The Wayback Machine - https://web.archive.org/web/20201126141002/https://github.com/topics/security-hardening

#

security-hardening

Here are 235 public repositories matching this topic...

imthenachoman / How-To-Secure-A-Linux-Server

Star

An evolving how-to guide for securing a Linux server.

linux security server hardening security-hardening linux-server cc-by-sa hardening-steps

Updated Jan 21, 2020

future-architect / vuls

Star

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner

Updated Nov 26, 2020
Go

CISOfy / lynis

Star

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening

Updated Nov 23, 2020
Shell

toniblyx / prowler

Star

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

aws security cis security-audit cloud aws-cli assessment forensics compliance hardening security-hardening hipaa cloudtrail gdpr security-tools cis-benchmark aws-auditing prowler well-architected

Updated Nov 23, 2020
Shell

pyllyukko / user.js

Star

user.js -- Firefox configuration hardening

firefox security privacy mozilla security-hardening mozilla-firefox

Updated Nov 4, 2020
JavaScript

wazuh / wazuh

Star

Wazuh - The Open Source Security Platform

security elasticsearch log-analysis monitoring incident-response ids intrusion-detection pci-dss compliance security-hardening loganalyzer vulnerability-detection ossec openscap wazuh policy-monitoring security-awareness file-integrity-management

Updated Nov 26, 2020
C

immunant / c2rust

Star

Migrate C code to Rust

rust translation migration transpiler memory-safety security-hardening cross-checking

Updated Nov 11, 2020
Rust

intika / Librefox

Star

Librefox: Firefox with privacy enhancements

Updated Sep 29, 2019
JavaScript

eliotsykes / rails-security-checklist

Star

🔑 Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)

rails checklist security security-audit ruby-on-rails security-hardening rails-security rails-security-checklist

Updated Jul 26, 2020
Ruby

sandboxed-api

google / sandboxed-api

Star

Generates sandboxes for C/C++ libraries automatically

security cplusplus sandbox sandboxing security-hardening sapi apache-license-2 cplusplus-17

Updated Nov 25, 2020
C++

ComplianceAsCode / content

Star

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

Updated Nov 26, 2020
Python

denji / golang-tls

Star

Simple Golang HTTPS/TLS Examples

go golang security security-audit awesome tools openssl https http2 secure httpclient libressl security-hardening https-server security-scanner security-tools

Updated Nov 20, 2020

alichtman / stronghold

Star

Open

Update for macOS Mojave

2

alichtman commented Oct 24, 2018

https://github.com/0xmachos/mOSL is a good replacement until this is updated.

Basically, we should remove all settings that are no longer relevant, and add ones that are newly added.

Read more

Hacktoberfest enhancement good first issue help wanted

USBGuard / usbguard

Star

USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)

linux security c-plus-plus whitelist blacklist usb security-hardening usb-devices rule-language hacktoberfest

Updated Nov 23, 2020
C++

konstruktoid / hardening

Sponsor Star

Hardening Ubuntu. Systemd edition.

shell security ubuntu systemd hardening ubuntu-server security-hardening information-security security-automation security-tools security-compliance

Updated Nov 19, 2020
Shell

decalage2 / awesome-security-hardening

Star

A collection of awesome security hardening guides, tools and other resources

security best-practices cybersecurity infosec awesome-list security-hardening cyber-security computer-security blueteam security-tools blue-team linux-hardening cis-benchmarks windows-hardening

Updated Nov 23, 2020

blabla1337 / skf-flask

Star

Security Knowledge Framework (SKF) Python Flask / Angular project

security security-audit secure-by-default security-hardening security-training secure-coding security-framework security-standards owasp-skf security-knowledge security-requirements

Updated Nov 17, 2020
HTML

nozaq / terraform-aws-secure-baseline

Star

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

aws security devops terraform hardening security-hardening terraform-modules security-tools cis-benchmark aws-auditing

Updated Nov 23, 2020
HCL

Jsitech / JShielder

Star

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

linux iptables centos7 ubuntu1604 hardening ubuntu-server security-hardening modsecurity linux-server lamp-stack system-hardening cis-benchmark ubuntu1804 hardening-steps lamp-deployer lemp-deployer

Updated Sep 21, 2020
PHP

FusionAuth / security-scripts

Star

Scripts built from our Guide to User Data Security

security security-hardening chef-recipes fusionauth

Updated Oct 21, 2018
Shell

ansible / ansible-lockdown

Star

Ansible playbook roles for security

ansible cis disa security-hardening stig security-automation

Updated Sep 7, 2018

jvoisin / snuffleupagus

Star

Open

Add stacktrace in the logging

jvoisin commented Oct 1, 2019

It would be great to be able to get a complete stacktrace along with the request dump when a rule is triggered.

Read more

enhancement good first issue usability

Open

Invalid line reporting when wrong configuration file is used

3

Open

Provide a way to test the configuration

1

Find more good first issues →

cagataycali / xss-listener

Star

🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.

xss security-hardening xss-attacks security-tools xss-harvest xss-harvester

Updated Jul 18, 2020
JavaScript

marshyski / quick-secure

Star

Quickly secure UNIX/Linux systems

linux docker security security-hardening docker-security

Updated Mar 9, 2020
Shell

google / go-safeweb

Star

Secure-by-default HTTP servers in Go.

golang http security http-server security-hardening

Updated Nov 24, 2020
Go

ansible-lockdown / RHEL7-CIS

Star

Ansible role for Red Hat 7 CIS Baseline

security cis ansible-role rhel7 security-hardening

Updated Nov 18, 2020
Python

wazuh / wazuh-ruleset

Star

Wazuh - Ruleset

security elasticsearch log-analysis monitoring incident-response ids intrusion-detection pci-dss compliance security-hardening loganalyzer vulnerability-detection ossec openscap wazuh policy-monitoring security-awareness file-integrity-management

Updated Nov 26, 2020
Python

ikkisoft / SerialKiller

Star

Look-Ahead Java Deserialization Library

java security deserialization security-hardening

Updated Jan 7, 2020
Java

appvia / krane

Star

Kubernetes RBAC static Analysis & visualisation tool

kubernetes security analysis static-analysis visualisation rbac k8s role-based-access-control security-hardening security-scanner security-tools rbac-management rbac-configuration redisgraph rbac-roles

Updated Nov 26, 2020
Ruby

ansible-lockdown / RHEL7-STIG

Star

Open

allow custom NTP servers

jamescassell commented Jan 28, 2020

currently, we hard-code the default RHEL NTP servers.

Read more

good first issue

Open

remove jmespath dependency

1

Open

"don't be a syslog server" is disruptive RHEL-07-031010

Find more good first issues →

Improve this page

Add a description, image, and links to the security-hardening topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the security-hardening topic, visit your repo's landing page and select "manage topics."

You can’t perform that action at this time.