Brut Security
前往频道在 Telegram
✅DM: @wtf_brut ✅For Ad: https://tlmtr.io/p/2flAsc 🛃WhatsApp: https://wa.link/brutsecurity 🈴Training: https://brutsecurity.com 📨Mail: info@brutsec.com
显示更多📈 Telegram 频道 Brut Security 的分析概览
频道 Brut Security (@brutsecurity) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 17 746 名订阅者，在 技术与应用 类别中位列第 7 360，并在 印度 地区排名第 22 868 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 17 746 名订阅者。
根据 26 十月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 237，过去 24 小时变化为 10，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 17.22%。内容发布后 24 小时内通常能获得 6.81% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 3 056 次浏览，首日通常累积 1 208 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 6。
- 主题关注点： 内容集中在 hunter, bounty, darkshadow, bypass, hex 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“✅DM: @wtf_brut
✅For Ad: https://tlmtr.io/p/2flAsc
🛃WhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
📨Mail: info@brutsec.com”
凭借高频更新（最新数据采集于 27 十月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
17 746
订阅者
+1024 小时
+57 天
+23730 天
正在加载数据
吸引订阅者
十月 '2610月 '26
十月 '26
+225
在4个频道中
九月 '26
+1 378
在10个频道中
Get PRO
八月 '26
+261
在3个频道中
Get PRO
七月 '26
+361
在7个频道中
Get PRO
六月 '26
+336
在3个频道中
Get PRO
五月 '26
+133
在7个频道中
Get PRO
四月 '26
+300
在5个频道中
Get PRO
三月 '26
+294
在3个频道中
Get PRO
二月 '26
+395
在3个频道中
Get PRO
一月 '26
+274
在3个频道中
Get PRO
十二月 '25
+221
在0个频道中
Get PRO
十一月 '25
+372
在5个频道中
Get PRO
十月 '25
+363
在7个频道中
Get PRO
九月 '25
+474
在4个频道中
Get PRO
八月 '25
+188
在3个频道中
Get PRO
七月 '25
+405
在4个频道中
Get PRO
六月 '25
+642
在1个频道中
Get PRO
五月 '25
+282
在0个频道中
Get PRO
四月 '25
+279
在1个频道中
Get PRO
三月 '25
+518
在4个频道中
Get PRO
二月 '25
+1 198
在4个频道中
Get PRO
一月 '25
+1 393
在7个频道中
Get PRO
十二月 '24
+842
在2个频道中
Get PRO
十一月 '24
+538
在2个频道中
Get PRO
十月 '24
+1 099
在2个频道中
Get PRO
九月 '24
+915
在0个频道中
Get PRO
八月 '24
+917
在1个频道中
Get PRO
七月 '24
+617
在1个频道中
Get PRO
六月 '24
+560
在1个频道中
Get PRO
五月 '24
+335
在0个频道中
Get PRO
四月 '24
+171
在0个频道中
Get PRO
三月 '24
+2 771
在0个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 27 十月 | 0 | |||
| 26 十月 | +11 | |||
| 25 十月 | +5 | |||
| 24 十月 | +7 | |||
| 23 十月 | +11 | |||
| 22 十月 | +5 | |||
| 21 十月 | +2 | |||
| 20 十月 | +2 | |||
| 19 十月 | 0 | |||
| 18 十月 | +2 | |||
| 17 十月 | +4 | |||
| 16 十月 | 0 | |||
| 15 十月 | +19 | |||
| 14 十月 | +20 | |||
| 13 十月 | +21 | |||
| 12 十月 | +19 | |||
| 11 十月 | +29 | |||
| 10 十月 | +11 | |||
| 09 十月 | +1 | |||
| 08 十月 | +6 | |||
| 07 十月 | +2 | |||
| 06 十月 | 0 | |||
| 05 十月 | +14 | |||
| 04 十月 | +2 | |||
| 03 十月 | +8 | |||
| 02 十月 | +1 | |||
| 01 十月 | +23 |
频道帖子
⚡WaybackLister is a reconnaissance tool that taps into the Wayback Machine to fetch historical URLs for a domain, parses unique paths, and checks if any of those paths currently expose directory listings. It's fast, multithreaded, and built for practical use in security assessments and bug bounty recon.
✅http://github.com/anmolksachan/wayBackLister
✅ Join Telegram For More Content: http://t.me/brutsecurity
----------------------------------------------------------
🎓 Ready to Skill Up? Enroll Now → http://wa.link/brutsecurity
#CyberSecurity #BugBounty #EthicalHacking #Infosec #BrutSecurity
| 2 | http.component:"php"
"X-Powered-By: PHP"
http.component:"php" country:"xx"
"X-Powered-By: PHP/7.4.33"
"X-Powered-By: PHP/7.4"
"X-Powered-By: PHP/8."
http.component:"php" http.component_version:"7.4"
"X-Powered-By: PHP/8.1" country:"xx"
https://shodan.io/search?query=http.component%3A%22php%22 | 1 960 |
| 3 | http.component:"php"
"X-Powered-By: PHP"
http.component:"php" country:"xx"
"X-Powered-By: PHP/7.4.33"
"X-Powered-By: PHP/7.4"
"X-Powered-By: PHP/8."
http.component:"php" http.component_version:"7.4"
"X-Powered-By: PHP/8.1" country:"xx"
https://shodan.io/search?query=http.component%3A%22php%22 | 1 |
| 4 |  PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge.
The flaws can enable unauthenticated code execution and expose server memory.
PATCH NOW (CVE-2026-109618, CVE-2026-109619)
Details ➜ https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html | 1 |
| 5 | https://github.com/9bie/php2shell-bypass-aslr-exp | 1 |
| 6 | http.component:"php"
"X-Powered-By: PHP"
http.component:"php" country:"xx"
"X-Powered-By: PHP/7.4.33"
"X-Powered-By: PHP/7.4"
"X-Powered-By: PHP/8."
http.component:"php" http.component_version:"7.4"
"X-Powered-By: PHP/8.1" country:"xx"
https://shodan.io/search?query=http.component%3A%22php%22 | 1 |
| 7 | PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge.
The flaws can enable unauthenticated code execution and expose server memory.
PATCH NOW (CVE-2026-109618, CVE-2026-109619)
Details ➜ https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html | 2 292 |
| 8 |  😐 | 1 912 |
| 9 |  Android Pentest Checklist | 1 908 |
| 10 | Android Pentest Checklist.xlsx | 1 797 |
| 11 |  🎯 Target: Apache Nextcloud + richdocumentscode
⚡ Type: RC3 ➜ Websh3ll / Blind RC3
✅ Full fingerprinting — identifies Nextcloud and app version
✅ Command injection via URL through proxy.php (supports Base64/hex payloads)
✅ Webshell deployment via file upload and execution
✅ Timing-based attack (blind RC3) as a fallback
✅ Multi-threaded — supports mass scanning of target lists
✅ HTTPS support with certificate bypass
✅ JSONL/TXT output, ready for integration into pipelines
✅ Raw HTTP socket — preserves $(CMD) syntax without URL normalization
🔥 AFECTING + 1,300,000 websites
DM me to buy 👉 @Mm_fit
Channel: https://t.me/fox_security_cve | 2 023 |
| 12 | https://github.com/9bie/php2shell-bypass-aslr-exp | 2 620 |
| 13 |  CVE-2026-109618 & CVE-2026-109619: Two RCE vulnerabilities in PHP (PHP2Shell), rating 9.2 for both 🔥
Today the PHP security team released an emergency update addressing two critical vulnerabilities in the PHP core, which allow unauthenticated remote code execution as the web worker account.
Details of the two vulnerabilities were disclosed by researchers yesterday, ahead of today’s release.
Search at Netlas.io:
👉 Link: https://nt.ls/MDn37
👉 Dork: tag.name:"php"
Vendor advisories:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp | 2 395 |
| 14 |  শুভ বিজয়া দশমী!
May Maa Durga bless you with strength, prosperity, and wisdom. As we celebrate the victory of good over evil, may we also defeat every cyber threat and build a safer digital world.
Brut Security wishes you a Happy Bijaya Dashami!
Stay Blessed. Stay Vigilant. Stay Cyber Secure. | 382 |
| 15 |  +1🩸xploited | CVE Exploits & Cybersecurity
🚨 Latest CVEs (2026) Critical & High-Severity
💥 CVE Exploit Scripts, RCE & Python PoCs
🌐 WordPress • Joomla • Drupal • Web Apps & More
🔍 Exploit Details Endpoints, Payloads & Reproduction
⚡️ 0-Day Vulnerabilities & Exploit Analysis
🧑💻 160+ Free Exploits on GitHub (Mass Exploits)
Stop paying for publicly available exploits.
Get direct access to free PoCs, exploit code, and the latest CVE releases.
Real Code. Real CVEs. Free Access.
📱 Telegram: https://t.me/KNxploited
📱 GitHub: https://github.com/Nxploited/ | 2 355 |
| 16 |  YesWeHack Claude Kit
A Claude Code plugin that helps bug bounty hunters write clear, well-evidenced reports - the kind a triager can validate quickly.
Source: https://github.com/yeswehack/claude-kit | 3 450 |
| 17 |  শুভ শারদীয়া! শুভ দুর্গাপূজা! ❤️
May Maa Durga destroy every evil, protect us from every threat, and empower us with knowledge, courage, and wisdom.
এই পুজো হোক আনন্দের, শক্তির, আর নিরাপত্তার।
Brut Security wishes everyone a Happy Durga Puja!
Stay festive. Stay aware. Stay secure. | 1 669 |
| 18 |  🔐 Certificate Ripper
A CLI tool to extract server certificates
https://github.com/Hakky54/certificate-ripper
#cybersecurity #pentesting #bugbounty | 2 835 |
| 19 |  You can automate a large part of your bug bounty workflow with Claude.
A practical setup:
Target → Scope Check
↓
Recon → Subdomains + URLs
↓
Asset Processing → Deduplicate + Categorize
↓
Claude → Analyze endpoints + prioritize targets
↓
Security Tools → Run authorized checks
↓
Claude → Correlate results + explain findings
↓
Human → Validate vulnerability
↓
Claude → Generate report
Example stack:
Claude Code
+ Python
+ Subfinder
+ httpx
+ Katana
+ Nuclei
+ Burp Suite
+ SQLite/PostgreSQL
The key is giving Claude structured outputs from each stage instead of dumping raw scan results into the model.
Automate the repetitive work.
Keep exploitation and final validation under human control.
Only test assets explicitly authorized by the program. | 3 007 |
| 20 |  🔥 BRUT SECURITY | OCTOBER BATCH
October batch enrollments are now OPEN! 🔔
Ready to sharpen your cybersecurity skills and take your hacking journey to the next level?
📩 DM us to enroll. Limited slots available! - https://wa.link/brutsecurity | 2 687 |
