Follow the Brut Security channel on WhatsApp: https://whatsapp.com/channel/0029VacUEmpCnA8014ZLnm1L
👍2❤1🗿1
PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows
Resource: https://cybersecuritynews.com/pentesterflow
Resource: https://cybersecuritynews.com/pentesterflow
❤3👍2🔥2
You Don't Need Mimikatz for DCSync Anymore (SharpDCSync)
Credit/Resource: https://lsecqt.github.io/Red-Teaming-Army/active-directory/you-dont-need-mimikatz-for-dcsync-anymore-(sharpdcsync)
Credit/Resource: https://lsecqt.github.io/Red-Teaming-Army/active-directory/you-dont-need-mimikatz-for-dcsync-anymore-(sharpdcsync)
❤4👍3🔥2👏1
New CT Recon Source ⚡
Looking for a ridiculously fast way to discover subdomains?
Try crt.name:
It returns the subdomains found in Certificate Transparency records along with the date they were first seen.
Need only the subdomains? 👇
Fast. Simple. No unnecessary hassle.
A useful addition to your subdomain reconnaissance workflow. 🔥
Looking for a ridiculously fast way to discover subdomains?
Try crt.name:
https://crt.name/v1/search?apex=target.com
It returns the subdomains found in Certificate Transparency records along with the date they were first seen.
Need only the subdomains? 👇
curl -s "https://crt.name/v1/search?apex=target.com"| awk '{print $1}' | sort -u
Fast. Simple. No unnecessary hassle.
A useful addition to your subdomain reconnaissance workflow. 🔥
❤7🔥4👍1👏1🙏1
OLD days OR wot 🤣🤣🤣🤣
dork:
*inurl:/asset/kcfinder
*sites/all/modules/civicrm/packages/kcfinder
*inurl:templates/_editor/kcfinder/
*inurl:includes/kcfinder/browse.php
*inurl:/kcfinder/browse.php
*lib/kcfinder/files/upload
*admin/kcfinder/files/upload
*panel/kcfinder/upload/files
*editor/kcfinder/upload
*Kcfinder/upload/files
*inurl:/panel/kcfinder/ ext:png
dork:
*inurl:/asset/kcfinder
*sites/all/modules/civicrm/packages/kcfinder
*inurl:templates/_editor/kcfinder/
*inurl:includes/kcfinder/browse.php
*inurl:/kcfinder/browse.php
*lib/kcfinder/files/upload
*admin/kcfinder/files/upload
*panel/kcfinder/upload/files
*editor/kcfinder/upload
*Kcfinder/upload/files
*inurl:/panel/kcfinder/ ext:png
❤5
This Independence Day, we celebrate the spirit of a nation that keeps moving forward.
From securing a system to securing a nation, every line of code, every defender, and every ethical hacker has a role to play.
Happy Independence Day
Stay free. Stay curious. Stay secure.
#IndependenceDay #India #BrutSecurity #CyberSecurity #EthicalHacking #CyberPatriot
Please open Telegram to view this post
VIEW IN TELEGRAM
❤7🔥2👏1
Forwarded from Brut Security
⚔️ The Hunt Begins.
Admissions are now open for all Brut Security courses.
📅 Next Batch: 17 August
📩 DM to enroll wa.link/brutsecurity
Admissions are now open for all Brut Security courses.
📅 Next Batch: 17 August
📩 DM to enroll wa.link/brutsecurity
❤2
Brut Security
⚔️ The Hunt Begins. Admissions are now open for all Brut Security courses. 📅 Next Batch: 17 August 📩 DM to enroll wa.link/brutsecurity
Please open Telegram to view this post
VIEW IN TELEGRAM
❤2
Hey Hunter's
DarkShadow is here back again!
⚡️Blind RCE via Chaining Requests💀
one word for all:
"To exploit any high severity vulnerability you have to analyze and chain multiple request components"
How to approach chaining a bug:
• First open your target in burpsuite (disable browser extensions to reduce other requests)
• Brows the target maually as much possible (don't run automatic crawler do first manually)
• Turn off proxy and review porxy history and send all the imporetent requests in 'Organizer' tab
• Now play in repeater, and if you got anything interesting see the serial number of the request in proxy history
• For chaining with other request analyze after the request history (this will help you to understand whats your second step request now)
THIS IS HOW YOU CAN FIND CRITICAL BUGS BY CHAINING THEM
so guy's if you really enjoy to read such as muthods don't forget follow me x.com/darkshadow2bd
#bugbountytips #rce
DarkShadow is here back again!
⚡️Blind RCE via Chaining Requests💀
one word for all:
"To exploit any high severity vulnerability you have to analyze and chain multiple request components"
How to approach chaining a bug:
• First open your target in burpsuite (disable browser extensions to reduce other requests)
• Brows the target maually as much possible (don't run automatic crawler do first manually)
• Turn off proxy and review porxy history and send all the imporetent requests in 'Organizer' tab
• Now play in repeater, and if you got anything interesting see the serial number of the request in proxy history
• For chaining with other request analyze after the request history (this will help you to understand whats your second step request now)
THIS IS HOW YOU CAN FIND CRITICAL BUGS BY CHAINING THEM
so guy's if you really enjoy to read such as muthods don't forget follow me x.com/darkshadow2bd
#bugbountytips #rce
❤3👍3🔥1
SEPTEMBER BATCH ENROLLMENT STARTED.
Cybersecurity is not just for IT students.
Whether you're in school, college, from a non-IT background, or looking to build practical cybersecurity skills, you can start here.
📩 DM to enroll https://wa.link/brutsecurity
Cybersecurity is not just for IT students.
Whether you're in school, college, from a non-IT background, or looking to build practical cybersecurity skills, you can start here.
📩 DM to enroll https://wa.link/brutsecurity
❤6🔥1👏1
🔥17❤8👍2