Brut Security 2.0
@brutsecurity_poc
4.51K subscribers
115 photos
42 videos
8 files
142 links
Bringing you Bug Bounty Video POCs from top hunters around the globe!
Download Telegram
About
Blog
Apps
Platform
Join
Brut Security 2.0
4.51K subscribers
Brut Security 2.0
These two are my own findings from 2024
👍11👏2
6.29K views
Brut Security 2.0
I'll upload more if I get 30 reaction
❤57🔥4
6.28K views
Brut Security 2.0
This media is not supported in your browser
VIEW IN TELEGRAM
Grammarly Account Takeover Via SAML Misconfiguration (Requires User Interaction) [Triaged as high] & still unfixed
🔥27🤯6👍2
6.61K viewsMr Rahim, 
Brut Security 2.0
This media is not supported in your browser
VIEW IN TELEGRAM
RCE via Image File Upload Bug Bounty PoC
🔥46❤8👍7
6.28K views
Brut Security 2.0
This media is not supported in your browser
VIEW IN TELEGRAM
Cross Site Scripting (XSS) Through File Upload SVG
🔥26❤6👍2
6.89K views
Brut Security 2.0
This media is not supported in your browser
VIEW IN TELEGRAM
User information Leak Vulnerability in GitHub P1 Bug Bounty live __ POC
🔥34🗿5👌4🤯3
7.41K viewsedited  
Brut Security 2.0
This media is not supported in your browser
VIEW IN TELEGRAM
Bypassing File Upload Restrictions on Xiaomi Using .extensions./%00.png Method _BUG BOUNTY POC_
🔥36👍5🗿3❤1
7.78K views
Brut Security 2.0
Media is too big
VIEW IN TELEGRAM
Schlix CMS 2.2.7-2 Arbitrary File Upload - POC
🔥22👍2🐳2
7.74K views
Brut Security 2.0
This media is not supported in your browser
VIEW IN TELEGRAM
Lenovo XSS via Unrestricted File Upload PoC
🔥55👌5👍4❤3
7.79K views
Brut Security 2.0
⭐️⭐️NEW BUG BOUNTY PLATFORM https://www.hackprove.com/
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥75🤔20❤7👏6👍4🗿4🤯2
7.62K viewsedited  
Brut Security 2.0
dON'T fORGET tO gIVE rEACTIONS
❤40👍4🔥4
7.82K views
Brut Security 2.0
This media is not supported in your browser
VIEW IN TELEGRAM
👻CVE-2025-24071: Windows Explorer initiates an SMB authentication request upon extracting a .library-ms file from a .rar archive, exposing NTLM hashes. Extraction alone triggers the vulnerability.

⭐️POC: https://github.com/0x6rss/CVE-2025-24071_PoC
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥23👍6❤3🤯1👌1
7.62K views
Brut Security 2.0
Forwarded from Brut Security
👻Fresh BB Target - https://www.brilliantdirectories.com/security-bounty
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥12❤3
6.74K views
Brut Security 2.0
☄️A compiled list of companies which accept responsible disclosure

⚡️https://bug-bounties.as93.net/
Please open Telegram to view this post
VIEW IN TELEGRAM
Bug Bounties
Bug Bounties - Directory of Bug Bounty Programs
Browse 3,075 bug bounty and responsible disclosure programs. Find companies that welcome vulnerability reports, with scopes, rewards and contact details.
❤19👍4🔥4
6.95K views
Brut Security 2.0
▶️Fresh BB Target - https://lormadetails.com/.well-known/security.txt
Please open Telegram to view this post
VIEW IN TELEGRAM
❤11🔥3👍2🐳2
8.97K viewsedited  
Brut Security 2.0
▶️New bug bounty target! Check out https://investaxes.com/.well-known/security.txt for details on their vulnerability disclosure program. Happy hunting! 👑✨
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥19❤11👌1
4.76K views
Brut Security 2.0
dON'T fORGET tO gIVE rEACTIONS
🔥18🤯2⚡1🤔1
4.43K views
Brut Security 2.0
⚡️Browse and search bug bounty programs from various platforms.
☄️https://menaxa.xyz/programs
❗️For Queries @brutsecurity_bot
Please open Telegram to view this post
VIEW IN TELEGRAM
Menaxa
Menaxa | Your Threat Command Center
Track hacks, vulnerabilities, and threats using Menaxa.
❤8🔥1
4.79K views
Brut Security 2.0
📣Fresh BB Target - https://lethal-forensics.com/.well-known/security.txt
Please open Telegram to view this post
VIEW IN TELEGRAM
👍5❤2🔥1
4.3K views
Brut Security 2.0
Forwarded from Brut Security (DarkShadow ShellSec)
Hey Hunter's,
DarkShadow here back again, just dropping a simple dork that find every VDP in worl wide 😎

(body="/responsible-disclosure" || body="/.well-known/security.txt") && port="443"



#bugbountytips #infosec #dork
🔥9❤3🤯1
3.82K views
Brut Security 2.0
Forwarded from Brut Security
🚨Introducing BrutDroid – The Ultimate Android Emulator Automation Toolkit🚨

✨Root, Bypass, Intercept — all in just a few clicks.
✨Powered by Frida, Magisk & Burp. Designed for Hackers.
💥Automate your mobile testing workflow.
💥Clean UI, real power, zero hassle.

▶️See BrutDroid in Action: https://youtu.be/8iYf5lJOmXo
➡️GitHub: https://github.com/Brut-Security/BrutDroid/

#BrutDroid #AndroidHacking #BugBounty #Frida #BurpSuite #Pentesting #AutomationTools #BrutSecurity
Please open Telegram to view this post
VIEW IN TELEGRAM
YouTube
Android SSL Pinning Bypass | Magisk, Frida & Burp Suite Configuration for Android Studio | BrutDroid
🚀 BrutDroid v1.0.0 is here — your all-in-one Android emulator pentesting toolkit for pentesters, red teamers & bug bounty hunters!

⚡ Automate Frida server setup, root Android emulators with Magisk + rootAVD, install Burp certs system-wide, and bypass SSL…
❤15👍2🔥1
4.3K views