Hey Hunter's,
DarkShadow is hare back again!

Well this is Not releted any POC or Method, This is a burp suite Ai extension which is really really awesome. So don't forget to try it 💀

https://github.com/six2dez/burp-ai-agent

#bugbountytip #tool

Hey Hunter’s,
DarkShadow is here back again, dropping a SSFR bypass method.

if you ever test SSRF, and there any parameter passing url with a fixed endpoint then try like:

burpcollab.com/anything/endpoint/../../

#ssrf #bugbountytips

#AD

⭕️ WordPress Testing Tool + Auto Upload (2026)

• Extracts usernames using multiple methods
• Tests ~395 passwords per user with smart patterns
• Intelligent WP detection with multi-login support
• WAF-aware headers
• 100 concurrent threads for fast scanning
• Multi-language support

⚡️ Covers one site completely before moving to the next for maximum results.

🐶 DM: @Mm_fit
⚠️ Limited access for 3 users only

Channel: https://t.me/cve0day

#AD

Hey Hunter’s,
DarkShadow is here back again!

Laravel-livewire RCE (CVE-2025-54068) - Video POC

Here is the Exploit Github repo: https://github.com/synacktiv/Livepyre

~credit synacktiv

#bugbountytips #rce

🚨 CVE-2026-24770: RAGFlow RCE (Zip Slip) Weaponized PoC

Critical unauthenticated RCE in RAGFlow’s MinerUParser—attackers can execute arbitrary commands. 3,000+ instances are currently exposed.

🔍 Identify Targets via ZoomEye:

Filter: vul.cve="CVE-2026-24770"

Dork: app="RAGFlow" 👉 ZoomEye Search Link https://www.zoomeye.ai/searchResult?q=dnVsLmN2ZT0iQ1ZFLTIwMjYtMjQ3NzAi&utm_source=twitter&utm_medium=social&utm_campaign=cve_ops_20260209

Automates enumeration and recon scans in the background

https://github.com/21y4d/nmapAutomator

🛡️ CVE | Cyber Vulnerabilities Exchange

A professional channel focused on verified CVEs, critical vulnerabilities, exploit research, and technical security analysis.

What you’ll get:
• Newly disclosed vulnerabilities
• Exploit research and PoCs
• Technical breakdowns and mitigation insights
• Offensive and defensive security discussions
• Practical input for pentesters and security professionals

Clear, technical, and research-driven. No noise, no exaggeration.

⚠️ Shared for educational and security awareness purposes only.

Channel: https://t.me/cve0day

File Upload Cheatsheet