Rodolfo Assis (@RodoAssis) header
Rodolfo Assis (@RodoAssis) profile picture

Rodolfo Assis

@RodoAssis

Knowledge makes us responsible. https://teapaw.org/t.co/MySYO1wQhH Support independent work. https://teapaw.org/t.co/lE3jQs0TYZ

 Brazil šŸ‡§šŸ‡·
github.com/BRuteLogic
Joined March 2018
  • Tweets3.4K
  • Following128
  • Followers10.2K
584Media
Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)Photo by Rodolfo Assis (@RodoAssis)
Going to make my life easier and get back to just 1 Twitter (X) account. Please follow and ping me on @BRuteLogic, I won't be here anymore.
6
455
Rodolfo Assis retweeted
Rodolfo Assis (@RodoAssis) profile picture
Rodolfo Assis@RodoAssisApr 27
Old but gold. #SSRF => #LFD rodoassis.medium.com/on-ssrfā€¦
On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Found ā€” Part I

On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Foundā€Šā€”ā€ŠPart I

I think the most we have to test against an application the better. But as you can see by yourself (correct me if Iā€™m wrong please) theā€¦

rodoassis.medium.com
11
52
4,182
See beyond what the eyes see. You will never see them making fun of their real clients, the companies. They are not really giving a FLYING DUCK about you. At all.
bugcrowd (@Bugcrowd) profile picturebugcrowd
@BugcrowdApr 27
8 minutes after submitting a P4
Image from bugcrowd (@Bugcrowd)
489
Get $10 USD OFF on my ebooks! Coupon code: BRUTE10 #SSRF #BugBounty #XSS #Bypass brutelogic.net/ebooks/
Professional Cybersecurity E-books by Brute Logic

Professional Cybersecurity E-books by Brute Logic

Master bug bounty hunting and cybersecurity research with proven methodologies. Professional cybersecurity education from industry expert Brute Logic.

brutelogic.net
3
414
Couldn't agree more, check this out and my blog post "Zero Days, Zero Truth". youtu.be/mOGqQjAlWxs?si=6t2Fā€¦
1
3
447
brutelogic.net/charted/zero-ā€¦

Zero Days, Zero Truth

Ten specific claims about Claude Mythos. Primary sources only. The capability is real. The story around it is manufactured.

brutelogic.net
119
Rodolfo Assis retweeted
Rodolfo Assis (@RodoAssis) profile picture
Rodolfo Assis@RodoAssisApr 28
Released reKover - an URL mapper. Open source, check it out! github.com/BruteLogic/reKoveā€¦
GitHub - BRuteLogic/reKover: Stealth hybrid URL mapper

GitHub - BRuteLogic/reKover: Stealth hybrid URL mapper

Stealth hybrid URL mapper. Contribute to BRuteLogic/reKover development by creating an account on GitHub.

github.com
1
6
528
Released reKover - an URL mapper. Open source, check it out! github.com/BruteLogic/reKoveā€¦
GitHub - BRuteLogic/reKover: Stealth hybrid URL mapper

GitHub - BRuteLogic/reKover: Stealth hybrid URL mapper

Stealth hybrid URL mapper. Contribute to BRuteLogic/reKover development by creating an account on GitHub.

github.com
1
6
528
knoxss.pro/?page_id=3249
BRUTE XSS Cheat Sheet

BRUTE XSS Cheat Sheet

The most exclusive collection of XSS vectors and payloads.

knoxss.pro
1
330
Old but gold. #SSRF => #LFD rodoassis.medium.com/on-ssrfā€¦
On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Found ā€” Part I

On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Foundā€Šā€”ā€ŠPart I

I think the most we have to test against an application the better. But as you can see by yourself (correct me if Iā€™m wrong please) theā€¦

rodoassis.medium.com
11
52
4,182
I'm about to release an open source recon tool on GitHub. Try to get the most URLs out of its testbed with your recon methods (in the shortest time possible) and let me know in the comments! recon.brutelogic.net

Recon Labs ā€” Offensive Recon Testbed | Brute Logic

Public testbed used to benchmark and validate offensive recon tools including reKover and the King of Noobs suite by Brute Logic. Live environment for URL discovery and subdomain enumeration testing.

recon.brutelogic.net
1
1
10
804
Rodolfo Assis retweeted
Andrew Gƶmez (@red_darkin) profile picture
Andrew Gƶmez@red_darkinApr 23
I reviewed a JS file several times. Found nothing. Fed it to Claude Desktop (free version). It mapped hidden endpoints in seconds. That led me to: ā€¢ PII of high-profile users ā€¢ Fund redirection to any bank account ā€¢ Balance manipulation Check it ā†“ medium.com/p/how-i-found-a-cā€¦
How I Found a Critical Bug Using Claude Desktop (Free)

How I Found a Critical Bug Using Claude Desktop (Free)

TL;DR: I fed a JavaScript bundle to Claude Desktop (I use Burp MCP with Claude). It mapped hidden endpoints Iā€™d missed after multipleā€¦

medium.com
11
55
2
315
20,187
Rodolfo Assis retweeted
KNOXSS (@KN0X55) profile picture
KNOXSS@KN0X55Apr 23
No AI can get even close to KNOXSS in blackbox testing! šŸ˜Ž Get the smartest and most comprehensive XSS tool out there (60+ cases) with a DISCOUNT: Discount Coupon - 20% OFF šŸŽ KAPRIL20 šŸŽ Valid until the end of this month. knoxss.pro #XSS #BugBounty #PenTesting
Main

Main

The State of The Art in XSS Testing. KNOXSS detects and proves with a popup 50+ XSS cases.

knoxss.pro
3
9
1,085
Rodolfo Assis retweeted
Brute (@BRuteLogic) profile picture
Brute
@BRuteLogicApr 23
Get $10 USD OFF on ebooks. Coupon code: BRUTE10 Check them out: brutelogic.net/ebooks
Professional Cybersecurity E-books by Brute Logic

Professional Cybersecurity E-books by Brute Logic

Master bug bounty hunting and cybersecurity research with proven methodologies. Professional cybersecurity education from industry expert Brute Logic.

brutelogic.net
1
2
8
1,852
Rodolfo Assis retweeted
Rodolfo Assis (@RodoAssis) profile picture
Rodolfo Assis@RodoAssisApr 23
brutelogic.net/cyberpunk Spread the signal.
1
3
456
brutelogic.net/cyberpunk Spread the signal.
1
3
456
Rodolfo Assis retweeted
Brute (@BRuteLogic) profile picture
Brute
@BRuteLogicApr 21
Brute One Guidelines >> Updated with the "Bypass 403" example using our new testbed for bypass 403.bruteloglc.net >> Still using nomore403 but it will soon be replaced with a custom proprietary tool Check it out. brutelogic.net/guidelines/
9
26
3,083
Just launched a dedicated 403.brutelogic.net subdomain for bypass testbeds. The idea is to explore more vulnerabilities related to bypass and feed Brute One with custom tools for those, starting with BAC - Broken Access Control: 403.brutelogic.net/access
3
4
593
Whether you believe or not all those AI stories about Cybersecurity, you really should read this to be informed. I've done my best to show you not an edited reality but the full picture behind all those claims that make you think that AI for Cybersec is more than it actually is.
Brute (@BRuteLogic) profile pictureBrute
@BRuteLogicApr 16
We have a new Blog. Charted Territory - Investigative and analytical writing on AI, Cybersecurity and the Intelligence Age. Just published "Zero Days, Zero Truths". Check it out: brutelogic.net/charted/zero-ā€¦
Zero Days, Zero Truth

Zero Days, Zero Truth

Ten specific claims about Claude Mythos. Primary sources only. The capability is real. The story around it is manufactured.

brutelogic.net
1
3
286
Rodolfo Assis retweeted
Brute (@BRuteLogic) profile picture
Brute
@BRuteLogicApr 14
403 Access Bypass TestBed x55.is/brutelogic/bypass/ Try "bypass the 403 on [URL]" with Brute One. brutelogic.net
Image from Brute (@BRuteLogic)
1
26
195
11,506
Load more