Awesome Open Source

Programming Languages

Search results for hardening

336 search results found

How To Secure A Linux Server ⭐ 16,556

An evolving how-to guide for securing a Linux server.

Lynis ⭐ 12,150

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Yubikey Guide ⭐ 10,680

Guide to using YubiKey for GnuPG and SSH

Prowler ⭐ 9,547

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

User.js ⭐ 8,666

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

The Practical Linux Hardening Guide ⭐ 8,217

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Awesome Security Hardening ⭐ 4,670

A collection of awesome security hardening guides, tools and other resources

Ansible Collection Hardening ⭐ 3,531

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

Bunkerweb ⭐ 3,410

🛡️ Make your web services secure by default !

Ssh Audit ⭐ 2,981

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Hardentools ⭐ 2,739

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

User.js ⭐ 2,678

user.js -- Firefox configuration hardening

Awesome Nodejs Security ⭐ 2,515

Awesome Node.js Security resources

Kubernetes Security Best Practice ⭐ 2,323

Kubernetes Security - Best Practice Guide

Content ⭐ 2,065

Security automation content in SCAP, Bash, Ansible, and other formats

Windows_hardening ⭐ 2,062

HardeningKitty and Windows Hardening settings and configurations

Awesome Windows Domain Hardening ⭐ 1,705

A curated list of awesome Security Hardening techniques for Windows.

Linux Kernel Defence Map ⭐ 1,644

Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies

Secure Ios App Dev ⭐ 1,338

Collection of the most common vulnerabilities found in iOS applications

Hardening ⭐ 1,252

Hardening Ubuntu. Systemd edition.

Mongoaudit ⭐ 1,154

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Windows 11 Guide ⭐ 1,120

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Hardened_malloc ⭐ 1,094

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability / integration over time.

Terraform Aws Secure Baseline ⭐ 1,078

Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services Foundations and AWS Foundational Security Best Practices.

Modern Memory Safety in C/C++

Sniffglue ⭐ 1,004

Secure multithreaded packet sniffer

Hardeningkitty ⭐ 990

HardeningKitty - Checks and hardens your Windows configuration

Windows11_hardening ⭐ 929

a collection about Windows 11

Windows Optimize Harden Debloat ⭐ 903

Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.

Graphenex ⭐ 882

Automated System Hardening Framework

Linux Hardening Checklist ⭐ 821

Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.

Spoilerwall ⭐ 754

Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!

Linux Baseline ⭐ 740

DevSec Linux Baseline - InSpec Profile

Ansible Ssh Hardening ⭐ 740

This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.

Snuffleupagus ⭐ 704

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Stronghold ⭐ 701

Easily configure macOS security settings from the terminal.

AWS Auditing & Hardening Tool

Osx Security Awesome ⭐ 687

A collection of OSX and iOS security resources

Jshielder ⭐ 677

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Ansible Hardening ⭐ 643

Ansible role for security hardening. Mirror of code maintained at opendev.org.

Vanadium ⭐ 642

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.

Debian Cis ⭐ 586

PCI-DSS compliant Debian 10/11/12 hardening

Hardening ⭐ 561

Repository of Hardening Guides

Suhosin ⭐ 466

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.

Ckss Certified Kubernetes Security Specialist ⭐ 463

This repository is a collection of resources to prepare for the Certified Kubernetes Security Specialist (CKSS) exam.

Rhel7 Cis ⭐ 463

Ansible role for Red Hat 7 CIS Baseline

Ansible Role Hardening ⭐ 462

Ansible role to apply a security baseline. Systemd edition.

Harden Runner ⭐ 447

Network egress filtering and runtime security for GitHub-hosted and self-hosted runners

Cis Docker Benchmark ⭐ 438

CIS Docker Benchmark - InSpec Profile

Aws Gate ⭐ 434

Better AWS SSM Session manager CLI client

Chef Os Hardening ⭐ 430

This chef cookbook provides numerous security-related configurations, providing all-round base protection.

Harbian Audit ⭐ 399

Hardened Debian GNU/Linux distro auditing

Linux Kernel Runtime Guard

A Fast and Safe Python based on PyPy

🦉🔎 A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

Hardenedbsd ⭐ 291

HardenedBSD development tree.

Rhel7 Stig ⭐ 279

Ansible role for Red Hat 7 STIG Baseline

h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply

Ssh Baseline ⭐ 270

DevSec SSH Baseline - InSpec Profile

Puppet Os Hardening ⭐ 267

This puppet module provides numerous security-related configurations, providing all-round base protection.

Sandworm Guard Js ⭐ 245

Easy auditing & sandboxing for your JavaScript dependencies 🪱

Graphql Cop ⭐ 229

Security Auditor Utility for GraphQL APIs

Apparmor.d ⭐ 213

Full set of AppArmor profiles (~ 1500 profiles)

Ubuntu1804 Cis ⭐ 211

Ubuntu CIS Hardening Ansible Role

Windows Baseline ⭐ 204

DevSec Windows Baseline - InSpec Profile

Cis Benchmarks Audit ⭐ 203

Simple command line tool to check for compliance against CIS Benchmarks

Cis Ubuntu 20.04 Ansible ⭐ 202

Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation

Android Mobile Device Hardening

K4YT3X's Hardened sysctl Configuration

Ansible Nginx Hardening ⭐ 179

This Ansible role provides secure nginx configurations.

Server Shield ⭐ 175

Server Shield is a lightweight method of protecting and hardening your Linux server. It is easy to install, hard to mess up, and makes your server instantly and effortlessly resistant to many basic and advanced attacks.

Automated Ad Setup ⭐ 168

A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.

Hardentheworld ⭐ 160

Harden the world is a community driven project to develop hardening guidelines and checklists for common software and devices.

Ansible Harden Windows ⭐ 158

Ansible role to harden windows system

Chef Ssh Hardening ⭐ 155

This chef cookbook provides secure ssh-client and ssh-server configurations.

From Scratch ⭐ 144

A hands-on walkthrough for creating an extremely insecure Kubernetes cluster and then hardening it, step by step.

Cis Dil Benchmark ⭐ 139

CIS Distribution Independent Linux Benchmark - InSpec Profile

The_hive ⭐ 137

My public notes about offensive security

Cis Ubuntu Ansible ⭐ 134

Audit and modify an Ubuntu system to satisfy CIS (Center for Internet Security) rules

Ansible Mysql Hardening ⭐ 133

This Ansible role provides security configuration for MySQL.

Certified Kubernetes Security Specialist ⭐ 132

References for CKS Exam Objectives - Certified Kubernetes Security Specialist

Windows Hardening Scripts ⭐ 131

Windows 10/11 hardening scripts

Dod Compliance And Automation ⭐ 128

Security hardening content for VMware solutions to US Department of Defense standards

Systemd Service Hardening ⭐ 127

Basic guide to harden systemd services

Certified Kubernetes Security Specialist ⭐ 126

Ansible Openvpn Hardened ⭐ 125

An Ansible playbook to create a hardened OpenVPN server instance

Web Service Hardening ⭐ 121

견고한 웹 서비스를 하기 위한 실용적인 보안 가이드

Hardened Centos7 Kickstart ⭐ 118

DVD embedded Kickstart for CentOS 7 utilizing SCAP Security Guide (SSG) as a hardening script.

Windows 2019 Cis ⭐ 114

CIS Baseline Ansible Role for Windows 2019

Suhosin7 ⭐ 113

Suhosin Extension for PHP 7.x

Thunderbird User.js ⭐ 111

Thunderbird privacy, security and anti-fingerprinting: a comprehensive user.js template for configuration and hardening

Ssg El7 Kickstart ⭐ 111

DVD embedded Kickstart for RHEL 7 utilizing SCAP Security Guide (SSG) as a hardening script.

Ubuntu2004_cis ⭐ 108

Ubuntu CIS Hardening Ansible Role

Standalone Windows Stig Script ⭐ 105

Create a compliant and secure Windows 10/11 system with our Gold Master image creation tool. Adhere to DoD STIG/SRG Requirements and NSA Cybersecurity guidance for standalone Windows systems with ease, using our ultimate STIG script.

Ansible Windows Hardening ⭐ 105

This Ansible role provides windows hardening configurations for the DevSec Windows baseline profile.

FIM is an Open Source Host-based file integrity monitoring tool that performs file system analysis, file integrity checking, real time alerting and provides Audit daemon data.

Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.

Nginx Baseline ⭐ 99

DevSec Nginx Baseline - InSpec Profile

Chef Windows Hardening ⭐ 95

This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.

Metabadger ⭐ 93

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

1-100 of 336 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.