Brut Offensive Playbook v1

🔐 The Brut Method™ — Web Application Bug Bounty Playbook

A 59-page system, not just a PDF. This is the exact methodology

Brut Security uses on real engagements — turned into a repeatable

playbook so you stop guessing and start hunting with structure.

Whether you're landing your first bounty or tightening up an

existing process, this gives you the full lifecycle: recon →

exploitation → reporting, in one place.

━━━━━━━━━━━━━━━━━━━━━━━━━━

📦 WHAT'S INSIDE

━━━━━━━━━━━━━━━━━━━━━━━━━━

✅ 59-page professionally formatted guide

✅ 20 chapters covering the full attack lifecycle

✅ 2 payload appendices — SQLi, XSS, SSRF, SSTI, Command Injection

✅ 20+ tool reference sheet

✅ 60+ test case master checklist

✅ Real report templates + severity rating guide

━━━━━━━━━━━━━━━━━━━━━━━━━━

📚 THE METHODOLOGY

━━━━━━━━━━━━━━━━━━━━━━━━━━

- Recon & Asset Discovery (subfinder, amass, shodan, crt.sh)

- Subdomain Takeover & Enumeration

- Authentication Testing (login, registration, reset, OAuth 2.0)

- Account Takeover (ATO) Techniques

- JWT Attacks (none algo, secret cracking, kid injection)

- SQL Injection (manual + SQLmap)

- Server-Side Template Injection (SSTI → RCE)

- XSS + WAF Bypass

- SSRF + Cloud Metadata Exploitation

- File Upload → Web Shell → RCE

- HTTP Request Smuggling (CL.TE / TE.CL)

- IDOR & Broken Access Control

- API Security Testing & GraphQL

- Cloud Security (S3, Firebase, AWS IAM)

- Reporting Best Practices & Severity Ratings

- Google Dorks, Shodan Dorks & Payload Cheatsheets

━━━━━━━━━━━━━━━━━━━━━━━━━━

🎯 BUILT FOR

━━━━━━━━━━━━━━━━━━━━━━━━━━

→ Bug bounty hunters (beginner → intermediate)

→ Pentesters who want a repeatable checklist

→ Security students prepping for real engagements

→ CTF players leveling up web exploitation

━━━━━━━━━━━━━━━━━━━━━━━━━━

⚠️ DISCLAIMER

━━━━━━━━━━━━━━━━━━━━━━━━━━

For educational and authorized security testing only. Always

test within program scope or with explicit written permission.

— Brut Security | The Brut Method™