فریب کلاهبرداران را نخورید! تل‌متریو این کانال‌ها را شناسایی و برچسب‌گذاری می‌کند 👉 برای مشاهده برچسب، اشتراک تهیه کنید

BugCod3

رفتن به کانال در Telegram

[ BugCod3 ] — From Shadows To Shells ⚡️ 🕶 Hacking | 🐞 Bug Bounty | 🔐 Security Tools ⚔️ Learn • Hunt • Dominate 👥 Group: T.me/BugCod3GP 📂 Topic: T.me/BugCod3Topic 🌐 Web: BugCod3.com 🤖 Contact: T.me/BugCod3BOT 📧 Email: BugCod3@protonmail.com

نمایش بیشتر

إيران44 082 فناوری و برنامه‌ها16 170

6 567

مشترکین

+224 ساعت

+97 روز

-8930 روز

360

نمایش های پست

~ 14424 ساعت

~ 18748 ساعت

5.48%

نرخ مشارکت

اطلاعاتی وجود ندارد

پست های در روز

Ads index

beta

در حال بارگذاری داده‌ها

کانال‌های مشابه

51.9K

The Bug Bounty Hunter

کانال‌های بیشتر

اشارات ورودی و خروجی

---

جذب مشترکین

اکتبر '26اکتبر '26

اکتبر '26

+40

در 2 کانال‌ها

سپتامبر '26

+13

در 0 کانال‌ها

Get PRO

اوت '26

+102

در 2 کانال‌ها

Get PRO

ژوئیه '26

+127

در 1 کانال‌ها

Get PRO

ژوئن '26

+176

در 1 کانال‌ها

Get PRO

مه '26

+1 653

در 1 کانال‌ها

Get PRO

آوریل '26

+46

در 0 کانال‌ها

Get PRO

مارس '26

+19

در 0 کانال‌ها

Get PRO

فوریه '26

+124

در 3 کانال‌ها

Get PRO

ژانویه '26

+42

در 0 کانال‌ها

Get PRO

دسامبر '25

+202

در 0 کانال‌ها

Get PRO

نوامبر '25

+253

در 1 کانال‌ها

Get PRO

اکتبر '25

+344

در 0 کانال‌ها

Get PRO

سپتامبر '25

+351

در 1 کانال‌ها

Get PRO

اوت '25

+532

در 1 کانال‌ها

Get PRO

ژوئیه '25

+438

در 0 کانال‌ها

Get PRO

ژوئن '25

+277

در 1 کانال‌ها

Get PRO

مه '25

+456

در 0 کانال‌ها

Get PRO

آوریل '25

+466

در 0 کانال‌ها

Get PRO

مارس '25

+276

در 0 کانال‌ها

Get PRO

فوریه '25

+595

در 0 کانال‌ها

Get PRO

ژانویه '25

+806

در 1 کانال‌ها

Get PRO

دسامبر '24

+1 218

در 0 کانال‌ها

Get PRO

نوامبر '24

+1 284

در 1 کانال‌ها

Get PRO

اکتبر '24

+1 107

در 0 کانال‌ها

Get PRO

سپتامبر '24

+920

در 2 کانال‌ها

Get PRO

اوت '24

+946

در 2 کانال‌ها

Get PRO

ژوئیه '24

+835

در 4 کانال‌ها

Get PRO

ژوئن '24

+623

در 54 کانال‌ها

Get PRO

مه '24

+543

در 52 کانال‌ها

Get PRO

آوریل '24

+152

در 87 کانال‌ها

Get PRO

مارس '24

+226

در 67 کانال‌ها

Get PRO

فوریه '24

+189

در 100 کانال‌ها

Get PRO

ژانویه '24

+336

در 156 کانال‌ها

Get PRO

دسامبر '23

+187

در 78 کانال‌ها

Get PRO

نوامبر '23

+25

در 2 کانال‌ها

Get PRO

اکتبر '23

+67

در 0 کانال‌ها

Get PRO

سپتامبر '23

+451

در 0 کانال‌ها

تاریخ	رشد مشترکین	اشارات	کانال‌ها
29 اکتبر	+1
28 اکتبر	+4
27 اکتبر	+1
26 اکتبر	+3
25 اکتبر	+7
24 اکتبر	+5
23 اکتبر	+1
22 اکتبر	+5
21 اکتبر	+2
20 اکتبر	+2
19 اکتبر	0
18 اکتبر	+2
17 اکتبر	+1
16 اکتبر	0
15 اکتبر	0
14 اکتبر	0
13 اکتبر	+1
12 اکتبر	0
11 اکتبر	+2
10 اکتبر	0
09 اکتبر	+2
08 اکتبر	0
07 اکتبر	0
06 اکتبر	0
05 اکتبر	0
04 اکتبر	0
03 اکتبر	+1
02 اکتبر	0
01 اکتبر	0

پست‌های کانال

What do you think would be the right response?🤔 To submit your answer, visit the link below: https://bugcod3.com/quiz

2	🛠 open-sesame An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes… git clone https://github.com/hassan-algo/open-sesame ⭐️ 96 · 🧬 HTML 🔗 GitHub #Recon #WebSecurity #ActiveDirectory #Pentest 🤝 @RootAccessClub × @BugCod3	159
3	🚨 PHP2Shell — when the bug is in PHP itself Not a plugin. Not a framework. The interpreter behind most of the web got hit with pre-auth RCE — and AI helped find it (WSJ & NYT covered it). 🧠 The two bugs • CVE-2026-109618 — RCE via out-of-memory corruption • CVE-2026-109619 — use-after-free via stale request state (session.upload_progress) • CVSS 9.2 · no auth · fires before your app code even runs • Highest risk on Apache mod_php — also FPM, php-cgi, FrankenPHP, LiteSpeed 🎯 The twist nobody mentions Mass scanning was instant (millions of hits within a day). But a reliable, universal exploit is HARD — memory_limit, same-worker races, and ASLR all get in the way. We break down exactly why. 🛡 What to do • Patch: PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 — the only real fix • Affected from PHP 5.4.0 onward → on CISA KEV, exploited in the wild 📖 Full write-up — source-level breakdown + what it means for bug hunters: bugcod3.com/p/php2shell-preauth-rce-cve-2026-109618-109619	190
4	🔑 Clavis — JWT Attack Multitool Stop juggling half a dozen scripts to test one token. Clavis runs the full JWT attack chain from a single binary — zero dependencies, works on Linux, macOS & Windows. ⚔️ What it does • decode & audit — instantly flags weak configs • crack weak HMAC secrets with a wordlist • alg:none signature bypass • RS256 → HS256 algorithm confusion • kid header injection — path traversal / SQLi • jwk & jku header injection — self-signed keys • forge any token on the fly • scan — extract JWTs from HAR files, logs & JS ⚡ Install go install github.com/MRvirusIR/clavis/cmd/clavis@latest (or grab a prebuilt binary from Releases) 🔗 Links GitHub → https://github.com/MRvirusIR/clavis Write-up → https://bugcod3.com/p/jwt-attack-playbook-weak-secret-to-account-takeover Free & open source. Built for bug bounty. 🐛 #bugbounty #JWT #appsec #pentest #infosec #BugCod3	179
5	SubZer0Robot is live ⚡ SubZer0 now lives inside Telegram 🤠 🚨 Early warnings — new exploitation waves, posted the moment they're detected 🔴 Fresh CISA KEV entries — actively exploited CVEs, automatically 📱 Mini App — the full CVE tracker, PoCs and dossiers right inside Telegram 🔄 Live layer refreshed every ~15 min · Ed25519-signed data 🤖 mini app 🔔 Alerts land 🌐 Web by @BugCod3 & @RootAccessClub	226
6	🚨 One click. Full account takeover. A forgotten subdomain. A lazy OAuth check. On their own? Two boring "low" bugs. Chained together? I took over any account with a single link — and got paid 4 figures. ⏱️ 3 hours from recon to PoC. I broke down the FULL kill-chain — every command, every request, every bypass: 🔭 Finding the dangling DNS record 🪣 Claiming the dead subdomain 🔗 Breaking the redirect_uri allowlist 💣 Stealing the OAuth code → session 👇 Read the full write-up (free, no signup): 🔗 bugcod3.com/blog The lesson that levels up your hunting: severity lives in the CHAIN, not the bug. #BugBounty #AccountTakeover #OAuth #Recon #CyberSecurity	276
7	🚀 bugcod3.com is LIVE From Shadows To Shells — the BugCod3 channel now has a home 🏴‍☠️ 🧰 Arsenal — 176+ hacking tools, searchable, with live GitHub stars 📰 Feed — every post from this channel, filterable by tag 🧪 Lab — reverse shells, JWT debugger, XSS payloads, encoders, hash ID… 100% in-browser 🧠 Daily Quiz — earn points, keep your 🔥 streak, climb the leaderboard ✍️ Write-ups — deep-dive bug bounty articles 🔐 2FA + GitHub/Google login · 📲 installable on your phone 🎲 Hit "Surprise me" in the Arsenal 👀 Psst… type "hack" on the site 👉 https://bugcod3.com Learn • Hunt • Dominate ⚡️ #BugBounty #Tools #CyberSecurity	330
8	🚨 PHP2Shell is live on SubZer0 Two critical PHP core flaws, CVSS 9.2: CVE-2026-109618 + CVE-2026-109619 One unauthenticated request can lead to remote code execution. ✅ Fixed in: PHP 8.5.12 · 8.4.27 · 8.3.36 · 8.2.35 📂 On the site: 30+ public PoCs (updated every 15 min), scanners, Nuclei templates and official advisories 🔗 https://iliya-bashrc.github.io/SubZer0/ ⚠️ Run PoCs only in a test lab #PHP2Shell #PHP #RCE @RootAccessClub × @BugCod3	317
9	🚀 Give it a try, share it with your friends 👥 and tell us what you think, we'd love to hear from you! 💜	337
10	🤫 What they'd never say to your face… lands here, anonymously. Create your personal WhisperTopic link, drop it in your bio or story, and let anyone message you without revealing who they are 👀 ✨ Why WhisperTopic? 🗂 A private topic for every sender, no more messy chats 🎯 Message anyone anonymously 👀 Seen receipts, know when your message is read ✏️ Edits & ❤️ reactions, everything stays in sync 🛡 Profanity filter & one-tap block 🎭 Identity revealed only with consent 🎲 Ready-made story prompts 🔒 Your identity is never revealed. 👇 Get your free link now: 🤖 @WhisperTopicBot https://t.me/WhisperTopicBot ⚡️ Powered by @BugCod3	322
11	🚀 BugCod3 IP CDN Scanner v2.0 is out! Find clean, low-latency CDN IPs, fast ⚡️ ▫️ Async engine, 15+ CDNs detected ▫️ Real TLS/SNI test + Cloudflare PoP ▫️ Latency, jitter & loss with a 0–100 score ▫️ Live dashboard + interactive HTML report ▫️ Auto-updated CDN ranges & resume support 🛠 pip install git+https://github.com/MRvirusIR/BugCod3-IP-CDN-Scanner 🎯 bugcod3 ranges cloudflare \| bugcod3 scan -i - --sample 2 -p cf-tls --sni your.domain.com 📦 github.com/MRvirusIR/BugCod3-IP-CDN-Scanner ⭐️ Star it if you like it! ⚠️ Authorized use only. #BugCod3 #CDN #Cloudflare #CleanIP #OpenSource 📡 @BugCod3 \| @RootAccessClub	285
12	📢 Service Update Dear users, Our bots were offline for a while and temporarily unavailable. We're happy to announce that all bots are now back online and ready to use! ✅ Thank you for your patience and continued support. ❤️ T.me/BugCod3BOT T.me/BugCod3UPBOT	274
13	🚀 Big Update: Dork-Scraper v2.0.0 is out! I rewrote Dork-Scraper from scratch. It's no longer a simple script. It's now a full recon tool for bug bounty and pentesting 🔥 🧠 What's new? 🔎 4 search engines: Google · Bing · DuckDuckGo · Yahoo ⚡️ Lightweight HTTP by default, so no browser needed (Selenium is optional) 📂 Batch mode: run dozens of d 0rks from a file + ready-made d0rk lists 🧹 Built-in cleaning: dedupe, strip tracking params, domain & parameter filters 💾 Export to TXT / JSON / CSV 🥷 Rotating User-Agents, random delays, proxy support & CAPTCHA detection ✅ Unit tests + CI + full docs 🧪 Example: dork-scraper -D d0rks/sqli.txt --params-only --unique pattern -f json -o targets.json 📥 Download & docs: 🔗 github.com/MRvirusIR/Dork-Scraper ⚠️ For legal, authorized testing only. 👑 @BugCod3 #BugBounty #Recon #OSINT #Pentest #D0rking	345
14	🩸 REVELAR v2.0 — Unmask the real origin IP behind any CDN. 👁️ Cloudflare. Fastly. Akamai. They only hide the front door. Every origin still leaves a trace — Revelar locks onto it. ⚙️ 18+ OSINT sources · live CDN fingerprinting · DNS/SPF/ASN pivot favicon mmh3 · TLS cert hunting · smart origin scoring (0–100) One command. Full arsenal. $ revelar -d target.com -active -deep 🐺 Free & open-source. ⭐ github.com/MRvirusIR/Revelar 📡 @BugCod3 🤝 @RootAccessClub #bugbounty #recon #osint #infosec #cybersecurity #Revelar	381
15	❄️ SubZer0 – Noise in. Priority out Thousands of new CVEs every month Only a few actually matter — SubZer0 shows you which ones to patch first 🔴 KEV · EPSS · PoC · Metasploit · Nuclei — all in one view 🔐 SHA-256 verified · auto-refreshed every 6h ⚡️ Free · no sign-up · no tracking 🌐 iliya-bashrc.github.io/SubZer0 💻 github.com/iliya-bashrc/SubZer0 💎 @RootAccessClub × @BugCod3	448
16	SubZer0 👀❄️ Soon ⏳	290
17	SubZer0 👀❄️ Soon ⏳	1
18	اهدای جوایز 🎁 به شکل استار⭐️و⭐️ پریمیوم در کانال های🎉🎉🎉 https://t.me/addlist/NQhCgkRBaRc1ODg0 هر هفته چندین برنده 💲اکانت های ⬅️ ایرانی➡️	56
19	✨✨✨✨✨✨✨✨✨✨✨ ✅ [به دلیل درخواست مکرر شما برای اخرین بار لینک کانال ( 🅰️🅰️🅰️ ) رو میذارم خواهشا دیگه کسی تو PV درخواست نکنه] ✅ اینم لینکش برای آخرین بار😀 https://t.me/addlist/4JeNrRTkfmc0Mjlk 🌈🌈🌈🌈🌈🌈🌈🌈🌈🌈🌈	85
20	⭐ Vip channel 🔴 لینک اختصاصی ✅ ظرفیت محدود	89

مشاهده همه پست‌ها