redacted_demo.svg
376.4 KB
This tool demonstrates a privacy issue in Zomato's contact recommendation feature. By syncing a target phone number, the following data can be retrieved without the target's explicit consent (provided they have "Recommend to friends" enabled):
Please open Telegram to view this post
VIEW IN TELEGRAM
❤4
Forwarded from Brut Security 2.0
Cybersecurity Tools Collection (Pentesting • Recon • Web Security • Network Analysis) 💀
Download Link : https://drive.google.com/drive/u/0/mobile/folders/1lGnd9YAzE5-Nes8NAsDDMpd-Aq3GES3p
Download Link : https://drive.google.com/drive/u/0/mobile/folders/1lGnd9YAzE5-Nes8NAsDDMpd-Aq3GES3p
❤3👍2
Bug Bounty Masterclass 2026 10 Free Coupons https://topmate.io/saumadip/2009859?coupon_code=awxe
topmate.io
Bug Bounty Masterclass 2026 with Saumadip Mandal
Bug Bounty Masterclass 2026 with Saumadip Mandal · Beginner to bug bounty hunter — tools, recon & real PoCs. · Digital Product · ₹149 · Topmate
❤2🔥2👍1
Media is too big
VIEW IN TELEGRAM
Hey Hunter's,
DarkShadow is here back again!
(Sorry for the long delay, I was really too busy with my projects)
you can find vulnerabilities in chrome extensions!
even you can use this dork to find you target company extensions:
replace the nasa.gov to your target domain.
so guy's if you really love to read my methods follow me x.com/darkshadow2bd
#bugbountytips
DarkShadow is here back again!
(Sorry for the long delay, I was really too busy with my projects)
you can find vulnerabilities in chrome extensions!
All of your Chrome extensions are downloaded to your local storage. You can analyze them to find various vulnerabilities, and sometimes they contain sensitive API keys and tokens.
even you can use this dork to find you target company extensions:
site:chromewebstore.google.com "nasa.gov"
replace the nasa.gov to your target domain.
so guy's if you really love to read my methods follow me x.com/darkshadow2bd
#bugbountytips
❤6🔥2👍1
Happy Rath Yatra! 🙏
May Lord Jagannath bless you with unwavering faith, the strength to overcome every challenge, and the wisdom to choose the right path.
Just as the sacred chariot moves forward with purpose, may your life and journey always move toward growth, success, and peace.
Wishing you and your family a joyful, prosperous, and blessed Rath Yatra.
Jai Jagannath! ❤️🛕⚙️
May Lord Jagannath bless you with unwavering faith, the strength to overcome every challenge, and the wisdom to choose the right path.
Just as the sacred chariot moves forward with purpose, may your life and journey always move toward growth, success, and peace.
Wishing you and your family a joyful, prosperous, and blessed Rath Yatra.
Jai Jagannath! ❤️🛕⚙️
1❤15🔥2🗿2
#AD
Available SHells — any number and any quantity , any amount you want, any domain,
and any country — everything is available.
DM=> @Mm_fit
Channel= https://t.me/cve0day
#AD
Available SHells — any number and any quantity , any amount you want, any domain,
and any country — everything is available.
DM=> @Mm_fit
Channel= https://t.me/cve0day
#AD
❤3
💥 KeyHunter: A fast Rust tool for finding leaked API keys across public GitHub repos.
It supports 45+ providers and can verify which exposed secrets are still active.
GitHub: github.com/fadidevv/keyhunter
It supports 45+ providers and can verify which exposed secrets are still active.
GitHub: github.com/fadidevv/keyhunter
❤2👍2🔥1
☺️Your support keeps me motivated to share more valuable content! If you found this helpful, drop a like & send stars ⭐ to help me keep going.
💬 For queries, message me on Telegram: @wtf_brut
🎓 For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
💬 For queries, message me on Telegram: @wtf_brut
🎓 For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
Telegram
Saumadip Mandal
Founder & Mentor of Brut Security
❤5👍2🔥1
☄️SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.
https://github.com/RevoltSecurities/Spideyx
https://github.com/RevoltSecurities/Spideyx
❤6
‼️🚨 CVE-2026-63030 // wp2shell-poc: Proof-of-concept for an unauthenticated SQL injection in WordPress core that chains to remote code execution, via REST batch route confusion.
PoC: https://github.com/Icex0/wp2shell-poc
PoC: https://github.com/Icex0/wp2shell-poc
❤7👍3🔥3
‼️ CVE-2026-3891: A critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0.
PoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
PoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
👍4❤3🔥2
This media is not supported in your browser
VIEW IN TELEGRAM
💥 arsenal-ng: A Go-based pentest command launcher with 200+ cybersecurity cheat sheets built in.
Search commands, fill in arguments, and send them straight to your terminal instead of digging through notes every time.
GitHub: https://github.com/halilkirazkaya/arsenal-ng
Search commands, fill in arguments, and send them straight to your terminal instead of digging through notes every time.
GitHub: https://github.com/halilkirazkaya/arsenal-ng
❤5👍3
CVE-2026-60291, CVE-2026-60292, CVE-2026-60294 and other: A lot of vulnerabilities in Oracle Weblogic Server, 9.8 rating 🔥
Recently disclosed easily exploitable vulnerabilities in Oracle Weblogic Server allow unauthenticated attacker to compromise Oracle WebLogic Server.
Search at Netlas.io:
👉 Link: https://nt.ls/NdCqq
👉 Dork: tag.name:"weblogic"
Vendor's advisory:
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW
Recently disclosed easily exploitable vulnerabilities in Oracle Weblogic Server allow unauthenticated attacker to compromise Oracle WebLogic Server.
Search at Netlas.io:
👉 Link: https://nt.ls/NdCqq
👉 Dork: tag.name:"weblogic"
Vendor's advisory:
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW
❤7
Please open Telegram to view this post
VIEW IN TELEGRAM
😁13❤4🔥2🗿1