Brut Security
17.7K subscribers
1.15K photos
102 videos
362 files
1.26K links
βœ…DM: @wtf_brut
βœ…For Ad: https://tlmtr.io/p/2flAsc
πŸ›ƒWhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
πŸ“¨Mail: info@brutsec.com
Download Telegram
Forwarded from Brut Security 2.0
Cybersecurity Tools Collection (Pentesting β€’ Recon β€’ Web Security β€’ Network Analysis) πŸ’€

Download Link : https://drive.google.com/drive/u/0/mobile/folders/1lGnd9YAzE5-Nes8NAsDDMpd-Aq3GES3p
❀3πŸ‘2
Media is too big
VIEW IN TELEGRAM
‼️ CVE-2025-26529: Moodle XSS to RCE Exploit

GitHub: https://github.com/Astroo18/PoC-CVE-2025-26529
❀3πŸ‘1
Media is too big
VIEW IN TELEGRAM
Hey Hunter's,
DarkShadow is here back again!

(Sorry for the long delay, I was really too busy with my projects)

you can find vulnerabilities in chrome extensions!


All of your Chrome extensions are downloaded to your local storage. You can analyze them to find various vulnerabilities, and sometimes they contain sensitive API keys and tokens.


even you can use this dork to find you target company extensions:

site:chromewebstore.google.com "nasa.gov"

replace the nasa.gov to your target domain.


so guy's if you really love to read my methods follow me x.com/darkshadow2bd

#bugbountytips
❀6πŸ”₯2πŸ‘1
Happy Rath Yatra! πŸ™

May Lord Jagannath bless you with unwavering faith, the strength to overcome every challenge, and the wisdom to choose the right path.

Just as the sacred chariot moves forward with purpose, may your life and journey always move toward growth, success, and peace.

Wishing you and your family a joyful, prosperous, and blessed Rath Yatra.

Jai Jagannath! β€οΈπŸ›•βš™οΈ
1❀15πŸ”₯2πŸ—Ώ2
❀2πŸ‘2
#AD

Available SHells β€” any number and any quantity , any amount you want, any domain,
and any country β€” everything is available.

DM=> @Mm_fit

Channel= https://t.me/cve0day

#AD
❀3
πŸ’₯ KeyHunter: A fast Rust tool for finding leaked API keys across public GitHub repos.

It supports 45+ providers and can verify which exposed secrets are still active.

GitHub: github.com/fadidevv/keyhunter
❀2πŸ‘2πŸ”₯1
☺️Your support keeps me motivated to share more valuable content! If you found this helpful, drop a like & send stars ⭐ to help me keep going.

πŸ’¬ For queries, message me on Telegram: @wtf_brut
πŸŽ“ For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
❀5πŸ‘2πŸ”₯1
β˜„οΈSpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.

https://github.com/RevoltSecurities/Spideyx
❀6
❀2πŸ‘1
β€ΌοΈπŸš¨ CVE-2026-63030 // wp2shell-poc: Proof-of-concept for an unauthenticated SQL injection in WordPress core that chains to remote code execution, via REST batch route confusion.

PoC: https://github.com/Icex0/wp2shell-poc
❀7πŸ‘3πŸ”₯3
‼️ CVE-2026-3891: A critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0.

PoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
πŸ‘4❀3πŸ”₯2
This media is not supported in your browser
VIEW IN TELEGRAM
πŸ’₯ arsenal-ng: A Go-based pentest command launcher with 200+ cybersecurity cheat sheets built in.

Search commands, fill in arguments, and send them straight to your terminal instead of digging through notes every time.

GitHub: https://github.com/halilkirazkaya/arsenal-ng
❀5πŸ‘3
CVE-2026-60291, CVE-2026-60292, CVE-2026-60294 and other: A lot of vulnerabilities in Oracle Weblogic Server, 9.8 rating πŸ”₯

Recently disclosed easily exploitable vulnerabilities in Oracle Weblogic Server allow unauthenticated attacker to compromise Oracle WebLogic Server.

Search at Netlas.io:
πŸ‘‰ Link: https://nt.ls/NdCqq
πŸ‘‰ Dork: tag.name:"weblogic"

Vendor's advisory:
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW
❀7
i can only imagine what this website has seenπŸ€”πŸ€”πŸ€”
Please open Telegram to view this post
VIEW IN TELEGRAM
😁13❀4πŸ”₯2πŸ—Ώ1
Looking for a mod to post some good contents. If anyone is interested please drop a message in the comments.
❀4
🚨OSCP Checklist 2026 🚨
https://anshu19981.github.io/OscpCheckList2026/
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ‘9❀6