Brut Security
17.3K subscribers
1.12K photos
96 videos
360 files
1.21K links
βœ…DM: @wtf_brut
βœ…For Ad: https://tlmtr.io/p/2flAsc
πŸ›ƒWhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
πŸ“¨Mail: info@brutsec.com
Download Telegram
πŸ” NotHackable | Only a few hours left!

12-Hour Team CTF
πŸ“… 4 September 2026
⏰ 11 AM – 11 PM IST
πŸ‘₯ Team CTF | 🎟 Free

Find vulnerabilities. Solve puzzles. Capture flags. 🚩

Think you can break it?

πŸ”— https://ctf.rarebytehub.com/events/nothackable
❀5
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ”₯6❀4
Bug Bounty Tip – SQL Injection

Hard-to-exploit SQL injection?
This time-based payload worked when others failed:

''||(select 1 from (select pg_sleep(6))x)||'


Add it to your SQL wordlist.
Download - https://github.com/orwagodfather/SQL-Wordlist/blob/main/sql.txt

Credit: @GodfatherOrwa
Happy hunting β™₯

#bugbounty #bugbountytips #bugbountytip
1❀8πŸ—Ώ3πŸ”₯2πŸ‘1
This media is not supported in your browser
VIEW IN TELEGRAM
πŸ₯²
❀5😒2🀨2πŸ—Ώ2
CVE-2026-75650: Adobe Commerce and Magento Open Source RCE vulnerability (StyleSmuggler) exploited in the wild, 10.0 rating ‍πŸ”₯

Recently disclosed vulnerability in Adobe Commerce and Magento Open Source allows an unauthenticated attacker to execute arbitrary code. This vulnerability is being actively exploited in the wild!

Search at Netlas.io:
πŸ‘‰ Link: https://nt.ls/bX5dx
πŸ‘‰ Dork: tag.name:"magento"

Read more :
https://sansec.io/research/stylesmuggler-0day
❀8
Search for all leaked keys/secrets using one regex!

regex: https://gist.github.com/h4x0r-dz/be69c7533075ab0d3f0c9b97f7c93a59

#BugBounty #bugbountytip
😱8❀3πŸ‘3πŸ‘3πŸ”₯1
CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating πŸ”₯

A vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.

Search at Netlas.io:
πŸ‘‰ Link: https://nt.ls/dIEpd
πŸ‘‰ Dork: http.title:cpanel OR http.headers.set_cookie:"cprelogin" OR http.headers.set_cookie:"cpsession"

Vendor's advisory:
https://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026
❀5πŸ”₯3πŸ‘1🫑1
πŸš€ Level up your hacking skills on Hack The Box!

Get instant access to live, hands-on cybersecurity challenges. Hack vulnerable virtual machines, solve realistic security puzzles, and practice your skills at your own pace. Perfect for beginners and pros alike.
❀2πŸ—Ώ1
Please open Telegram to view this post
VIEW IN TELEGRAM
❀9πŸ”₯5πŸ‘1
🚨 CVE-2026-18963 - Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Nuclei Template - https://github.com/projectdiscovery/nuclei-templates/pull/16995/changes

Reference: https://github.com/keycloak/keycloak/issues/51833

#hackwithautomation #bugbounty #keycloak
πŸ”₯7❀3
🚨Google Bug Bounty Dorks Generator

- juicy extensions
-open redirects
- code leaks
- cloud storages
- file upload endpoints and more.
❀13πŸ‘1
Penetration-List

A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

https://github.com/AlbusSec/Penetration-List

#cybersecurity #infosec #pentesting #redteam #bugbounty
❀8
5 Free Coupons for Zero To Mobile Pentester
❀6πŸ”₯1