guardicore/monkey

Health v2 · maintenance only

Adoption not part of the score

7076 stars · 828 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Infection Monkey is an open-source adversary emulation platform that simulates malware-like self-propagation across a network to test security controls. It consists of a configurable worm agent and a centralized command-and-control server (Monkey Island) for controlling and visualizing simulations.

Use cases

• test whether my security controls detect lateral movement
• simulate ransomware propagation safely in my network
• run a breach and attack simulation to validate defenses
• find unpatched machines an attacker could pivot through
• measure my network's resilience to worm-like malware
• verify detection of credential theft and exploitation attempts

When to choose

• you want empirical, automated validation of detection and prevention controls against worm-like threats
• you need a safe, self-propagating agent to test segmentation and lateral-movement defenses
• you want a centralized dashboard to visualize how far an attack could spread

When to avoid

• you need a full red-team toolkit with manual exploitation and C2 frameworks like Metasploit or Cobalt Strike
• you want passive vulnerability scanning rather than active attack simulation
• you cannot authorize intrusive testing on the target network

Facets

application · maturity active

penetration-testing security networking monitoring security penetration-testing networking self-hosted python adversary-emulation breach-attack-simulation network-worm-simulation lateral-movement security-posture linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="guardicore/monkey")