DumpsterFire is a modular, cross-platform tool that automates the creation and execution of customizable, time-delayed security incident simulations for Red, Blue, and Purple Team exercises.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
This tool is used by Red Teams to create decoy incidents and distractions during engagements, by Blue Teams to convert tabletop exercises into realistic, automated live-fire drills, and by Purple Teams to methodically test and map sensor and alerting capabilities. It enables scalable, repeatable, and distributed security event simulations that generate network and filesystem artifacts to train and evaluate security operations.
Users should ensure compatibility with Python versions as the project was migrating to Python3 as of mid-2020. Proper coordination between Red and Blue teams is recommended to avoid unintended disruptions. The tool is ideal for controlled environments and pre-approved exercises to prevent accidental impact on production systems.
Clone the repository from GitHub: git clone https://github.com/TryCatchHCF/DumpsterFire.git
Navigate into the DumpsterFire directory
Run the tool using the provided Python scripts (note: migration to Python3 was planned as of 2020)
Add custom Fire modules by placing them into the FireModules directory
Start DumpsterFire and use the menu-driven interface to create and run event chainsRun DumpsterFire main script
Starts the DumpsterFire menu-driven interface for building and executing event chains
Place custom Fire modules in FireModules directory
Adds new event modules that DumpsterFire auto-detects and makes available at startup
Trigger DumpsterFire events immediately or schedule with date-time triggers
Executes the created security incident simulations either on demand or at a specified future time