Brut Security

🚨cloud_enum🚨

👉Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

🔗https://github.com/initstring/cloud_enum

#bugbounty #bugbountytips

GitHub

GitHub - initstring/cloud_enum: Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud. - initstring/cloud_enum

👍2

2K viewsSaumadip Mandal, 15:10

Brut Security

0:11

This media is not supported in your browser

VIEW IN TELEGRAM

Hey everyone

📣

,

⚠️Can you believe it's already June? We've covered six months, but have we really dived into cybersecurity or web penetration testing yet? Have any of us snagged our first bug bounty or made it into a Hall of Fame?

📌Let's use the next six months to change that. Dedicate yourself fully to learning and practicing. Imagine where you could be by the end of the year—skilled, confident, and maybe even recognized in the cybersecurity world.

🔥Let’s go all in and fight for our freedom through knowledge and skills. Who’s ready to take on this challenge?

Cheers,
The Brut Security Team

☄️

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥10👍1💯1🗿1

2.6K viewsSaumadip Mandal, 15:25

Brut Security

2FA Security Issues.pdf

1.5 MB

👍3

2.67K viewsSaumadip Mandal, 06:42

Brut Security

Bug_Bounty_Career.pdf

997.6 KB

2.53K viewsSaumadip Mandal, 09:15

Brut Security

How_Attacker_Abuse_VSCode_as_RAT.pdf

1016.4 KB

👍1

2.38K viewsSaumadip Mandal, 09:17

Brut Security

API_Security_Risks.pdf

326.2 KB

2.41K viewsSaumadip Mandal, 09:17

Brut Security

⌛RSEScan⌛

📣A command-line utility for interacting with the RSECloud. It allows you to fetch subdomains and IPs from certificates for a given domain or organization. A command-line utility for interacting with the RSECloud. It allows you to fetch subdomains and IPs from certificates for a given domain or organization.📣

🌐

POC VIDEO

🌐

🔗

Download

🔗

Please open Telegram to view this post

VIEW IN TELEGRAM

YouTube

Find Hidden Subdomains & IPs | RSEScan | RSECloud | Bug Bounty Recon | Brut Security

📢RSEScan is a command-line utility for interacting with the RSECloud. It allows you to fetch subdomains and IPs from certificates for a given domain or organization.

🚨 Registration Open for July 1st Batch: Extreme Web Application Penetration Testing 🚨
☎️Registration…

👍3🔥1

2.58K viewsSaumadip Mandal, 20:25

Brut Security

Brut Security pinned «⌛RSEScan⌛ 📣A command-line utility for interacting with the RSECloud. It allows you to fetch subdomains and IPs from certificates for a given domain or organization. A command-line utility for interacting with the RSECloud. It allows you to fetch subdomains…»

20:53

Brut Security

Reconnaissance- Phase1.pdf

1.5 MB

☄️Bug Bounty Reconnaissance-Phase 1☄️

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥1

2.26K viewsSaumadip Mandal, 19:17

Brut Security

☄️Bug-Bounty-Wordlists☄️

📣A repository that includes all the important wordlists used while bug hunting.

🔗Link: https://github.com/YaS5in3/Bug-Bounty-Wordlists

#bugbounty #bugbountytips

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - YA551N3/Bug-Bounty-Wordlists

Contribute to YA551N3/Bug-Bounty-Wordlists development by creating an account on GitHub.

👍6

2.43K viewsSaumadip Mandal, 19:22

Brut Security

Top Useful Extension For Pentesting and Bug hunting

👍3❤1

2.06K viewsSaumadip Mandal, 14:43

Brut Security

💥Bug Bounty Tip: Don't Overlook Image Endpoints!💥

👉Did you know 95% of hunters remove image files from their endpoint scans? Here's how Orwa found sensitive information by focusing on them:

1. Gather All Target Endpoints: Collect endpoints from your target.

2. Filter for Image Extensions: Use a simple command to isolate image URLs.

cat endpoints.txt | egrep 'jpg|jpeg|png' > results.txt

3. Check for Live URLs: Ensure the filtered image URLs are active.

4. Use a Screenshot Tool: Automate the process of taking screenshots of these URLs to quickly spot sensitive information.

ℹ️ Success Story by GodfatherOrwa:
-He found a passport image at app[.]com/xxxx/cdn/file/xxx.jpg.
- Visiting app[.]com/xxxx/cdn/ revealed an open directory listing.
- The result? Tons of exposed PII!

👌Always check image file endpoints (.jpg, .jpeg, .png, etc.). You might find more than you expect!

Happy hunting, everyone! ♥

Credit: @godfatherorwa

#bugbountytips #bugbountytip #bugbounty

👍5

2.43K viewsSaumadip Mandal, 18:26

Brut Security

Brut Security pinned Deleted message

19:24

Brut Security

Blind SQL Payloads

🔥7👍2

2.1K viewsSaumadip Mandal, 15:13

⚠️CVE-2024-29973: Unauthorized command injection in Zyxel NAS devices⚠️

🔍This command injection vulnerability in the “setCookie” parameter in Zyxel NAS326 and NAS542 devices could allow an unauthenticated attacker to execute some OS commands by sending a crafted HTTP POST request.

📌PoC: https://github.com/k3lpi3b4nsh33/CVE-2024-29973

📣Dorks:
🔽Hunter: product.name="ZyXEL NAS542"||http://product.name="ZyXEL NAS326"
🔼FOFA: app="NAS542" || app="ZYXEL-NAS326"
🔽SHODAN: http.title:"Zyxel NAS326"

Please open Telegram to view this post

VIEW IN TELEGRAM

🤯6❤1

2.1K viewsSaumadip Mandal, 19:35

Brut Security

0:16

This media is not supported in your browser

VIEW IN TELEGRAM

⚠️Progressive Web App (PWA) Phishing⚠️

📌Attack Scenario: A user lands on index.html and clicks the "Install Microsoft Application" button. The install app prompt appears and once it is installed by the user, the JavaScript embedded in index.html redirects the PWA window to the phishing page that hase a fake URL bar at the top (i.e. mrd0x.html). Ensure that you're testing this over HTTPS to avoid encountering issues.

📣Blog Link: https://mrd0x.com/progressive-web-apps-pwa-phishing

🔗POC: https://github.com/mrd0x/PWA-Phishing

⚠️This is simply to demonstrate how PWA phishing works. Don't use it for illegal purposes.

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥3❤1

2.43K viewsSaumadip Mandal, 20:04

Brut Security

Web Cache Deception & Poisoning.pdf

297.3 KB

🔥2🤯1

2.57K viewsSaumadip Mandal, 20:13

Brut Security

cache posioning writeup by ankit.pdf

1.2 MB

🔥2

2.61K viewsSaumadip Mandal, 20:14

Brut Security

🔼

One-Liner XSS

🔽

subfinder -dL domainlist1.txt | dnsx | shuf | (gau | | hakrawler) | anew | egrep -iv "\.(jpg|jpeg|gif|tif|tiff|png|ttf|woff|woff2|php|ico|pdf|svg|txt|js)$" | urless | nilo | dalfox pipe -b https://xss.hunter

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥8👏1

2.72K viewsSaumadip Mandal, 20:49

Brut Security

Brut Security pinned «Keep checking my old Posts to continue your learning Process!»

21:01

Brut Security

Methods for Dump LSASS.pdf

33.4 MB

💥Methods for Dump LSASS💥

Please open Telegram to view this post