InvokeHoneyBadger is the origin project for HoneyBadger Vanguard (HBV) — red-team tooling, recon frameworks, and community resources.
This repository contains the official landing page for invokehoneybadger.com, deployed via GitHub Pages.
HoneyBadger Vanguard (HBV) represents:
- Red-team tooling for security professionals
- Reconnaissance frameworks for ethical hacking and penetration testing
- Community resources for security researchers and practitioners
- Real-world tradecraft hardened by operational experience
invokehoneybadger.github.io/
├── index.html # Main landing page (responsive, terminal-themed)
├── styles.css # External stylesheet (modular, cacheable)
├── js/ # JavaScript modules
│ ├── matrix.js # Matrix rain animation
│ ├── hexagon.js # Hexagon overlay effects
│ ├── terminal.js # Terminal stream simulation
│ ├── boot.js # Boot sequence with audio
│ └── counter.js # Visitor counter
├── .github/
│ ├── workflows/
│ │ ├── deploy.yml # GitHub Pages deployment
│ │ ├── security-scan.yml # Trivy, TruffleHog, HTML validation, Lighthouse
│ │ ├── codeql.yml # CodeQL security analysis
│ │ └── optimize-assets.yml # Automatic CSS/JS minification
│ └── dependabot.yml # Automated dependency updates
├── CNAME # Custom domain configuration
├── README.md # This file
├── LICENSE # MIT License
├── SECURITY.md # Security policy and vulnerability reporting
├── DEPLOYMENT.md # Server configuration and deployment guide
├── CONTRIBUTING.md # Contribution guidelines
├── _headers # HTTP headers config (Netlify/CDN)
├── robots.txt # SEO crawler directives
├── sitemap.xml # SEO sitemap
├── manifest.json # PWA manifest
├── .well-known/
│ └── security.txt # RFC 9116 security contact information
├── invokehoneybadger_favicon.ico
└── invokehoneybadger_favicon_32.png
-
Clone the repository:
git clone https://github.com/invokehoneybadger/invokehoneybadger.github.io.git cd invokehoneybadger.github.io -
Serve locally:
# Using Python 3 python3 -m http.server 8000 # Or using Node.js (npx http-server) npx http-server -p 8000
-
Open in browser:
http://localhost:8000
This site is automatically deployed via GitHub Pages:
- Production URL: https://invokehoneybadger.com
- GitHub Pages URL: https://invokehoneybadger.github.io
- Auto-deploy: Pushes to
mainbranch trigger automatic deployment
This repository implements industry-standard security practices:
- ✅ Content Security Policy (CSP) - Prevents XSS and code injection
- ✅ X-Frame-Options - Clickjacking protection
- ✅ X-Content-Type-Options - MIME-sniffing protection
- ✅ Referrer-Policy - Controls referrer information leakage
- ✅ Permissions-Policy - Restricts browser feature access
- ✅ RFC 9116 security.txt - Standardized vulnerability disclosure
- ✅ HTTPS Enforcement - GitHub Pages provides automatic HTTPS
If you discover a security vulnerability, please report it responsibly:
- Email: security@invokehoneybadger.com
- Alternative: hi@invokehoneybadger.com
- Policy: See SECURITY.md for full details
- Response Time: Initial response within 48 hours
Please do NOT open public GitHub issues for security vulnerabilities.
The InvokeHoneyBadger ecosystem includes:
| Service | URL | Description |
|---|---|---|
| Main Site | invokehoneybadger.com | Primary landing page |
| API Gateway | api.invokehoneybadger.com | API services |
| Portal | portal.invokehoneybadger.com | Operations dashboard |
| Shop | shop.invokehoneybadger.com | Official HBV merchandise |
| GitHub | @invokehoneybadger | Open source projects |
| X/Twitter | @InvokHonyBadgr | Updates and announcements |
- HTML5 - Semantic, accessible markup (WCAG AA compliant)
- CSS3 - Modular external stylesheet with CSS variables
- Vanilla JavaScript - ES6+ modular architecture, zero dependencies
- Canvas API - Hardware-accelerated matrix rain and hexagon animations
- Web Audio API - Terminal boot sound effects
- GitHub Actions - CI/CD pipeline with automated testing and deployment
- CodeQL - Advanced security analysis
- Lighthouse CI - Performance and accessibility audits
Modular Design:
- Separate CSS file for better caching and maintainability
- JavaScript split into 5 focused modules for code organization
- Resource hints (preload, preconnect, dns-prefetch) for optimal performance
- Deferred loading for non-critical scripts
- ✅ Chrome/Edge 90+
- ✅ Firefox 88+
- ✅ Safari 14+
- ✅ Mobile browsers (iOS Safari, Chrome Mobile)
This project is licensed under the MIT License.
See LICENSE for full details.
Copyright (c) 2025 InvokeHoneyBadger — HoneyBadger Vanguard (HBV)
Contributions are welcome! To contribute:
- Fork this repository
- Create a branch for your feature (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'Add amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
- Follow existing code style and structure
- Test changes locally before submitting
- Update documentation if adding new features
- Ensure all security headers remain intact
- Do not commit sensitive data (credentials, keys, etc.)
- Email: hi@invokehoneybadger.com
- Security: security@invokehoneybadger.com
- X/Twitter: @InvokHonyBadgr
- GitHub: @invokehoneybadger
Status: ✅ Active Development Last Updated: December 2025 Maintained By: InvokeHoneyBadger Team
✅ Privacy & Third-Party Removal
- Removed countapi.xyz visitor counter (privacy-first approach)
- Replaced with client-side status display
- No external tracking or API calls
✅ Enhanced SEO & Social Sharing
- Added JSON-LD structured data (Organization, WebSite, WebPage schemas)
- Enhanced Open Graph meta tags
- Twitter Card optimization
- Improved social media preview support
✅ Security Hardening
- Removed
'unsafe-inline'from script-src CSP directive - Moved all inline styles to external CSS
- Added Subresource Integrity (SRI) hashes for all external resources
- Updated security.txt with additional fields
✅ PWA Enhancements
- Updated manifest.json with better PWA configuration
- Theme color optimization
- Edge Side Panel support
- Ready for additional PWA icons (see ASSETS.md)
✅ Documentation
- Created comprehensive asset generation guide (ASSETS.md)
- Instructions for PWA icons (192x192, 512x512)
- Open Graph image specifications
- WebP conversion guidelines
✅ Code Organization
- Extracted CSS into external
styles.cssfile - Modularized JavaScript into 5 separate files
- Improved maintainability and browser caching
✅ Security & Quality
- Added CodeQL workflow for advanced security analysis
- Automated asset minification on deployment
- HTML5 compliant security headers configuration
- Comprehensive deployment documentation
✅ Performance
- Resource hints (DNS prefetch, preconnect, preload)
- Deferred loading for non-critical scripts
- Optimized script execution order
- Automated minification workflow
✅ Accessibility (WCAG AA)
- Skip-to-content link for keyboard navigation
- Enhanced ARIA labels and roles
- Focus indicators on all interactive elements
- Screen reader optimizations
✅ CI/CD Pipeline
- GitHub Actions deployment workflow
- Security scanning (Trivy, TruffleHog)
- HTML5 validation
- Lighthouse performance audits
- Automated dependency updates via Dependabot
"Inspired by live tradecraft. Hardened by real-world ops. Built in the shadows." — R.M.
Built with ☕ and BRRRRT.