DM on WhatsApp - wa.link/brutsecurity
Please open Telegram to view this post
VIEW IN TELEGRAM
😁2❤1
🔔 A PoC/exploit has been discovered for vulnerability CVE-2026-35616
PT ID: PT-2026-30288
Vendor: Fortinet
Product: FortiClientEMS
Description: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
Link: https://github.com/Alaatk/CVE-2026-35616
PT ID: PT-2026-30288
Vendor: Fortinet
Product: FortiClientEMS
Description: A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.
Link: https://github.com/Alaatk/CVE-2026-35616
GitHub
GitHub - Alaatk/CVE-2026-35616: Fortinet FortiClientEMS improper access control
Fortinet FortiClientEMS improper access control. Contribute to Alaatk/CVE-2026-35616 development by creating an account on GitHub.
❤5
https://topmate.io/saumadip/2054509?coupon_code=awxe
Please open Telegram to view this post
VIEW IN TELEGRAM
topmate.io
Web Application Bug Bounty Methodology with Saumadip Mandal
Pro hacker's playbook: recon, XSS, SQLi, SSRF & more
❤1
⚡️PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus,etc
✅http://github.com/shadowsock5/Poc
✅http://github.com/shadowsock5/Poc
🔥8❤6🐳2👏1
CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572
https://github.com/dwisiswant0/next-16.2.4-pocs
https://github.com/dwisiswant0/next-16.2.4-pocs
GitHub
GitHub - dwisiswant0/next-16.2.4-pocs: Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579…
Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-445...
👍3❤2
✅ Real-world web attacks
✅ Live practical sessions
✅ Bug bounty methodology
✅ Recon to exploitation
✅ Report writing & workflow
✅ Beginner friendly + advanced concepts
📅 Batch Starts: June 2026
📍 Online Live Classes, Weekend Batch
📩 Limited seats available
Please open Telegram to view this post
VIEW IN TELEGRAM
❤5
Hey Hunter’s,
DarkShadow is here back again!
if you got any api endpoint and showing you unauthorized then use fake perameter like:
you can FUZZ like:
?admin=true,
?bypass=1,
debug=true,
OR try to add header “X-Custom-IP-Authorization: 127.0.0.1”
these are some underrated but very effective method which i use to check api endpoints.
if you guy’s really enjoy to read such method then show your love to react here 🔥❤️
DarkShadow is here back again!
if you got any api endpoint and showing you unauthorized then use fake perameter like:
/api/public = unauthorized
/api/public/latest?anything=/api/public
you can FUZZ like:
?admin=true,
?bypass=1,
debug=true,
OR try to add header “X-Custom-IP-Authorization: 127.0.0.1”
these are some underrated but very effective method which i use to check api endpoints.
if you guy’s really enjoy to read such method then show your love to react here 🔥❤️
🔥6❤4👍2
Please open Telegram to view this post
VIEW IN TELEGRAM
topmate.io
Web Application Bug Bounty Methodology with Saumadip Mandal
Pro hacker's playbook: recon, XSS, SQLi, SSRF & more
❤3🔥3👍2
A collection of AI agent prompts for bug bounty and pentesting workflows:
https://github.com/matty69v/Bug-Bounty-Agents
https://github.com/matty69v/Bug-Bounty-Agents
GitHub
GitHub - matty69v/Bug-Bounty-Agents: AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes
AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes - matty69v/Bug-Bounty-Agents
👍1
Please open Telegram to view this post
VIEW IN TELEGRAM
topmate.io
Bug Bounty Masterclass with Saumadip Mandal
Beginner to bug bounty hunter — tools, recon & real PoCs.