linux-baseline

DevSec Linux Baseline This Compliance Profile ensures that all hardening projects keep the same quality. https://github.com/dev-sec/puppet-os-hardening https://github.com/dev-sec/chef-os-hardening https://github.com/dev-sec/ansible-os-hardening Standalone Usage This Compliance Profile requires...

ansible-collection-hardening

Ansible Collection - devsec.hardening...

puppet-os-hardening

Puppet OS hardening Table of Contents 1. Module Description - What the module does and why it is useful 2. Setup - The basics of getting started with oshardening Setup Requirements Beginning with oshardening 3. Usage - Configuration options and additional functionality Important for Puppet...

chef-os-hardening

os-hardening Chef cookbook 描述 本 cookbook 提供了众多与安全相关的配置，提供全面的基础保护。 它配置： 配置包管理，例如仅允许签名包 移除存在已知问题的包 配置 pam 和 pamlimits 模块 Shadow 密码套件配置 配置系统路径权限 通过软限制禁用核心转储 将 Root 登录限制在系统控制台 设置 SUID 通过 sysctl 配置内核参数 它不会： 更新系统包 安装安全补丁 要求 Chef = 14.13.11 平台 Ubuntu 20.04, 22.04, 24.04, 26.04 CentOS Stream 9, 10...

SHIELDS: Automating OS Hardening with Iterative Multi-Agent Remediation

Security misconfigurations remain a leading cause of OS-level compromise, and manually keeping systems compliant with standards like Defense Information Systems Agency DISA Security Technical Implementation Guides STIGs is a tedious and expensive process. Existing compliance automation tools can...

Streamlining OS and Application Hardening: Revealing Misconfigurations with Wiz’s Agentless Custom Host Configuration Rules

Shell commands that once had to be run manually now can be coded into a custom rule and run daily using Wiz agentless workload scanning...

How to harden AdwCleaner’s web backend using PHP

More and more applications are moving from desktop to the web, where they are particularly exposed to security risks. They are often tied to a database backend, and thus need to be properly secured, even though most of the time they are designed to restrict access to authenticated users only. PHP...

CitectSCADA ODBC service vulnerability

Advisory ID Internal CORE-2008-0125 Advisory Information Title: CitectSCADA ODBC service vulnerability Advisory ID: CORE-2008-0125 Advisory URL:https://www.coresecurity.com/core-labs/advisories/citect-scada-odbc-service-vulnerability Date published: 2008-06-11 Date of last update: 2008-06-10...