darknode

Tool for deploying and managing Darknodes

Darknode — browser-based cybersecurity platform: 192 security tool platforms + 900+ in-browser utilities, threat intel, CTF/labs, and a built-in AI assistant (hosted free tier or local Ollama). Firebase-hosted no-build SPA.

PROMETHEUS -- AI-powered incident response engine with 40+ playbooks, digital twin simulation, predictive threat detection, and automated containment workflows.

VANGUARD -- automated attack surface discovery with subdomain enumeration, port scanning, technology fingerprinting, and vulnerability correlation.

Digital forensics analysis engine -- disk imaging, memory analysis, timeline reconstruction, artifact extraction, and evidence chain management.

CITADEL -- SOC operations center with log correlation, Sigma rule detection, alert triage workflows, and compliance scoring against NIST/CIS/SOC2 frameworks.

SENTINEL EYE -- real-time 3D cyber threat globe built with CesiumJS. Track APT groups, visualize attack campaigns, and monitor global threat intelligence across 14 tabs.

OSINT collection and analysis engine -- social media reconnaissance, email/username/domain lookup, Shodan/Censys integration, and link visualization.

ORACLE -- threat intelligence platform with IOC lifecycle management, APT group tracking, STIX 2.1 visualization, Diamond Model analysis, and automated TI reporting.

AEGIS -- cybersecurity operations platform with 40+ modules spanning network defense, forensics, threat hunting, compliance, and incident management.

Blue team defense toolkit -- intrusion detection, incident playbooks, YARA rules, network monitoring, and automated response workflows for security training.

Interactive cyber threat world map -- real-time attack visualization with D3.js, live feed integration, geographic heat mapping, and threat actor tracking.

Darknode OS — Debian/Ubuntu/Kali-based security workstation image builder with the Darknode platform and a custom desktop; full edition ships 80+ tools. Build with ./build.sh or grab a pre-built image from Releases.

PHANTOM -- deep packet inspection and network traffic analysis. PCAP parsing, protocol dissection, flow reconstruction, anomaly detection, and TLS/JA3 fingerprinting.

SPECTRE -- cloud security posture management for AWS, Azure, and GCP. 125+ CIS benchmark checks, IAM analysis, Terraform scanning, and multi-framework compliance.

Darknode CLI — terminal security toolkit with the Nexus AI agent, Ollama integration, and real command execution. npm install -g darknode-cli

Darknode Obsidian — a from-scratch 32-bit x86 research kernel in C and Assembly: framebuffer GUI, shell, in-RAM filesystem, and UDP/IP networking (no TCP yet). Research/education project, separate from the shipping Darknode OS Linux distro.

Darknode OS package repository -- APT sources for system updates, security tool packages, and platform components.

Interactive cybersecurity training range -- hands-on CTF challenges, guided walkthroughs, progressive difficulty levels, and score tracking.

SIEM log analysis engine -- multi-format parser (syslog, CEF, JSON, Windows Event), correlation rules, Sigma detection, and threat timeline reconstruction.