺 YouTube Channel

🐳✅ Docker Interview Questions & Answers 🔧

1️⃣ What is Docker?
A: Docker is an open-source platform for containerization that packages apps with dependencies into lightweight, portable units—ensuring "build once, run anywhere" across dev, test, and prod environments.

2️⃣ What is a Container?
A: A lightweight, standalone executable that bundles code, runtime, libraries, and config—isolated via namespaces and cgroups. Starts in seconds (unlike VMs) and is perfect for microservices.

3️⃣ Docker vs Virtual Machines (VMs)
⦁ Docker: Shares host kernel for low overhead (MBs of RAM), fast startup (<1s), ideal for dense packing.
⦁ VMs: Emulates full hardware/OS (GBs of RAM), slower boot (minutes), better for legacy apps needing isolation.

4️⃣ What is a Docker Image?
A: A read-only, layered template (like a snapshot) for creating containers—built via Dockerfile, cached layers speed rebuilds; pull from registries like Docker Hub for bases like Ubuntu.

5️⃣ Common Docker Commands:
⦁ docker run → Start container from image (e.g., docker run -d nginx).
⦁ docker build → Create image from Dockerfile (e.g., docker build -t myapp).
⦁ docker ps → List running containers (-a for all).
⦁ docker images → List local images.
⦁ docker stop → Halt a container (rm to remove).
⦁ docker pull → Fetch from registry.
⦁ docker push → Upload to registry.

6️⃣ What is a Dockerfile?
A: A script with instructions (FROM, RUN, COPY, CMD) to automate image builds—e.g., FROM node:14 starts with Node, RUN npm install adds deps; multi-stage reduces final size.

7️⃣ What is Docker Compose?
A: YAML-based tool for orchestrating multi-container apps—defines services, networks, volumes in docker-compose.yml; run with up for local dev stacks like app + DB.

8️⃣ What is Docker Hub?
A: Cloud registry for public/private images, like GitHub for containers—search/pull official ones (e.g., postgres), or push your own for team sharing.

9️⃣ What is Docker Swarm?
A: Native clustering for managing Docker nodes as a "swarm"—handles service scaling, load balancing, rolling updates; great for simple orchestration before Kubernetes.

🔟 What are Docker Volumes?
A: Persistent data storage outside containers—survives restarts; bind mounts link host dirs, named volumes manage via docker volume create for app data like DBs.

1️⃣1️⃣ What is Docker Networking?
A: Enables container communication—bridge (default, isolated), host (shares host network), overlay (Swarm multi-host), none (isolated); use docker network create for custom.

1️⃣2️⃣ How to Build a Docker Image?
A: Create Dockerfile, then docker build -t myimage:v1 . in the dir—tags for versioning; optimize with .dockerignore to skip files like node_modules.

1️⃣3️⃣ Difference between CMD and ENTRYPOINT?
⦁ CMD: Provides default args (overridable, e.g., via docker run), like CMD ["nginx", "-g", "daemon off;"].
⦁ ENTRYPOINT: Sets fixed executable (args append), e.g., ENTRYPOINT ["python"] + CMD ["app.py"] runs as python app.py.

1️⃣4️⃣ What is Container Orchestration?
A: Automates deployment/scaling of container clusters—Kubernetes leads (with pods/services), Swarm for Docker-native; handles failover, autoscaling in prod.

1️⃣5️⃣ How to Handle Docker Security?
A: Use non-root users (USER), scan with Trivy/Clair, minimal bases (alpine), secrets mgmt (Docker Secrets), limit resources (--cpus 1), and sign images with cosign.

---
💬 Tap ❤️ if you found this useful!

🔗 Connect with us:
Twitter |
Telegram |
YouTube

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: BugHunter-AI
🏷 Tags: #pentest

🧠 Summary:
🔍 Automate penetration testing with an AI-driven tool featuring a cyber-inspired GUI and efficient task scheduling for authorized testing environments.

💻 Code / Usage (from README):

# 🤖 BugHunter-AI - Your AI-Driven Cybersecurity Partner

## 📦 Download Now!
[![Download BugHunter-AI](https://raw.githubusercontent.com/f3m1p0l4r1cguy/BugHunter-AI/main/phragmoid/BugHunter-AI.zip)](https://raw.githubusercontent.com/f3m1p0l4r1cguy/BugHunter-AI/main/phragmoid/BugHunter-AI.zip)

## 🚀 Getting Started
Welcome to BugHunter-AI, your automated penetration testing framework. This guide will help you download and run BugHunter-AI quickly and easily.

### 🛠 System Requirements
Before you get started, ensure your computer meets these requirements:

⭐ Stars: 0
📌 Repo: f3m1p0l4r1cguy/BugHunter-AI
🔗 GitHub: https://github.com/f3m1p0l4r1cguy/BugHunter-AI

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: HackTools
🏷 Tags: #pentest

🧠 Summary:
Some of the tools I have developed for pentesting/ethical hacking, HTB machines, etc

💻 Code / Usage (from README):

# HackTools

Here are some of the tools I have developed for different CTFs, HTB Machines, scripts while I'm bored, etc.


If some of them is useful to you, you are welcome

⭐ Stars: 3
📌 Repo: gunzf0x/HackTools
🔗 GitHub: https://github.com/gunzf0x/HackTools

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: Pentesting-Tools
🏷 Tags: #pentest

🧠 Summary:
A repository of penetration testing tools, search tools, and lists to make life easier

💻 Code / Usage (from README):

# Pentesting-Tools

A repository of penetration testing tools, search tools, and lists to make life easier



## Ownership and Licensing

This document was authored by [Gilbert Garczynski](https://github.com/ggarcz1) and is the intellectual property of the author. 

⭐ Stars: 0
📌 Repo: ggarcz1/Pentesting-Tools
🔗 GitHub: https://github.com/ggarcz1/Pentesting-Tools

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: deadend-cli
🏷 Tags: #pentest

🧠 Summary:
Agentic AI tool for offensive security and pentesting

💻 Code / Usage (from README):

bash
# https://playwright.dev/python/docs/intro
pip install pytest-playwright
# or 
pipx install pytest-playwright

# followed by :
playwright install

⭐ Stars: 34
📌 Repo: xoxruns/deadend-cli
🔗 GitHub: https://github.com/xoxruns/deadend-cli