A collection of awesome security hardening guides, tools and other resources
Go to file
Philippe Lagadec 791b399c60
added IIS
2019-05-07 12:00:42 +02:00
README.md added IIS 2019-05-07 12:00:42 +02:00

awesome-security-hardening

Awesome

A collection of awesome security hardening guides, best practices, tools and other resources. This is work in progress: please contribute by forking, editing and sending pull requests. You may also send suggestions on Twitter to @decalage2, or use https://www.decalage.info/contact


Security Hardening Guides and Best Practices

Hardening Guide Collections

GNU/Linux

Red Hat Enterprise Linux - RHEL

SUSE

Ubuntu

Windows

macOS

Network Devices

Switches

Routers

Virtualization - VMware

Services

SSH

TLS/SSL

Web Servers

Apache HTTP Server

Apache Tomcat

Eclipse Jetty

Microsoft IIS

Mail Servers

FTP Servers

Database Servers

LDAP

DNS

NTP

CUPS

Authentication - Passwords

Hardware - BIOS - UEFI

Cloud

Tools

Tools to check security hardening

GNU/Linux

Network Devices

  • Nipper-ng - to check the configuration of network devices (does not seem to be updated)

TLS/SSL

Tools to apply security hardening

GNU/Linux

Windows

  • Hardentools - for Windows individual users (not corporate environments) at risk, who might want an extra level of security at the price of some usability.

Books