Discover simeononsecurity/docker-rocky-hardened Open Source project

Optimize and debloat Windows 10 and Windows 11 deployments according to best practices for maximum performance and privacy. The ultimate script for enhancing your Windows experience.

733

Windows-Optimize-Debloat

Implement the privacy oriented configurations for FireFox

247

FireFox-Privacy-Script

Create a compliant and secure Windows 10/11 system with our Gold Master image creation tool. Adhere to DoD STIG/SRG Requirements and NSA Cybersecurity guidance for standalone Windows systems with ease, using our ultimate STIG script.

141

Standalone-Windows-STIG-Script

A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-Team defense under an active threat.

140

Blue-Team-Tools

Enhance the security and compliance of your standalone Windows servers with our STIG script, specifically designed to meet DoD STIG/SRG requirements and NSACyber guidance. Achieve ultimate Windows Server protection with our easy-to-use script.

Standalone-Windows-Server-STIG-Script

Take advantage of some more advanced Windows Defender settings.

Windows-Defender-Hardening

C# Based GUI for Windows-Optimize-Harden-Debloat

Windows-Optimize-Harden-Debloat-GUI

System-Wide-Windows-Ad-Blocker

Block Ads, Tracking, and Telemetry System Wide

Harden Windows with Windows Defender Application Control (WDAC)

Windows-Defender-Application-Control-Hardening

Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.

STIG-Compliant-Domain-Prep

A collection of PowerShell modules for interacting with the Shodan API. Includes modules for returning information about the API, client IP, DNS, exploits, honeypot scores, hosts, ports, profiles, and scans. Shodan API key required. Query and scan credits used.

Shodan_PS

Ultimate Applocker Hardening Configuration Script.

Applocker-Hardening

Set up scripts for various OS'es

setup-scripts

A windows hardening script that makes it difficult to compromise a Windows device. Only for use during Blue-Team Competitions.

Windows-Hardening-CTF

Automate Windows Defender STIG to 100% Compliance

Windows-Defender-STIG-Script

A collection of scripts and configurations for hardening various systems and applications.

awesome-hardening

Automate-Sysmon

Automate Sysmon Deployment and Configuration

Ansible Playbooks for SimeonOnSecurity's STIG Scripts

Windows_STIG_Ansible

Configure FireFox with Security and Intelligance features for OSINT and Security Investigations.

FireFox-Security-Researcher

A collection of scripts to assist System Adminsitrators

SAPS

STIG FireFox the Easy Way

FireFox-STIG-Script

PowerShell Modules for Interacting with the VirusTotal API

VirusTotal-PS

A simple script to assist with configuring branding on Windows 10 and Windows Server 2016/2019

Windows-Branding-Script

The only script to assist administrators in completing the .NET STIG.

.NET-STIG-Script

Scripts and Documentation for Hardening Windows Command Prompt and PowerShell

Windows-Terminal-Hardening

A Discord Bot for Backdoors and Breaches. Pre-Alpha State Is Not Fully Functional

discord-backdoors-and-breaches

Automate Windows Updates with Chocolatey and PSWindowsUpdates

ChocoAutomateWindowsUpdates

Dockerized Duino-Coin Miner

docker-duino-coin

Install GLVKs for Windows Desktop, Windows Server, and Office

KMS-Auto-PS

An collection of example configurations and scripts to aid administrators in configuring a hardened Apache Web Server

Apache-Web-Server-Hardening

A collection of tested automations for implementing DoD STIGs and SRGs

awesome-stigs

docker-rtklib-onocoy-rtkdirect

Docker Container that Takes in USB or TCP Based Serial GPS Receiver Output and Forwards the Data to Either Onocoy or RTKDirect or Both.

Easily accomplish updating all windows machines in a domain

simeononsecurity

LazyWindowsUpdates

A Collection of WMI Filters

WMI-Filters

Offine-PS-ActiveDirectory-Install

Install the PowerShell RSAT ActiveDirectory Module Offline

Hardened Docker Container with arm, arm64, and amd64 support https://simeononsecurity.com

docker-ubuntu-hardened

Dockerized TP-Link Pharos Centralized Managment Platform https://simeononsecurity.com

docker-pharos-control

Stream From a Folder of MP4 Files to Twitch, YouTube, and/or Kick

docker-ffmpeg-mp4-folder

Windows-Audit-Policy

Max out Windows Auditing

This Ansible role automates Linux security patching by applying updates to supported Linux distributions. It handles various package managers such as apt, dnf, yum, and apk to ensure that Linux systems are kept up to date with the latest security patches.

ansible_linux_update

docker-debian-hardened

Hardened Debian Docker Container with arm, arm64, and amd64 support https://simeononsecurity.com

Implement WDAG and Harden Windows Based OS'es

Windows-Defender-Application-Guard-Hardening

SoS-Parrot_OS-Setup

Setup ParrotOS how I like it.

The source code for the SimeonOnSecurity website

simeononsecurity.ch

Proper ADMX Templates for the Brave Browser

BraveADMX

ntripserver

Ntrip Version 2.0 Command Line Server - Fork of ntripserver at https://software.rtcm-ntrip.org/browser/ntrip/trunk/ntripserver

SoS-Parrot-Docker

A Customized ParrotOS Docker Image https://simeononsecurity.com

A PowerShell Module to Upload to anonfiles.com

AnonUpload

Apply the JAVA STIG to a Windows System.

Oracle-JRE-8-STIG-Script

SolarWinds SunBurst Countermeasures

SolarWinds-SunBurst-SolarFlare-SolarMarker-Countermeasures

A collection of shodan modules for ansible

ansible_shodan

Simple script to implement protections against speculative execution side-channel vulnerabilities in Windows systems.

Windows-Spectre-Meltdown-Mitigation-Script

Dockerized Meson Network Node https://simeononsecurity.com

docker-mesonnetwork

Translate Hugo markdown file content and create index bundles

glotta

JavaScript

WMISupport

Scrap code testing C# skills for interacting with WMI via CIMSessions

Adobe-Reader-DC-STIG-Script

Fully implement the Adobe Reader DC STIG

Dockerized Ansible Controller running on Rockylinux 8 https://simeononsecurity.com

rocky-ansible

A docker container that publishes an rss feed to a generated webpage

docker-rss-display-web

A collection of scripts and tools that tracks the availability of hotspot 2.0, passpoint, and openroaming networks in the wild from the Wigle Dataset. Updates every 24 hours.

track-openroaming-passpoint

This Ansible role automates the process of applying Windows security updates. It utilizes the `ansible.windows.win_updates` module to search for available security updates and install them on Windows hosts. By automating the patching process, you can ensure that your Windows systems stay up-to-date with the latest security patches.

ansible_windows_update

ansible_system_update

This Ansible role automates the patching of both Linux and Windows systems, allowing you to keep your infrastructure up-to-date with the latest security updates.

CVE-2020-1350-Fix

A registry-based workaround can be used to help protect an affected Windows server, and it can be implemented without requiring an administrator to restart the server. Because of the volatility of this vulnerability, administrators may have to implement the workaround before they apply the security update in order to enable them to update their systems by using a standard deployment cadence.

https://simeononsecurity.com

docker-ubuntu-apache

docker-kaspapool

A static landing page for the purposes of backlinks generation.

sos-landing-page

Scripts and a Docker Container for Hotspot 2.0 Supported AP in Linux

linux-hostapd-hs20-dhcpd

A Full HS20 OSU Server Setup in Docker using hostapd, HS20-Server, Radius, sqllite3, and apache

docker-hs20server

PHP

shodanpy

A Series of Python Modules for Interacting with the Shodan API

Just here to use as a serverless comment host for simeononsecurity.ch

simeononsecurity.com-comments

ChromiumADMX

Proper ADMX Template for the Chromium Browser

scratchpad

Notes and tidbits

Chocolatey-Nethor

https://simeononsecurity.ch

Prehardenend RHEL Docker Container with arm64 and amd64 support https://simeononsecurity.com

docker-rhel-hardened

All the chocolatey packages that I maintain https://simeononsecurity.com

chocolateypackages

A Script That Interfaces with WeatherXM API and Pulls Weather Information from Your Weather XM Devices

WeatherXM-Python

Quickly Spin up a Tor Node https://simeononsecurity.com/github/docker-tor-bridge

docker-tor-bridge

Search the SimeonOnSecurity Website Natively In Firefox - https://simeononsecurity.com

sosfirefox

CSS

track-helium-mobile-wifi

A collection of scripts and tools that tracks the availability of helium mobile wifi networks in the wild from the Wigle Dataset. Updates every 24 hours.