Skip to content
#

security-hardening

Star

Here are 266 public repositories matching this topic...

Language: All
Filter by language
All 266 Shell 43 Python 37 PHP 16 JavaScript 14 HTML 12 C 11 PowerShell 9 Go 8 YAML 8 Jinja 6
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

CISOfy / lynis

Star 9.3k

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening
  • Updated Jan 25, 2022
  • Shell

future-architect / vuls

Star 8.9k

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner
  • Updated Jan 24, 2022
  • Go
prowler

prowler-cloud / prowler

Star 4.8k

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, ISO27001, GDPR, HIPAA, SOC2, ENS and other security frameworks.

aws security cis security-audit cloud aws-cli assessment forensics compliance hardening security-hardening hipaa cloudtrail hacktoberfest gdpr security-tools devsecops cis-benchmark aws-auditing well-architected
  • Updated Jan 24, 2022
  • Shell

ComplianceAsCode / content

Star 1.5k
Find more good first issues

jvoisin / snuffleupagus

Star 551
Open

Add a `notowner_exec` statement to prevent the execution of owned PHP files

1
WhiteWinterWolf
WhiteWinterWolf commented May 1, 2021

I'm not confident in the security brought by the readonly_exec statement.

In the classical *nix DAC model, it is expected for unprivileged users to be able to change the write permission flag on files they own. Therefore, Snuffleupagus readonly_exec statement only relies on the hope that an attacker won't find a way to rely on this standard mechanism to prevent the execution of arbitrary

Read more
enhancement question good first issue feature
Find more good first issues

google / go-safeweb

Star 457
Open

Muxes are not composable

2
empijei
empijei commented Nov 22, 2021

A nice feature of http.Mux is that it can be used as a handler, so users can set up separate parts of an application on separate muxes that share a common configuration (e.g. a set of interceptors) and then install them on the root mux.

This is currently not possible with GSW, and we should seriously consider doing it.

Read more
enhancement good first issue core v0.2
Find more good first issues
ElectricEye

jonrau1 / ElectricEye

Star 364

Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.

aws security-audit automation monitoring terraform audit security-hardening aws-security risk-management monitoring-tool security-tools soar security-engineering cloud-security cloud-auditing security-monitoring well-architected cloud-compliance-reporting security-hub continuous-compliance
  • Updated Dec 13, 2021
  • Python

Improve this page

Add a description, image, and links to the security-hardening topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the security-hardening topic, visit your repo's landing page and select "manage topics."

Learn more