Brut Security
Kanalga Telegram’da o‘tish
✅DM: @wtf_brut ✅For Ad: https://tlmtr.io/p/2flAsc 🛃WhatsApp: https://wa.link/brutsecurity 🈴Training: https://brutsecurity.com 📨Mail: info@brutsec.com
Ko'proq ko'rsatish📈 Telegram kanali Brut Security analitikasi
Brut Security (@brutsecurity) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 17 739 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 7 362-o'rinni va Hindiston mintaqasida 22 889-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 17 739 obunachiga ega bo‘ldi.
27 Oktabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 217 ga, so‘nggi 24 soatda esa -4 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 16.61% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 6.80% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 2 948 marta ko‘riladi; birinchi sutkada odatda 1 207 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 7 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent hunter, bounty, darkshadow, bypass, hex kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“✅DM: @wtf_brut
✅For Ad: https://tlmtr.io/p/2flAsc
🛃WhatsApp: https://wa.link/brutsecurity
🈴Training: https://brutsecurity.com
📨Mail: info@brutsec.com”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 28 Oktabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
17 739
Obunachilar
-424 soatlar
+87 kun
+21730 kun
Postlar arxiv
17 739
⚡WaybackLister is a reconnaissance tool that taps into the Wayback Machine to fetch historical URLs for a domain, parses unique paths, and checks if any of those paths currently expose directory listings. It's fast, multithreaded, and built for practical use in security assessments and bug bounty recon.
✅http://github.com/anmolksachan/wayBackLister
✅ Join Telegram For More Content: http://t.me/brutsecurity
----------------------------------------------------------
🎓 Ready to Skill Up? Enroll Now → http://wa.link/brutsecurity
#CyberSecurity #BugBounty #EthicalHacking #Infosec #BrutSecurity
17 739
http.component:"php"
"X-Powered-By: PHP"
http.component:"php" country:"xx"
"X-Powered-By: PHP/7.4.33"
"X-Powered-By: PHP/7.4"
"X-Powered-By: PHP/8."
http.component:"php" http.component_version:"7.4"
"X-Powered-By: PHP/8.1" country:"xx"
https://shodan.io/search?query=http.component%3A%22php%22
17 739
Repost from Brut Security
http.component:"php"
"X-Powered-By: PHP"
http.component:"php" country:"xx"
"X-Powered-By: PHP/7.4.33"
"X-Powered-By: PHP/7.4"
"X-Powered-By: PHP/8."
http.component:"php" http.component_version:"7.4"
"X-Powered-By: PHP/8.1" country:"xx"
https://shodan.io/search?query=http.component%3A%22php%22
17 739
Repost from Brut Security
PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge.
The flaws can enable unauthenticated code execution and expose server memory.
PATCH NOW (CVE-2026-109618, CVE-2026-109619)
Details ➜ https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html
17 739
http.component:"php"
"X-Powered-By: PHP"
http.component:"php" country:"xx"
"X-Powered-By: PHP/7.4.33"
"X-Powered-By: PHP/7.4"
"X-Powered-By: PHP/8."
http.component:"php" http.component_version:"7.4"
"X-Powered-By: PHP/8.1" country:"xx"
https://shodan.io/search?query=http.component%3A%22php%22
17 739
PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge.
The flaws can enable unauthenticated code execution and expose server memory.
PATCH NOW (CVE-2026-109618, CVE-2026-109619)
Details ➜ https://thehackernews.com/2026/10/php-issues-emergency-patches-for-two.html
17 739
🎯 Target: Apache Nextcloud + richdocumentscode
⚡ Type: RC3 ➜ Websh3ll / Blind RC3
✅ Full fingerprinting — identifies Nextcloud and app version
✅ Command injection via URL through proxy.php (supports Base64/hex payloads)
✅ Webshell deployment via file upload and execution
✅ Timing-based attack (blind RC3) as a fallback
✅ Multi-threaded — supports mass scanning of target lists
✅ HTTPS support with certificate bypass
✅ JSONL/TXT output, ready for integration into pipelines
✅ Raw HTTP socket — preserves $(CMD) syntax without URL normalization
🔥 AFECTING + 1,300,000 websites
DM me to buy 👉 @Mm_fit
Channel: https://t.me/fox_security_cve
17 739
CVE-2026-109618 & CVE-2026-109619: Two RCE vulnerabilities in PHP (PHP2Shell), rating 9.2 for both 🔥
Today the PHP security team released an emergency update addressing two critical vulnerabilities in the PHP core, which allow unauthenticated remote code execution as the web worker account.
Details of the two vulnerabilities were disclosed by researchers yesterday, ahead of today’s release.
Search at Netlas.io:
👉 Link: https://nt.ls/MDn37
👉 Dork: tag.name:"php"
Vendor advisories:
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
17 739
শুভ বিজয়া দশমী!
May Maa Durga bless you with strength, prosperity, and wisdom. As we celebrate the victory of good over evil, may we also defeat every cyber threat and build a safer digital world.
Brut Security wishes you a Happy Bijaya Dashami!
Stay Blessed. Stay Vigilant. Stay Cyber Secure.
17 739
+1
🩸xploited | CVE Exploits & Cybersecurity
🚨 Latest CVEs (2026) Critical & High-Severity
💥 CVE Exploit Scripts, RCE & Python PoCs
🌐 WordPress • Joomla • Drupal • Web Apps & More
🔍 Exploit Details Endpoints, Payloads & Reproduction
⚡️ 0-Day Vulnerabilities & Exploit Analysis
🧑💻 160+ Free Exploits on GitHub (Mass Exploits)
Stop paying for publicly available exploits.
Get direct access to free PoCs, exploit code, and the latest CVE releases.
Real Code. Real CVEs. Free Access.
📱 Telegram: https://t.me/KNxploited
📱 GitHub: https://github.com/Nxploited/
17 739
YesWeHack Claude Kit
A Claude Code plugin that helps bug bounty hunters write clear, well-evidenced reports - the kind a triager can validate quickly.
Source: https://github.com/yeswehack/claude-kit
17 739
শুভ শারদীয়া! শুভ দুর্গাপূজা! ❤️
May Maa Durga destroy every evil, protect us from every threat, and empower us with knowledge, courage, and wisdom.
এই পুজো হোক আনন্দের, শক্তির, আর নিরাপত্তার।
Brut Security wishes everyone a Happy Durga Puja!
Stay festive. Stay aware. Stay secure.
17 739
🔐 Certificate Ripper
A CLI tool to extract server certificates
https://github.com/Hakky54/certificate-ripper
#cybersecurity #pentesting #bugbounty
17 739
You can automate a large part of your bug bounty workflow with Claude.
A practical setup:
Target → Scope Check
↓
Recon → Subdomains + URLs
↓
Asset Processing → Deduplicate + Categorize
↓
Claude → Analyze endpoints + prioritize targets
↓
Security Tools → Run authorized checks
↓
Claude → Correlate results + explain findings
↓
Human → Validate vulnerability
↓
Claude → Generate report
Example stack:
Claude Code
+ Python
+ Subfinder
+ httpx
+ Katana
+ Nuclei
+ Burp Suite
+ SQLite/PostgreSQL
The key is giving Claude structured outputs from each stage instead of dumping raw scan results into the model.
Automate the repetitive work.
Keep exploitation and final validation under human control.
Only test assets explicitly authorized by the program.
17 739
🔥 BRUT SECURITY | OCTOBER BATCH
October batch enrollments are now OPEN! 🔔
Ready to sharpen your cybersecurity skills and take your hacking journey to the next level?
📩 DM us to enroll. Limited slots available! - https://wa.link/brutsecurity
