Tib3rius

Pentest-Cheatsheets. Python

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Windows-PrivEsc-Setup. Batchfile

Hallucinet-Explorer. A web browser where every page is hallucinated by an LLM. No real HTTP requests. Browse the World Vibe Web.

Turbo-Intruder-Scripts. A collection of Turbo Intruder scripts.

SemiAutoRecon. Python

windowsprivchecker. Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

Copier. A Burp extension to help pentesters copy requests / responses for reports.

linuxprivchecker. linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Tibs-TUBs. A collection of TUBs (Totally Useless Bambdas) for Burp Suite, created by Tib3rius & friends.

creddump7. Python

Kali-Configs. Shell

privesc-setup. Shell

Windows-PrivEsc-Tools.

privilege-escalation-awesome-scripts-suite. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Linux-PrivEsc-Tools.

Collector. Java

tib3rius.github.io. HTML

Burp-Suite-Certified-Practitioner-Exam-Study. Burp Suite Certified Practitioner Exam Study

LinEnum. Scripted Local Linux Enumeration & Privilege Escalation Checks

nitko. Nitko web server scanner

Free_Tech_Resources. Compiling a list of free learning resources in different areas of tech

rsg. ReverShellGenerator - A tool to generate various ways to do a reverse shell

revshellgen. Simple script to generate commands to achieve reverse shells.

burpsuite-montoya-dev. Java

Dynamic-DTD. A python Flask app that generates dynamic DTDs for easy data exfiltration.

dirsearch. Web path scanner

lpeworkshop. Windows / Linux Local Privilege Escalation Workshop

XXE-Demos. Java

pspy. Monitor linux processes without root permissions

TryHarder-InfoSecPrep. Discord bot for InfoSec Prep server

infosecstreams.github.io. A (hopefully) actively maintained activity-based-autosorted list of InfoSec Streamers

security-creators. Vue

every-password. Every single password leaked, from 4 to 32 chars

InfoSec-Black-Friday. All the deals for InfoSec related software/tools this Black Friday

vulnerable-nodejs-express-mysql. Example of a vulnerable NodeJS+Express+MySQL service

autoBambda. AI-powered toolkit for generating Bambda custom scan checks for Burp Suite Professional using the Montoya API.