Luis Toro (@lobuhisec)

byp4xx. 40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

kindscaler. Node Management for KinD Clusters

awrbacs. AWACS for RBAC. Tool for auditing CRUD permissions in Kubernetes' RBAC.

lobuhi.github.io. Rebujito is a fork of IppSec.Rocks and serves as a repo for hacking tools and other resources such as vulnerable apps, cheatsheets or methodologies.

adet. Bash script for DNS file exfiltration using Invoke-DNSteal in server side.

nanny. Cares the child processes. Bash script to watch and save the whole command of any child process given a PID

kuball. Multicontext CLI for kubectl. All contexts at once or by keyword.

BurpSuite_403Bypasser. Burpsuite Extension to bypass 403 restricted directory

entrophylter. Take the crunch output and filter results for its entropy.

privilege-escalation-awesome-scripts-suite. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

nginxpwner. Python

nucleitemplates. My custom nuclei templates

nuclei-burp-integration. Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.

kubeaudit. kubeaudit helps you audit your Kubernetes clusters against common security controls

adventofcode. Just my personal challenge to complete some Advent of Code challenges just using bash script and (eventually) one-liners. #ChatGPT

HateHunter. HateHunter: Detect Hate Speech on YouTube with AI

Hack-Comands. Compilation of commands for hacking tasks and security tools as a bit of everything

openvpn-install. Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS or Arch Linux.

kubetools. Kubetools - Curated List of Kubernetes Tools

policies. Kyverno policies for security and best practices

operator. Kubernetes operator for installing Calico and Calico Enterprise

auger. Directly access data objects stored in etcd by kubernetes.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

harpoon. A collection of scripts, and tips and tricks for hacking k8s clusters and containers.

ntlm_bruter. Bruteforce NTLM HTTP authentication. This fork uses a single list in user:passwd format.

entropy. shannon entropy

rtl8821CU. Realtek RTL8811CU/RTL8821CU USB Wi-Fi adapter driver for Linux

dnsteal. DNS Exfiltration tool for stealthily sending files over DNS requests.

elastalert. Easy & Flexible Alerting With ElasticSearch

Mitigating-Web-Shells. Guidance for mitigation web shells. #nsacyber

pytm. A Pythonic framework for threat modeling