This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

🔒 Anti DDOS | Bash Script Project 🔒

AVML - Acquire Volatile Memory for Linux

Tracking CVEs for the linux Kernel

A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.

OpenSnitch is a GNU/Linux application firewall

Linux Security & Linux Hardening & Linux Management & Linux Configuration

A modern, Rust-powered Linux scanner that unmasks hidden rootkits, stealthy eBPF tricks, and ghost processes in one fast sweep (45+ scanners)

Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets. The project provides a simple and flexible way to implement geolocation filtering with nftables. It can be a useful tool to reduce the chance of malware, ransomware and phishing attempts as well as mitigating the effects of DDoS attacks.

See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)

Linux security with three different distributions (Rocky Linux, Ubuntu and openSUSE)!

This script automates the scanning process using the OpenSCAP Security Guid to hardening Ubuntu systems, aligning with DISA-STIG compliance for Ubuntu 24.04. LTS minimum. It includes a range of security enhancements and configurations designed to strengthen the security posture of Ubuntu servers.

Vulnerability management tool that provides Yocto SBOM generation and CVE Analysis of target images.

🧑‍💻 A comprehensive guide to Linux system administration, covering: 📜 Commands 👥 User Management 🌐 Networking 🔐 Permissions 📦 Package Management 💽 Disk Management 🛡️ Security 🤖 Automation ✅

Interactive Post Exploitation Tool

Kernel programming: This is a simple kernel module implementation for enforcing access control policies using Linux Security Module framework.

In this course, you will find a collection of Linux practice challenges that will help you to improve your Linux skills. These challenges are designed to help you learn and practice Linux commands, shell scripting, and system administration tasks.

Linux kernel module to fight against police terror