Configuration Audit / Hardening

Windows configuration

HardeningKitty

LogoGitHub - scipag/HardeningKitty: HardeningKitty - Checks and hardens your Windows configurationGitHub

WINAudit

Output:

FBPro Audit Test Automation Package

LogoGitHub - fbprogmbh/Audit-Test-Automation: FBPro Audit Test Automation Package allows you to create compliance reports for your systems. The resulting HTML-reports provide a transparent overview of your devices' security configuration compared to international security standards and hardening guides.GitHub

  1. Powershell > Run as administrator

  2. Unblock-File -Path .\Audit-Test-Automation-5.10.1.zip -Verbose
  3. Expand-Archive -Path ".\Audit-Test-Automation-5.10.1.zip" -DestinationPath "AuditTAP"

  4. Launch setup.exe

  1. Run as administrator

AD - GPO - GPOZaurr

LogoGitHub - EvotecIT/GPOZaurr: Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.GitHub

Windows Hardening

LogoGitHub - HotCakeX/Harden-Windows-Security: Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.mdGitHub

AD Hardening

LogoGitHub - LoicVeirman/HardenAD: Hardening Active Directory version 2GitHub

Disabling NTLMv1

LogoActive Directory Hardening Series - Part 1 – Disabling NTLMv1 | Microsoft Community HubTECHCOMMUNITY.MICROSOFT.COM

Removing SMBv1

LogoActive Directory Hardening Series - Part 2 – Removing SMBv1 | Microsoft Community HubTECHCOMMUNITY.MICROSOFT.COM

Enforcing LDAP Signing

LogoActive Directory Hardening Series - Part 3 – Enforcing LDAP Signing | Microsoft Community HubTECHCOMMUNITY.MICROSOFT.COM

Enforcing AES for Kerberos

https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-4-%E2%80%93-enforcing-aes-for-kerberos/4114965techcommunity.microsoft.com

Protected Users

LogoGitHub - jakehildreth/PowerPUG: A tiny tool built to help AD Admins tame the Protected Users group.GitHub

Linux Configuration

Lynis

LogoGitHub - CISOfy/lynis: Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.GitHub

Nix-Auditor

RedHat, CentOS

LogoGitHub - XalfiE/Nix-Auditor: Nix Audit made easier (RHEL, CentOS) :fire: :fire:GitHub

YASAT

LogoGitHub - montjoie/yasat: YASAT (Yet Another Stupid Audit Tool) is a simple stupid audit tool.GitHub

Otseca

LogoGitHub - trimstray/otseca: Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.GitHub

Cloud Configuration

LogoGitHub - SecurityFTW/cs-suite: Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.GitHub

More Tools:

Tools

VPS

LogoGitHub - vernu/vps-audit: lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.GitHub

Azure

Azure

AWS

AWS
PreviousMobile PentestNextCode Analysis

Last updated