Cybersecurity and automation engineer in a grey top hat, building open-source tools for hardening, FreeRADIUS, OpenRoaming, Docker, and privacy tech.
Windows-Optimize-Harden-Debloat. Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.
1.4kWindows-Optimize-Debloat. Optimize and debloat Windows 10 and Windows 11 deployments according to best practices for maximum performance and privacy. The ultimate script for enhancing your Windows experience.
295FireFox-Privacy-Script. Implement the privacy oriented configurations for FireFox
206Standalone-Windows-STIG-Script. Create a compliant and secure Windows 10/11 system with our Gold Master image creation tool. Adhere to DoD STIG/SRG Requirements and NSA Cybersecurity guidance for standalone Windows systems with ease, using our ultimate STIG script.
190Blue-Team-Tools. A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-Team defense under an active threat.
106Windows-Defender-Hardening. Take advantage of some more advanced Windows Defender settings.
77Standalone-Windows-Server-STIG-Script. Enhance the security and compliance of your standalone Windows servers with our STIG script, specifically designed to meet DoD STIG/SRG requirements and NSACyber guidance. Achieve ultimate Windows Server protection with our easy-to-use script.
66Windows-Defender-Application-Control-Hardening. Harden Windows with Windows Defender Application Control (WDAC)
51System-Wide-Windows-Ad-Blocker. Block Ads, Tracking, and Telemetry System Wide
51Windows-Optimize-Harden-Debloat-GUI. C# Based GUI for Windows-Optimize-Harden-Debloat
45STIG-Compliant-Domain-Prep. Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.
36Applocker-Hardening. Ultimate Applocker Hardening Configuration Script.
35Windows-Hardening-CTF. A windows hardening script that makes it difficult to compromise a Windows device. Only for use during Blue-Team Competitions.
31awesome-hardening. A collection of scripts and configurations for hardening various systems and applications.
29setup-scripts. Set up scripts for various OS'es
26Shodan_PS. A collection of PowerShell modules for interacting with the Shodan API. Includes modules for returning information about the API, client IP, DNS, exploits, honeypot scores, hosts, ports, profiles, and scans. Shodan API key required. Query and scan credits used.
24FireFox-Security-Researcher. Configure FireFox with Security and Intelligance features for OSINT and Security Investigations.
20Automate-Sysmon. Automate Sysmon Deployment and Configuration
20Windows-Defender-STIG-Script. Automate Windows Defender STIG to 100% Compliance
19docker-rtklib-onocoy-rtkdirect. Docker Container that Takes in USB or TCP Based Serial GPS Receiver Output and Forwards the Data to Either Onocoy or RTKDirect or Both.
18FireFox-STIG-Script. STIG FireFox the Easy Way
15Windows_STIG_Ansible. Ansible Playbooks for SimeonOnSecurity's STIG Scripts
15ntripserver. Ntrip Version 2.0 Command Line Server - Fork of ntripserver at https://software.rtcm-ntrip.org/browser/ntrip/trunk/ntripserver
15docker-ffmpeg-mp4-folder. Stream From a Folder of MP4 Files to Twitch, YouTube, and/or Kick
14docker-duino-coin. Dockerized Duino-Coin Miner
13SAPS. A collection of scripts to assist System Adminsitrators
13VirusTotal-PS. PowerShell Modules for Interacting with the VirusTotal API
12simeononsecurity.ch. The source code for the SimeonOnSecurity website. License does not apply to article content, only website source code.
11ChocoAutomateWindowsUpdates. Automate Windows Updates with Chocolatey and PSWindowsUpdates
11discord-backdoors-and-breaches. A Discord Bot for Backdoors and Breaches. Pre-Alpha State Is Not Fully Functional
10Windows-Terminal-Hardening. Scripts and Documentation for Hardening Windows Command Prompt and PowerShell
10track-helium-mobile-wifi. A collection of scripts and tools that tracks the availability of helium mobile wifi networks in the wild from the Wigle Dataset and Helium API. Updates every 24 hours.
10awesome-stigs. A collection of tested automations for implementing DoD STIGs and SRGs
9track-openroaming-passpoint. A collection of scripts and tools that tracks the availability of hotspot 2.0, passpoint, and openroaming networks in the wild from the Wigle Dataset. Updates every 24 hours. Resets and archives yearly.
9docker-ubuntu-hardened. Hardened Docker Container with arm, arm64, and amd64 support https://simeononsecurity.com
9Apache-Web-Server-Hardening. An collection of example configurations and scripts to aid administrators in configuring a hardened Apache Web Server
9.NET-STIG-Script. The only script to assist administrators in completing the .NET STIG.
8simeononsecurity. JavaScript
8Windows-Branding-Script. A simple script to assist with configuring branding on Windows 10 and Windows Server 2016/2019
8Windows-Audit-Policy. Max out Windows Auditing
7Offine-PS-ActiveDirectory-Install. Install the PowerShell RSAT ActiveDirectory Module Offline
7KMS-Auto-PS. Install GLVKs for Windows Desktop, Windows Server, and Office
7CCminer-ARM-optimized. CCminer for ARM devices. Highly optimized compilation settings for ARMv8 Architectures
7LazyWindowsUpdates. Easily accomplish updating all windows machines in a domain
7Win10SmartDebloat. This is an adapted version from https://github.com/W4RH4WK/Debloat-Windows-10. These scripts will Customize, Debloat and Improve Security/Performance on Windows 10+.
6ansible_linux_update. This Ansible role automates Linux security patching by applying updates to supported Linux distributions. It handles various package managers such as apt, dnf, yum, and apk to ensure that Linux systems are kept up to date with the latest security patches.
6WMI-Filters. A Collection of WMI Filters
6docker-debian-hardened. Hardened Debian Docker Container with arm, arm64, and amd64 support https://simeononsecurity.com
6docker-pharos-control. Dockerized TP-Link Pharos Centralized Managment Platform https://simeononsecurity.com
5WMISupport. Scrap code testing C# skills for interacting with WMI via CIMSessions
4privateGPT. Interact privately with your documents using the power of GPT, 100% privately, no data leaks
4Windows-Defender-Application-Guard-Hardening. Implement WDAG and Harden Windows Based OS'es
4helium-DIY-middleman. Code here acts as a middleman between LoRa gateways running Semtech packet forwarders and servers ingesting packet forwarder data
3ansible_shodan. A collection of shodan modules for ansible
3BraveADMX. Proper ADMX Templates for the Brave Browser
3awesome-selfhosted. A list of Free Software network services and web applications which can be hosted on your own servers
3Windows10-Postinstall. 🛠️ Scripts & programs I use to optimize and debloat my new Windows 10 installations
3rocky-ansible. Dockerized Ansible Controller running on Rockylinux 8 https://simeononsecurity.com
2ansible_system_update. This Ansible role automates the patching of both Linux and Windows systems, allowing you to keep your infrastructure up-to-date with the latest security updates.
2