Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.
An evolving how-to guide for securing a Linux server.
-
Updated
Mar 20, 2022
#
hardening
Here are 318 public repositories matching this topic...
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
linux
shell
auditing
devops
unix
security-audit
pci-dss
compliance
hardening
security-vulnerability
security-hardening
devops-tools
hipaa
vulnerability-detection
vulnerability-scanners
security-scanner
vulnerability-assessment
gdpr
security-tools
system-hardening
-
Updated
Jun 20, 2022 - Shell
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
linux
checklist
security
cis
guide
centos
audit
manual
pci-dss
hardening
openscap
linux-security
linux-hardening
redhat-enterprise-linux
-
Updated
Apr 5, 2020
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.
aws
security
cis
security-audit
cloud
aws-cli
assessment
forensics
compliance
hardening
security-hardening
hipaa
cloudtrail
hacktoberfest
gdpr
security-tools
devsecops
cis-benchmark
aws-auditing
well-architected
-
Updated
Jul 8, 2022 - Shell
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
linux
nginx
ansible
protection
collection
playbook
role
devsec
hardening
hacktoberfest
sysctl
ansible-collection
os-hardening
mysql-hardening
ssh-hardening
nginx-hardening
-
Updated
Jul 9, 2022 - Jinja
letsencrypt
docker
nginx
kubernetes
security
devops
hosting
reverse-proxy
clamav
cybersecurity
swarm
web-security
hardening
modsecurity
dnsbl
devsecops
antibot
crowdsec
bunkerized-nginx
security-tuning
-
Updated
Jul 8, 2022 - Python
good first issue
Good candidates to get started contributing to CaC.
-
Updated
Dec 2, 2020 - Python
Windows Hardening settings and configurations
windows
checklist
security
registry
powershell
audit
windows-10
hardening
defense
blueteam
windows-hardening
policy-analyzer
-
Updated
Jun 30, 2022 - PowerShell
freeqaz
commented
Apr 20, 2022
good first issue
Good for newcomers
2
alichtman
commented
Oct 24, 2018
https://github.com/0xmachos/mOSL is a good replacement until this is updated.
Basically, we should remove all settings that are no longer relevant, and add ones that are newly added.
enhancement
New feature or request
help wanted
Extra attention is needed
good first issue
Good for newcomers
Hacktoberfest
Hardening Ubuntu. Systemd edition.
shell
security
ubuntu
systemd
hardening
ubuntu-server
security-hardening
information-security
security-automation
security-tools
security-compliance
-
Updated
Jul 7, 2022 - Shell
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.
aws
security
devops
terraform
hardening
security-hardening
terraform-modules
security-tools
cis-benchmark
aws-auditing
terraform-module
-
Updated
Jun 17, 2022 - HCL
This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.
-
Updated
Nov 16, 2020 - HTML
Automated System Hardening Framework
-
Updated
Oct 24, 2020 - Python
Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.
security
memory
memory-allocator
malloc
hardening
memory-allocation
quarantine
malloc-library
slab-allocator
grapheneos
-
Updated
Jul 8, 2022 - C
AWS Auditing & Hardening Tool
-
Updated
Feb 4, 2020 - Shell
laluka
commented
Jul 1, 2022
Similar to jvoisin/snuffleupagus#426 but explained in a (I hope) clearer way.. :)
So, here's the thing, eval and system don't have the same behavior, which makes it hard to rely on for audit/fuzz purpose.
For system, the simulation works great, by logging only the function name (call 1) or a detailed version with a wildcard on param_r :
 exam.
kubernetes
golang
security
monitoring
cluster
logging
cncf
cloud-native
hardening
vulnerabilities
certification
cks
ckss
cks-exam
cluster-hardening
kubernetes-platforms
securing-kubernetes
-
Updated
Aug 31, 2021 - HTML
CIS Docker Benchmark - InSpec Profile
-
Updated
Mar 18, 2022 - Ruby
xen0l
commented
Apr 6, 2021
Every now and then happens that the instance fails to boot up and it would be good to have a way how to debug it, AWS just provided it. aws-gate should have support for this.
More https://aws.amazon.com/about-aws/whats-new/2021/03/introducing-ec2-serial-console/
Open
Type annotations
1
HardenedBSD development tree.
-
Updated
Jul 8, 2022 - C
Improve this page
Add a description, image, and links to the hardening topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the hardening topic, visit your repo's landing page and select "manage topics."
Extend macro function that creates OCIL entries for package removed rules to support both package removed/installed rules using an extra parameter to define the behavior of the
ocil_clause(the ocil clause "package is installed" for removed package rules and "package is not installed" for installed package rules)https://github.com/ComplianceAsCode/content/blob/fe68fcd788b85eed7559e6174d71a67