danielmiessler

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs,...

Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

⛰️ LifeOS — The AI-powered Life Operating System that helps you hill climb to wherever you're going.

Telos is an open-sourced framework for creating Deep Context about things that matter to humans.

A curated list of the most common and most interesting robots.txt disallowed directories.

An Open-source Framework for Human Understanding, Meaning, and Progress.

An open-source personal API framework.

A system for autonomous creation and optimization.

General problem-solving algorithm for achieving Euphoric Surprise through verifiable Ideal State Criteria

Parse source code directories and output list of URLs that are then sent through a proxy.

An AI prompt project that uses AI to extract wisdom from all sorts of text, from podcast transcripts, conversations, talks, lectures, papers, articles, blog posts, essays, presentations, or...

A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.

The yt command stands for YouTube Transcript, and pulls transcripts from YouTube.

My Nginx configuration files, for all to use and improve upon.

Quick script to gather stats on incoming credentials and IPs for a honey listener.

Test a network's egress controls with various levels of success and failure.

A repo for collecting and organizing security tools of various types. As new ones come out, they get added to the list.

This tool will harvest valid DNS subdomains from a given domain.

An iptables firewall configuration template.

BugOutBag

ATHI — An AI Threat Modeling Framework for Policymakers

This project exists as a free (and transparent) alternative to paid services that show you what technologies are running on a given website.

A collection of CTF solution types, i.e. not solutions to specific CTF challenges, but the general categories that those solutions fall under. Includes CTF solution categories for web, binary,...

A simple script for translating IP addresses to GeoLocations

The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins,...

The website for the AUGMENTED AI course.

My GitHub profile