assis@brutelogic.net:~$ whoami

Brute Logic
— data as instruction, and where it breaks.

Rodolfo Assis, Brazilian offensive security researcher. 15+ years finding the exact failure mode where a boundary the system promised to enforce collapses — from SQL injection and XSS to prompt injection. Creator of KNOXSS. It all lives here: the research, the ebooks, the tools, the doctrine, and the current writing.

1,000+
Vulnerabilities disclosed
15+ yrs
XSS & web security
2016–2026
KNOXSS, 10-year run
DEF CON
Ekoparty · BSides
Latest reKover v1.3 URL discovery, on GitHub Oct 2026
// Start here
01
2014 — 2024 · Primary source record

Research

61 posts documenting the original work: Multi-Reflection XSS, Quoteless Injection, the 7 Main XSS Cases, Agnostic Event Handlers. The foundation everything else here is built on.

Read the record
02
PDF · Lifetime updates

Ebooks

First Bounty, SSRF Mastery, The Brute Art of Bypass, Broken Token, AfterMath — practical, field-tested guides for bug bounty hunters, written from inside the practice.

Browse the collection
03
Free · Work in progress

Security in Collapse

A cyberpunk doctrine for the Intelligence Age. Data misclassified as instruction — the primitive behind every injection vulnerability in history — now migrating into probabilistic AI systems.

Read the doctrine
04
Investigative writing

Charted Territory

Analytical writing on AI, cybersecurity, and the intelligence age. Claims checked against primary sources — no press releases paraphrased.

Start reading
// The ebooks
First Bounty The Brute Art of Bypass SSRF Mastery Broken Token: JWT Broken Token: OAuth AfterMath
// Tools
King of Noobs
Free recon suite, bash only, zero dependencies, JSON output
Proprietary API/Tools
Web Tools
Hosted utilities, ready to use
Payloads
Ready-made test sets
// Testing
Testbeds
Built for KNOXSS, the King of Noobs suite and the Broken Token tools, but generic enough to point any tool or setup at