An evolving how-to guide for securing a Linux server.
Updated Apr 12, 2019
#
security-hardening
Repositories 168
Agent-less vulnerability scanner for Linux/FreeBSD/WordPress/Programming language libraries/Network devices
vuls
vulnerability-scanners
golang
go
linux
freebsd
vulnerability-detection
security
security-tools
cybersecurity
security-vulnerability
security-scanner
security-hardening
security-automation
security-audit
vulnerability-assessment
vulnerability-management
vulnerability-scanner
vulnerabilities
administrator
Go
Updated Apr 25, 2019
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27…
shell
linux
pci-dss
compliance
security-audit
security-hardening
security-scanner
security-vulnerability
hipaa
unix
vulnerability-detection
vulnerability-scanners
vulnerability-assessment
devops
devops-tools
system-hardening
hardening
auditing
gdpr
security-tools
Good first issues
Gather info on expired passwords and locked accounts
good first issue help wanted#474 opened over 1 year ago by sigio
3
Shell
Updated Apr 29, 2019
user.js -- Firefox configuration hardening
JavaScript
Updated May 3, 2019
AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of th…
security
security-tools
security-audit
security-hardening
cloudtrail
hardening
aws-cli
aws
cis-benchmark
prowler
assessment
aws-auditing
compliance
gdpr
hipaa
cis
forensics
cloud
well-architected
Good first issues
Shell
Updated Apr 30, 2019
Librefox: Firefox with privacy enhancements
privacy
security
anti-fingerprinting
security-hardening
mozilla-firefox
mozilla
firefox
addon
extensions-firewall
free-software
freedom
libre
libresoftware
libre-software
linux-app
mac-app
android-application
android-app
windows-app
browser
JavaScript
Updated Mar 30, 2019
checklist
rails-security
rails
rails-security-checklist
ruby-on-rails
security-audit
security-hardening
security
Ruby
Updated Aug 20, 2018
Sandboxed API automatically generates sandboxes for C/C++ libraries
C++
Updated May 3, 2019
Wazuh - Host and endpoint security
wazuh
ossec
security
loganalyzer
compliance
monitoring
intrusion-detection
policy-monitoring
elasticsearch
openscap
security-hardening
ids
pci-dss
file-integrity-management
security-awareness
log-analysis
vulnerability-detection
incident-response
C
Updated May 3, 2019
Security compliance content in SCAP, Bash, Ansible, and other formats
security
compliance
scap
xccdf
oval
cpe
cce
usgcb
pci-dss
ospp
stig
application-security
security-tools
security-hardening
security-automation
security-profile
hardening
information-security
cybersecurity
ansible
Good first issues
Developer Guide doesn't fully reflect the latest structural changes
documentation Text#3246 opened 8 months ago by jan-cerny
1
Python
Updated May 3, 2019
C to Rust translation, refactoring, and cross-checking
Rust
Updated May 3, 2019
Easily configure macOS security settings from the terminal.
Good first issues
Update for macOS Mojave
good first issue Hacktoberfest#56 opened 6 months ago by alichtman
Python
Updated Jan 29, 2019
Simple Golang HTTPS/TLS Examples
http2
https-server
https
httpclient
golang
go
openssl
libressl
awesome
tools
security-hardening
security-tools
security-audit
security-scanner
secure
security
Updated Apr 30, 2019
Scripts built from our Guide to User Data Security
Shell
Updated Oct 21, 2018
USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are aut…
Good first issues
Use shared library versioning
difficulty:easy C:libusbguard#17 opened about 4 years ago by dkopecek
C++
Updated Apr 9, 2019
JavaScript
Updated Dec 10, 2018
Hardening Ubuntu. Systemd edition.
Shell
Updated May 3, 2019
Ansible playbook roles for security
Updated Sep 7, 2018
Quickly secure UNIX/Linux systems
Shell
Updated Aug 5, 2015
Security Knowledge Framework (SKF) Python Flask / Angular project
owasp-skf
secure-by-default
security
security-audit
security-hardening
secure-coding
security-training
security-framework
security-knowledge
security-standards
security-requirements
HTML
Updated Apr 30, 2019
Ansible role for Red Hat 7 CIS Baseline
Good first issues
Makefile
Updated Apr 19, 2019
Look-Ahead Java Deserialization Library
Java
Updated Apr 4, 2018
Wazuh - Ruleset
wazuh
ossec
security
loganalyzer
compliance
monitoring
intrusion-detection
policy-monitoring
elasticsearch
openscap
security-hardening
ids
pci-dss
file-integrity-management
security-awareness
log-analysis
vulnerability-detection
incident-response
Python
Updated May 3, 2019
Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer
linux
cis-benchmark
linux-server
hardening
ubuntu-server
centos7
lamp-stack
hardening-steps
iptables
ubuntu1604
ubuntu1804
security-hardening
system-hardening
PHP
Updated Mar 11, 2019
Ansible role for Red Hat 7 STIG Baseline
Python
Updated May 2, 2019
Function order shuffling to defend against ROP and other types of code reuse
C++
Updated Apr 24, 2019
Terraform module to set up your AWS account with the secure baseline configuration based on CIS Amazon Web Services F…
terraform
aws
security
security-hardening
terraform-modules
hardening
cis-benchmark
aws-auditing
security-tools
devops
HCL
Updated May 2, 2019
Ansible role for Red Hat 6 DISA STIG
Shell
Updated Dec 26, 2018
Wazuh - Kibana plugin
wazuh
kibana
ossec
elasticsearch
security
loganalyzer
compliance
monitoring
intrusion-detection
policy-monitoring
openscap
security-hardening
ids
pci-dss
file-integrity-management
security-awareness
log-analysis
vulnerability-detection
incident-response
gdpr
JavaScript
Updated May 3, 2019
Wazuh - Docker containers
wazuh
docker
ossec
security
loganalyzer
compliance
monitoring
intrusion-detection
policy-monitoring
elasticsearch
openscap
security-hardening
log-analysis
ids
pci-dss
file-integrity-management
security-awareness
vulnerability-detection
incident-response
Shell
Updated May 3, 2019