DasSecurity-HatLab/AoiAWD

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1106 stars · 186 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

AoiAWD is a lightweight, portable EDR (Endpoint Detection and Response) system designed for CTF Attack-Defense (AWD) competitions. It captures web traffic, PWN binary I/O, process, and filesystem behavior on target machines and visualizes it through a web dashboard with alerting and traffic-tampering plugins.

Use cases

• monitor file system changes during an AWD CTF competition
• capture web request and response traffic on a defended target machine
• detect and replace leaked flags in outgoing HTTP responses
• detect webshell / immortal shell files on the server
• record PWN binary stdin/stdout traffic and memory snapshots
• get real-time alerts when other teams modify King of the Hill files
• run low-privilege behavior monitoring that bypasses common check scripts

When to choose

• you are competing in an AWD (Attack with Defense) style CTF and need visibility into your box
• you need a portable, low-privilege monitoring system deployable on restricted target machines
• you want automatic flag detection and replacement in outbound traffic

When to avoid

• you need production-grade EDR for real enterprise endpoints
• your environment is not Linux-based
• you need long-term, scalable log retention rather than short competition sessions

Facets

application · maturity maintenance

monitoring alerting security logging web-scraping security developer-tools self-hosted self-hosted php edr ctf awd attack-defense capture-the-flag behavior-monitoring traffic-tampering php linux web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="DasSecurity-HatLab/AoiAWD")