Daniel Miessler 🛡️

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Fabric. Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

LifeOS. An General Purpose AI Harness for magnifying human capabilities. [CODING, BUILDING, CREATING, BUSINESS, LIFE, WORK, ...]

RobotsDisallowed. A curated list of the most common and most interesting robots.txt disallowed directories.

Telos. Telos is an open-sourced framework for creating Deep Context about things that matter to humans.

Substrate. An Open-source Framework for Human Understanding, Meaning, and Progress.

Daemon. An open-source personal API framework.

blackhat-arsenal-tools. Official Black Hat Arsenal Security Tools Repository

Source2URL. Parse source code directories and output list of URLs that are then sent through a proxy.

vim. My Vim configuration.

ExtractWisdom. An AI prompt project that uses AI to extract wisdom from all sorts of text, from podcast transcripts, conversations, talks, lectures, papers, articles, blog posts, essays, presentations, or whatever you can get into text form.

Caparser. A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.

yt. The yt command stands for YouTube Transcript, and pulls transcripts from YouTube.

HoneyCredIPTracker. Quick script to gather stats on incoming credentials and IPs for a honey listener.

nginx. My Nginx configuration files, for all to use and improve upon.

egression. Test a network's egress controls with various levels of success and failure.

SecurityTools. A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.

iptables. An iptables firewall configuration template.

DNSHarvester. This tool will harvest valid DNS subdomains from a given domain.

BugOutBag. BugOutBag

athi. ATHI — An AI Threat Modeling Framework for Policymakers

TechStack. This project exists as a free (and transparent) alternative to paid services that show you what technologies are running on a given website.

CTFSolutionTypes. A collection of CTF solution types, i.e. not solutions to specific CTF challenges, but the general categories that those solutions fall under. Includes CTF solution categories for web, binary, network, crypto, and others. Please contribute!

GeoHarvest. A simple script for translating IP addresses to GeoLocations

ATM. The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.

augmented-course. The website for the AUGMENTED AI course.

VimBlog. A Vim plugin for managing a Wordpress blog.

geoip. A Ruby script that takes in IPs and returns Country, State, and City

mobiletools. Free tools for mobile testing.

Frames. An open-source collection of positive and negative mental frames.

Books. A list of the books that I am reading, with priorities.

tmux. My tmux stuff

neovim. My Neovim settings

unsupervised-learning.

Self. A tracking system for everything me, e.g.: beliefs, passions, must-haves, must-dos, favorite movies, favorite quotes, favorite aphorisms, etc.

hostfind. Does a dictionary lookup on common, valuable hostnames for a given domain.

ServerConfig. My various configuration files for zsh, vim, tmux, etc.

threshold-site. The website for the Threshold.

top-domains. A repository for maintaining a list of the top domains based on multiple lists

mst. A meta-scan tool used to kick off a number of command-line security tools during VA/PT work.

GitHubRating. A composite score for one's GitHub quality.

CertExpirationCheck. Checks to see when the cert for a given domain expires.

import-alignment. A library-based attempt to increase our chances for achieving AI Alignment with an emergent AGI.

NewBox. Zsh and Vim on new Linux boxen.

Personal. A repository for personal tracking.

gscour. Find all hostnames related to a given domain. Helpful during VA/PT work.

GetTweets. Get a number of your tweets from the Twitter API.

.dotfiles. Dotfiles for nvim, oh-my-zsh, and other stuff…

MostPoweredBy. Checks to see the most common X-Powered-By headers for the world's most popular websites.

owasp-summit-2017. Content for OWASP Summit 2017 site

WorkDay. An ideal (regular) work day.

Dicematch. Determines how many times a given number of dice match each other.

Intimate. INTIMATE -- The audience management platform.

CaliforniaAirQuality. Get the air quality for your area from California's AIrNow website using Ruby and Nokogiri.

diceroll. A dice-rolling application for rolling any number of six-side dice any number of times.

BandShuffle. Shuffle some bands, yo.

mhp. A proof-by-simulation of the Monty Hall problem [Python]