This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
-
Updated
Apr 5, 2020
{{ message }}
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
linuxprivchecker.py -- a Linux Privilege Escalation Check Script
AVML - Acquire Volatile Memory for Linux
Tracking CVEs for the linux Kernel
See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
Interactive Post Exploitation Tool
Linux Security & Linux Hardening & Linux Management & Linux Configuration
Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module framework.
Vulnerability management tool that provides Yocto CVE Analysis of target images.
Checks for search order privilege escalation vectors in system shared objects and executables in $PATH
Lazily wraps various Linux system auditing tools
Ask for passwords on different tty to combat X11 keyloggers
A Homebrew
Linux File Integrity Checker
Linux Auditing System logs pretty printer
Preventing unauthorized invocation of open system call in Linux by running processes in sand-boxed environments using capability based authorization implemented in user space.
Easy way to automate the complex task
User-based intrusion detection system for the Linux kernel
Random security-related scripts for Linux systems
Proxy extension, installing security-related extensions.
A Cybersecurity tool to detect port scans on a host machine.
Project Safeguard is a custom built Linux distribution based on Xubuntu. Project Safeguard is focused around private and fast computing and is designed to work in a virtual machine or on baremetal. This project was also designed to work seamlessly with Project Guardian for extra protection.
Add a description, image, and links to the linux-security topic page so that developers can more easily learn about it.
To associate your repository with the linux-security topic, visit your repo's landing page and select "manage topics."
grpcio-toolsshould be a setup dependency, not a runtime dependency. In turngrpcioandprotobufshould be runtime dependencies.