The Wayback Machine - https://web.archive.org/web/20220414163809/https://github.com/topics/security-hardening

#

security-hardening

Here are 270 public repositories matching this topic...

imthenachoman / How-To-Secure-A-Linux-Server

An evolving how-to guide for securing a Linux server.

linux security server hardening security-hardening linux-server cc-by-sa hardening-steps

Updated Mar 20, 2022

CISOfy / lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening

Updated Apr 13, 2022
Shell

future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner

Updated Apr 11, 2022
Go

prowler

prowler-cloud / prowler

Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

aws security cis security-audit cloud aws-cli assessment forensics compliance hardening security-hardening hipaa cloudtrail hacktoberfest gdpr security-tools devsecops cis-benchmark aws-auditing well-architected

Updated Apr 13, 2022
Shell

wazuh / wazuh

Wazuh - The Open Source Security Platform

security elasticsearch log-analysis monitoring incident-response ids intrusion-detection pci-dss compliance security-hardening loganalyzer vulnerability-detection ossec openscap wazuh policy-monitoring security-awareness file-integrity-management

Updated Apr 14, 2022
C

pyllyukko / user.js

user.js -- Firefox configuration hardening

firefox security privacy mozilla security-hardening mozilla-firefox

Updated Mar 28, 2022
JavaScript

immunant / c2rust

Migrate C code to Rust

rust translation migration transpiler memory-safety security-hardening cross-checking

Updated Apr 13, 2022
Rust

decalage2 / awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

security best-practices cybersecurity infosec awesome-list security-hardening cyber-security computer-security blueteam security-tools blue-team linux-hardening cis-benchmarks windows-hardening

Updated Jan 22, 2022

intika / Librefox

Librefox: Firefox with privacy enhancements

firefox security privacy browser addon freedom mozilla android-application free-software libre mac-app android-app security-hardening linux-app mozilla-firefox windows-app anti-fingerprinting libresoftware libre-software extensions-firewall

Updated Mar 28, 2021
JavaScript

ComplianceAsCode / content

Security automation content in SCAP, Bash, Ansible, and other formats

security ansible cybersecurity pci-dss application-security compliance scap hardening security-hardening xccdf oval cpe information-security cce usgcb ospp stig security-automation security-tools security-profile

Updated Apr 14, 2022
Shell

sandboxed-api

google / sandboxed-api

Generates sandboxes for C/C++ libraries automatically

security cplusplus sandbox sandboxing security-hardening sapi apache-license-2 cplusplus-17

Updated Apr 13, 2022
C++

eliotsykes / rails-security-checklist

🔑 Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)

rails checklist security security-audit ruby-on-rails security-hardening rails-security rails-security-checklist

Updated Jul 26, 2020
Ruby

denji / golang-tls

Simple Golang HTTPS/TLS Examples

go golang security security-audit awesome tools openssl https http2 secure httpclient libressl security-hardening https-server security-scanner security-tools

Updated Nov 20, 2020

alichtman / stronghold

Open

Update for macOS Mojave

2

alichtman commented Oct 24, 2018

https://github.com/0xmachos/mOSL is a good replacement until this is updated.

Basically, we should remove all settings that are no longer relevant, and add ones that are newly added.

Read more

enhancement help wanted good first issue Hacktoberfest

konstruktoid / hardening

Sponsor

Hardening Ubuntu. Systemd edition.

shell security ubuntu systemd hardening ubuntu-server security-hardening information-security security-automation security-tools security-compliance

Updated Apr 7, 2022
Shell

nozaq / terraform-aws-secure-baseline

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

aws security devops terraform hardening security-hardening terraform-modules security-tools cis-benchmark aws-auditing terraform-module

Updated Apr 10, 2022
HCL

undergroundwires / privacy.sexy

Sponsor

Open-source tool to enforce privacy & security best-practices on Windows and macOS, because privacy is sexy 🍑

🍆

macos vuejs privacy domain-driven-design macosx cleanup windows10 bloatware security-hardening tweaks-collection security-tools privacy-protection debloat privacy-tools debotnet spybot debloater bloatware-removal

Updated Mar 26, 2022
TypeScript

USBGuard / usbguard

USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)

linux security c-plus-plus whitelist blacklist usb security-hardening usb-devices rule-language hacktoberfest

Updated Apr 13, 2022
C++

blabla1337 / skf-flask

Security Knowledge Framework (SKF) Python Flask / Angular project

security security-audit secure-by-default security-hardening security-training secure-coding security-framework security-standards owasp-skf security-knowledge security-requirements

Updated Apr 13, 2022
HTML

jvoisin / snuffleupagus

Open

Add a `notowner_exec` statement to prevent the execution of owned PHP files

1

WhiteWinterWolf commented May 1, 2021

I'm not confident in the security brought by the readonly_exec statement.

In the classical *nix DAC model, it is expected for unprivileged users to be able to change the write permission flag on files they own. Therefore, Snuffleupagus readonly_exec statement only relies on the hope that an attacker won't find a way to rely on this standard mechanism to prevent the execution of arbitrary

Read more

enhancement question good first issue feature

Open

Invalid line reporting when wrong configuration file is used

3

Open

Provide a way to test the configuration

1

Find more good first issues

Jsitech / JShielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

linux iptables centos7 ubuntu1604 hardening ubuntu-server security-hardening modsecurity linux-server lamp-stack system-hardening cis-benchmark ubuntu1804 hardening-steps lamp-deployer lemp-deployer

Updated Sep 21, 2020
PHP

ElectricEye

jonrau1 / ElectricEye

Continuously monitor your AWS attack surface and evaluate services for configurations that can lead to degradation of confidentiality, integrity or availability. All results can be exported to Security Hub, JSON, CSV, Databases, and more for further aggregation and analysis.

security-audit compliance security-hardening aws-security monitoring-tool security-tools devsecops soar security-engineering cloud-security aws-audit cloud-auditing security-monitoring well-architected cloud-compliance-reporting security-hub aws-compliance continuous-compliance attack-surface-management

Updated Apr 5, 2022
Python

google / go-safeweb

Open

Muxes are not composable

2

empijei commented Nov 22, 2021

A nice feature of http.Mux is that it can be used as a handler, so users can set up separate parts of an application on separate muxes that share a common configuration (e.g. a set of interceptors) and then install them on the root mux.

This is currently not possible with GSW, and we should seriously consider doing it.

Read more

enhancement good first issue core v0.2

Open

Update the Security Vulnerabilities and Mitigations section to link to the specific GoDoc sections that provide the features

Open

Support streaming responses

Find more good first issues

ansible / ansible-lockdown

Ansible playbook roles for security

ansible cis disa security-hardening stig security-automation

Updated Sep 7, 2018

FusionAuth / security-scripts

Scripts built from our Guide to User Data Security

security security-hardening chef-recipes fusionauth

Updated Oct 21, 2018
Shell

appvia / krane

Kubernetes RBAC static analysis & visualisation tool

kubernetes security analysis static-analysis visualisation rbac k8s role-based-access-control security-hardening security-scanner security-tools rbac-management rbac-configuration redisgraph rbac-roles

Updated Apr 8, 2022
Ruby

cagataycali / xss-listener

🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.

xss security-hardening xss-attacks security-tools xss-harvest xss-harvester

Updated Mar 28, 2022
JavaScript

ansible-lockdown / RHEL7-CIS

Ansible role for Red Hat 7 CIS Baseline

security cis ansible-role rhel7 hardening security-hardening redhat7 compliance-as-code compliance-automation redhat-ansible

Updated Mar 1, 2022
YAML

marshyski / quick-secure

Quickly secure UNIX/Linux systems

linux docker security security-hardening docker-security

Updated Mar 9, 2020
Shell

wazuh / wazuh-ruleset

Wazuh - Ruleset

security elasticsearch log-analysis monitoring incident-response ids intrusion-detection pci-dss compliance security-hardening loganalyzer vulnerability-detection ossec openscap wazuh policy-monitoring security-awareness file-integrity-management

Updated Sep 30, 2021
Python

Improve this page

Add a description, image, and links to the security-hardening topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the security-hardening topic, visit your repo's landing page and select "manage topics."