🚨 Warning to All Members 🚨

Brut Security is a professional community focused strictly on learning and discussing cybersecurity topics. Any personal questions about religion, race, or similar matters are strictly prohibited. We are here to learn and grow as ethical hackers, not to engage in discussions unrelated to cybersecurity.

Please adhere to these guidelines:

1. Keep all conversations focused on cybersecurity topics.
2. Avoid personal questions about members’ religious or cultural backgrounds.
3. Show respect for all members—this is a safe, professional space.

Failure to follow these rules will lead to immediate removal from the group.

For Queries Related to Enrolment or Other Questions, Do Reach here @brutsecurity_bot

CVE-2024-50550: Privilege Escalation in LiteSpeed Cache WP Plugin, 8.1 rating 🔥

Weak security hash verification vulnerability allows an attacker to gain administrative privileges.

Search at Netlas.io:
👉 Link: https://nt.ls/A60iV
👉 Dork: http.body:"plugins/litespeed-cache"

Read more: https://patchstack.com/articles/rare-case-of-privilege-escalation-patched-in-litespeed-cache-plugin/

Best Motivation Tip Ever

But Our Bro is Killing It 😂😂 Happy Diwali and 🎃

CVE-2024-49768: Race Condition in Waitress Python server, 9.1 rating 🔥

Due to an error, the server can process a request even if the connection should have been closed.

Search at Netlas.io:
👉 Link: https://nt.ls/VYS9t
👉 Dork: http.headers.server:"waitress"

Vendor's advisory: https://github.com/Pylons/waitress/security/advisories/GHSA-9298-4cf8-g4wj

Setup and host your own blind XSS and SSRF testing tool for free https://github.com/Rahim7X/Argus.git

Find sensitive files using Wayback

waybackurls 123.com | grep - -color -E "1.xls | \\.tar.gz | \\.bak | \\.xml | \\.xlsx | \\.json | \\.rar | \\.pdf | \\.sql | \\.doc | \\.docx | \\.pptx | \\.txt | \\.zip | \\.tgz | \\.7z"

#bugbountytip #bugbounty #bugbountytips

a XSS payload with Alert Obfuscation, for bypass Regex filter

<img src="X" onerror=top[8680439..toString(30)](1337)>

<script>top[8680439..toString(30)](1337)</script>

#infosec #cybersec #bugbountytip

https://github.com/ferreiraklet/jeeves

Time Based Blind Injection Scanner

Check for Subdomain Takeover Vulnerabilities

This enumerates subdomains and checks if they resolve. Subdomains that return NXDOMAIN may be vulnerable to takeover if they point to external services.

subfinder -d target.com -silent | while read sub; do host $sub; done | grep "NXDOMAIN"

Replace nasa.gov with your target.