Forwarded from Brut Security 2.0
Cybersecurity Tools Collection (Pentesting β’ Recon β’ Web Security β’ Network Analysis) π
Download Link : https://drive.google.com/drive/u/0/mobile/folders/1lGnd9YAzE5-Nes8NAsDDMpd-Aq3GES3p
Download Link : https://drive.google.com/drive/u/0/mobile/folders/1lGnd9YAzE5-Nes8NAsDDMpd-Aq3GES3p
β€3π2
Bug Bounty Masterclass 2026 10 Free Coupons https://topmate.io/saumadip/2009859?coupon_code=awxe
topmate.io
Bug Bounty Masterclass 2026 with Saumadip Mandal
Bug Bounty Masterclass 2026 with Saumadip Mandal Β· Beginner to bug bounty hunter β tools, recon & real PoCs. Β· Digital Product Β· βΉ149 Β· Topmate
β€2π₯2π1
Media is too big
VIEW IN TELEGRAM
βΌοΈ CVE-2025-26529: Moodle XSS to RCE Exploit
GitHub: https://github.com/Astroo18/PoC-CVE-2025-26529
GitHub: https://github.com/Astroo18/PoC-CVE-2025-26529
β€3π1
Media is too big
VIEW IN TELEGRAM
Hey Hunter's,
DarkShadow is here back again!
(Sorry for the long delay, I was really too busy with my projects)
you can find vulnerabilities in chrome extensions!
even you can use this dork to find you target company extensions:
replace the nasa.gov to your target domain.
so guy's if you really love to read my methods follow me x.com/darkshadow2bd
#bugbountytips
DarkShadow is here back again!
(Sorry for the long delay, I was really too busy with my projects)
you can find vulnerabilities in chrome extensions!
All of your Chrome extensions are downloaded to your local storage. You can analyze them to find various vulnerabilities, and sometimes they contain sensitive API keys and tokens.
even you can use this dork to find you target company extensions:
site:chromewebstore.google.com "nasa.gov"
replace the nasa.gov to your target domain.
so guy's if you really love to read my methods follow me x.com/darkshadow2bd
#bugbountytips
β€6π₯2π1
Happy Rath Yatra! π
May Lord Jagannath bless you with unwavering faith, the strength to overcome every challenge, and the wisdom to choose the right path.
Just as the sacred chariot moves forward with purpose, may your life and journey always move toward growth, success, and peace.
Wishing you and your family a joyful, prosperous, and blessed Rath Yatra.
Jai Jagannath! β€οΈπβοΈ
May Lord Jagannath bless you with unwavering faith, the strength to overcome every challenge, and the wisdom to choose the right path.
Just as the sacred chariot moves forward with purpose, may your life and journey always move toward growth, success, and peace.
Wishing you and your family a joyful, prosperous, and blessed Rath Yatra.
Jai Jagannath! β€οΈπβοΈ
1β€15π₯2πΏ2
#AD
Available SHells β any number and any quantity , any amount you want, any domain,
and any country β everything is available.
DM=> @Mm_fit
Channel= https://t.me/cve0day
#AD
Available SHells β any number and any quantity , any amount you want, any domain,
and any country β everything is available.
DM=> @Mm_fit
Channel= https://t.me/cve0day
#AD
β€3
π₯ KeyHunter: A fast Rust tool for finding leaked API keys across public GitHub repos.
It supports 45+ providers and can verify which exposed secrets are still active.
GitHub: github.com/fadidevv/keyhunter
It supports 45+ providers and can verify which exposed secrets are still active.
GitHub: github.com/fadidevv/keyhunter
β€2π2π₯1
βΊοΈYour support keeps me motivated to share more valuable content! If you found this helpful, drop a like & send stars β to help me keep going.
π¬ For queries, message me on Telegram: @wtf_brut
π For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
π¬ For queries, message me on Telegram: @wtf_brut
π For course enrollment, reach out on WhatsApp: wa.link/brutsecurity
Telegram
Saumadip Mandal
Founder & Mentor of Brut Security
β€5π2π₯1
βοΈSpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.
https://github.com/RevoltSecurities/Spideyx
https://github.com/RevoltSecurities/Spideyx
β€6
10 Free Coupons for the new joiners https://topmate.io/saumadip/2187710?coupon_code=awxeawxe
β€2π1
βΌοΈπ¨ CVE-2026-63030 // wp2shell-poc: Proof-of-concept for an unauthenticated SQL injection in WordPress core that chains to remote code execution, via REST batch route confusion.
PoC: https://github.com/Icex0/wp2shell-poc
PoC: https://github.com/Icex0/wp2shell-poc
β€7π3π₯3
βΌοΈ CVE-2026-3891: A critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0.
PoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
PoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit
π4β€3π₯2
This media is not supported in your browser
VIEW IN TELEGRAM
π₯ arsenal-ng: A Go-based pentest command launcher with 200+ cybersecurity cheat sheets built in.
Search commands, fill in arguments, and send them straight to your terminal instead of digging through notes every time.
GitHub: https://github.com/halilkirazkaya/arsenal-ng
Search commands, fill in arguments, and send them straight to your terminal instead of digging through notes every time.
GitHub: https://github.com/halilkirazkaya/arsenal-ng
β€5π3
CVE-2026-60291, CVE-2026-60292, CVE-2026-60294 and other: A lot of vulnerabilities in Oracle Weblogic Server, 9.8 rating π₯
Recently disclosed easily exploitable vulnerabilities in Oracle Weblogic Server allow unauthenticated attacker to compromise Oracle WebLogic Server.
Search at Netlas.io:
π Link: https://nt.ls/NdCqq
π Dork: tag.name:"weblogic"
Vendor's advisory:
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW
Recently disclosed easily exploitable vulnerabilities in Oracle Weblogic Server allow unauthenticated attacker to compromise Oracle WebLogic Server.
Search at Netlas.io:
π Link: https://nt.ls/NdCqq
π Dork: tag.name:"weblogic"
Vendor's advisory:
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixFMW
β€7
Please open Telegram to view this post
VIEW IN TELEGRAM
π13β€4π₯2πΏ1
Looking for a mod to post some good contents. If anyone is interested please drop a message in the comments.
β€4