Awesome Hardening

A collection of scripts, configurations, and tools for hardening various systems and applications.

Windows Hardening

• Windows Optimize Harden Debloat - Script for optimizing and hardening Windows systems.
• Windows Optimize Harden Debloat GUI - GUI version of Windows Optimize Harden Debloat script.
• Windows Defender Hardening - Script for hardening Windows Defender.
• Windows Defender Application Control Hardening - Script for hardening Windows Defender Application Control.
• Windows Terminal Hardening - Script for hardening Windows Terminal.
• Applocker Hardening - Script for hardening Applocker.
• Windows Hardening CTF - Basic hardening designed not to break anything so it can be deployed in any environment. Focused at CTF event boxes.
• Windows Defender Application Guard Hardening - Script for hardening Windows Defender Application Guard.
• Windows STIG Ansible Playbooks - Ansible playbooks for STIG-compliant Windows systems.
• Windows Defender STIG Script - Script for STIG-compliant Windows Defender.
• Standalone Windows Server STIG Script - Standalone script for STIG-compliant Windows Server.
• Standalone Windows STIG Script - Standalone script for STIG-compliant Windows systems.
• STIG Compliant Domain Prep- Script to import STIG compliant GPOs into a domain controller for use in a windows domain environment.
• HotCakeX/Harden-Windows-Security - Harden Windows Safely, Securely, with Official Microsoft Methods

Linux Hardening

• ansible-collection-hardening - This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
• Hardening - Bash Scripts and Ansible Playbooks. Works on Debian and RHEL Based Distros
• Ansbile Collection Dev-Sec.io - Dev-Sec.Io Ansible Collection Hardening (includes SSH and OS hardening)

VMWare Hardening

• vmware-stig-powercli - PowerCLI Check and Remediation scripts for VMware

Web Server Hardening

• Apache Web Server Hardening - Scripts and documentation for hardening Apache Web Server.
• Dev-Sec.io Hardening Nginx using Ansible - This role provides secure nginx configuration

Application Hardening

• .NET STIG Script - Script for STIG-compliant .NET applications.
• Adobe Reader DC STIG Script - Script for STIG-compliant Adobe Reader DC.
• Oracle JRE 8 STIG Script - Script for STIG-compliant Oracle JRE 8.
• FireFox STIG Script - Script for STIG-compliant FireFox.

Contributing

We welcome contributions to this repository! If you have a bugfix, improvement, or new feature, feel free to submit a pull request.

 

Links:

• github.com/simeononsecurity

• simeononsecurity.ch

Learn more about Hardening Automations and Scripts