Latest posts
Brut Security
24 Sept, 08:05
🚨 CVE-2026-87902 - WordPress Core - PHP Template Path TraversalNuclei Template - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-87902.yamlReference: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp#hackwithautomation #bugbounty #wordpress
Brut Security
23 Sept, 08:07
⚠️Top 25 SQL Injection Parameters
1,580Open in TelegramBrut Security
22 Sept, 07:34
🔔 Bug Bounty Tip 🕵️Did you know some exposed Google Maps API keys may also have access to Gemini models? 👀Try geminiHunter to hunt for exposed Gemini API keys across:JS/source maps Wayback snapshots Android APKs Web assetsIt also deduplicates and validates keys, helping you identify which exposed keys are actually usable.🔗 https://github.com/devploit/geminiHunter
1,930Open in TelegramBrut Security pinned a photo
21 Sept, 18:49
Brut Security
21 Sept, 18:49edited
The new RCE exploit is 100% effective; it has already generated 48 shells in just 10 minutes. ⚡It involves 5 combined exploits affecting over 900,000 sites. 🎯Affecting +970k websitesDM me to buy 👉 @Mm_fitChannel: https://t.me/fox_security_cve#AD
1,900Open in TelegramBrut Security
21 Sept, 10:30edited
😔Brut Security
20 Sept, 17:46
3 Free Coupons https://topmate.io/saumadip/2272794?coupon_code=qwertytopmate.ioZero to Mobile Pentester with Saumadip MandalZero to Mobile Pentester with Saumadip Mandal · Android & iOS pentesting, beginner to advanced. Hands-on. · Digital Product · ₹219 · Topmate2,050Open in TelegramBrut Security
20 Sept, 12:49
Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)https://www.cyera.com/research/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858CyeraNi8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)Cyera Research Labs has discovered a "worst-case scenario" flaw in n8n, the industry-leading platform for AI and workflow automation. Dubbed "Ni8mare," this vulnerability (CVE-2026-21858) allows an unauthenticated remote attacker to gain full administrative…1,950Open in TelegramBrut Security
20 Sept, 10:48
🚨Bypass-403 - A simple script just made for self use for bypassing 403.https://github.com/iamj0ker/bypass-403#bugbounty #pentesting
1,910Open in TelegramBrut Security
19 Sept, 17:33
FOFA UNLIMITED🔹 100 Fresh fofa Accounts 🔹 3,000 Credits per Account / Month 🔹 100 × 3,000 = 300,000 Credits / Month 🔹 Chrome Extension with Auto Login💰 Price: Only $30All account details and extension are provided together.Interested? 📩 DM on Telegram: @fofaseller#ADBrut Security
19 Sept, 06:14
🔥HackTools - The all-in-one RedTeam extension for Web Pentester.✅https://github.com/LasCC/Hack-ToolsBrut Security
18 Sept, 19:38edited
🔥 ⛓️ Click2Shell is a one-click unauthenticated remote command execution chain (Preauth RCE) affecting every WordPress website. Wordpress rolled out a fix yesterday! The story about how one preview link made WordPress click Install, load an inactive theme's2,029Open in TelegramBrut Security
18 Sept, 19:37
🔥 ⛓️ Click2Shell is a one-click unauthenticated remote command execution chain (Preauth RCE) affecting every WordPress website. Wordpress rolled out a fix yesterday! The story about how one preview link made WordPress click Install, load an inactive theme's PHP, and hand us RCE is below.⚠️https://pwn.ai/blog/click2shellBrut Security
18 Sept, 10:23
🚨Search for all leaked keys/secrets using one regex!✅regex: https://gist.github.com/h4x0r-dz/be69c7533075ab0d3f0c9b97f7c93a59#BugBounty #bugbountytip
2,050Open in TelegramBrut Security
17 Sept, 13:03
🚨Nice tricks to bypass 403/401. #BugBounty #bugbountytips
2,450Open in TelegramBrut Security
17 Sept, 02:32
⚠️ Bug Bounty Tip: IDN Homograph → Account CollisionDon’t only test Unicode domains. Test Unicode in email/username fields too.Try lookalike characters such as:a → á / other Unicode variantsThe interesting case is when:Database: treats the values as equal Application: identifies the victim account SMTP: treats them as different addressesExample:victim@gmail.com victim@gmáil.comIf the application finds the victim's account but sends the password-reset email to the attacker-controlled Unicode address, you may have an account-collision / account-takeover vulnerability.
2,380Open in TelegramBrut Security
16 Sept, 19:22
👀On Reaching 17k subscriber giving away 10 each free coupons!🔔Bug Bounty Guide 2026 https://topmate.io/saumadip/2187710?coupon_code=awaw 🔔Zero To Mobile Pentester https://topmate.io/saumadip/2272794?coupon_code=sada 🔔Brut Offensive Playbook v1 https://topmate.io/saumadip/2054509?coupon_code=dadatopmate.ioBug Bounty Guide 2026 with Saumadip MandalBug Bounty Guide 2026 with Saumadip Mandal · Master modern bug bounty hunting with 86 pages, 25 chapter · Digital Product · ₹199 · Topmate2,250Open in TelegramBrut Security
16 Sept, 19:15edited
17K+ strong. One community. One mission. ⚡️️Thank you for being part of Brut Security.Learn. Practice. Hack. Grow.Here’s to the next milestone. ❤️🔥🔥 https://brutsecurity.com ☄️ https://wa.link/brutsecurity#BrutSecurity #17K #CyberSecurity #EthicalHacking
2,260Open in TelegramBrut Security
16 Sept, 06:11
2,700Open in TelegramBrut Security
15 Sept, 19:26
2,710Open in Telegram
Links
Related Channels
Other channels in the same section of the catalogue.
