@echo off

title= Windwos/index.html' target='_blank'>Windows Security

echo.

echo *******************************************************************************

echo.              Common Security Configuration For Windows Server 2003

echo *******************************************************************************

echo.

echo.

rem 删除不必要的文件

del /Q /F C:\WINDOWS\Web\printers\*.*

del /Q /F C:\WINDOWS\system32\inetsrv\iisadmpwd\*.*

rd C:\WINDOWS\Web\printers\ /S /Q

rd C:\WINDOWS\help\iishelp\ /S /Q

rem 设置脚本宿主

cscript //h:cscript

rem 安装windows install服务

msiexec /regserver

regsvr32 msxml3.dll /s

rem 设置每个磁盘分区的权限

cd\

echo y | cacls C: /C /E /G administrators:F system:F

rem cacls /C D: /G administrators:F system:F

rem cacls /C E: /G administrators:F system:F

rem 设置关键目录的权限

echo y | cacls %SYSTEMROOT% /G administrators:F system:F users:C

echo y | cacls %SYSTEMROOT%\Temp /G administrators:F system:F everyone:F

rem 清除关键目录everyone权限

echo y | cacls C:\Docume~1 /E /R everyone

echo y | cacls C:\Docume~1\alluse~1 /E /R everyone

echo y | cacls C:\Docume~1\alluse~1\applic~1 /E /R everyone

echo y | cacls C:\Docume~1\defaul~1 /E /R everyone

echo y | cacls %SYSTEMROOT%\Installer /E /R everyone

echo y | cacls %SYSTEMROOT%\PCHealth /E /R everyone

for %%i in (

%SYSTEMROOT%\regedit.exe

%SYSTEMROOT%\system32\net.exe

%SYSTEMROOT%\system32\telnet.exe

%SYSTEMROOT%\system32\cmd.exe

%SYSTEMROOT%\system32\tftp.exe

%SYSTEMROOT%\system32\netstat.exe

%SYSTEMROOT%\system32\attrib.exe

%SYSTEMROOT%\system32\cacls.exe

%SYSTEMROOT%\system32\format.com

%SYSTEMROOT%\system32\regsvr32.exe

%SYSTEMROOT%\system32\xcopy.exe

%SYSTEMROOT%\system32\wscript.exe

%SYSTEMROOT%\system32\cscript.exe

%SYSTEMROOT%\system32\ftp.exe

%SYSTEMROOT%\system32\arp.exe

%SYSTEMROOT%\system32\edlin.exe

%SYSTEMROOT%\system32\ping.exe

%SYSTEMROOT%\system32\route.exe

%SYSTEMROOT%\system32\finger.exe

%SYSTEMROOT%\system32\posix.exe

%SYSTEMROOT%\system32\atsvc.exe

%SYSTEMROOT%\system32\qbasic.exe

%SYSTEMROOT%\system32\runonce.exe

%SYSTEMROOT%\system32\syskey.exe

%SYSTEMROOT%\system32\command.com

%SYSTEMROOT%\system32\edit.com

%SYSTEMROOT%\system32\tree.com

%SYSTEMROOT%\system32\at.exe

%SYSTEMROOT%\system32\find.exe

%SYSTEMROOT%\system32\fc.exe

%SYSTEMROOT%\system32\nbtstat.exe

%SYSTEMROOT%\system32\netsh.exe

%SYSTEMROOT%\system32\notepad.exe

%SYSTEMROOT%\system32\tasklist.exe

%SYSTEMROOT%\system32\taskkill.exe

%SYSTEMROOT%\system32\dllcache\regedit.exe

%SYSTEMROOT%\system32\dllcache\net.exe

%SYSTEMROOT%\system32\dllcache\telnet.exe

%SYSTEMROOT%\system32\dllcache\cmd.exe

%SYSTEMROOT%\system32\dllcache\tftp.exe

%SYSTEMROOT%\system32\dllcache\netstat.exe

%SYSTEMROOT%\system32\dllcache\attrib.exe

%SYSTEMROOT%\system32\dllcache\cacls.exe

%SYSTEMROOT%\system32\dllcache\format.com

%SYSTEMROOT%\system32\dllcache\regsvr32.exe

%SYSTEMROOT%\system32\dllcache\xcopy.exe

%SYSTEMROOT%\system32\dllcache\wscript.exe

%SYSTEMROOT%\system32\dllcache\cscript.exe

%SYSTEMROOT%\system32\dllcache\ftp.exe

%SYSTEMROOT%\system32\dllcache\arp.exe

%SYSTEMROOT%\system32\dllcache\edlin.exe

%SYSTEMROOT%\system32\dllcache\ping.exe

%SYSTEMROOT%\system32\dllcache\route.exe

%SYSTEMROOT%\system32\dllcache\finger.exe

%SYSTEMROOT%\system32\dllcache\posix.exe

%SYSTEMROOT%\system32\dllcache\atsvc.exe

%SYSTEMROOT%\system32\dllcache\qbasic.exe

%SYSTEMROOT%\system32\dllcache\runonce.exe

%SYSTEMROOT%\system32\dllcache\syskey.exe

%SYSTEMROOT%\system32\dllcache\command.com

%SYSTEMROOT%\system32\dllcache\edit.com

%SYSTEMROOT%\system32\dllcache\tree.com

%SYSTEMROOT%\system32\dllcache\at.exe

%SYSTEMROOT%\system32\dllcache\find.exe

%SYSTEMROOT%\system32\dllcache\fc.exe

%SYSTEMROOT%\system32\dllcache\nbtstat.exe

%SYSTEMROOT%\system32\dllcache\netsh.exe

%SYSTEMROOT%\system32\dllcache\notepad.exe

%SYSTEMROOT%\system32\dllcache\tasklist.exe

%SYSTEMROOT%\system32\dllcache\taskkill.exe

) do (

if exist "%%i" (

echo y | cacls %%i /G administrators:F system:F

)

)

rem 保存当前服务启动状态

net start > %systemroot%\security\services.txt

rem 设置自动启动的服务

sc config wuauserv start= auto

sc config PolicyAgent start= auto

sc config schedule start= auto

sc config NSClientpp start= auto

net start PolicyAgent

net start wuauserv

net start schedule

net start NSClientpp

net start winmgmt

rem 设置手动启动的服务

sc config winmgmt start= demand

sc config msdtc start= demand

rem 设置禁止启动的服务,停止启动的服务

for %%i in (

sharedaccess

helpsvc

Spooler

audiosrv

wmdmpmsn

Alerter

alg

TrkWks

seclogon

ShellHWDetection

lanmanserver

dmserver

Dhcp

lanmanworkstation

LmHosts

WZCSVC

RemoteRegistry

AeLookupSrv

Dnscache

ERSvc

Nla

SCardSvr

W32Time

w3svc

IISADMIN

SMTPSVC

TapiSrv

WinRM

dfs

ntfrs

CiSvc

mnmsrvc

clipsrv

netdde

NetDDEdsdm

lmhosts

tlntsvr

ups

themes

HidServ

Tssdis

stisvc

WmiApSrv

awhost32

fax

Browser

) do (

sc config %%i start= disabled

net stop %%i

)

rem 设置每天3点自动重启

rem schtasks /create /ru system /sc daily /tn "restart" /st 03:00:00 /tr "shutdown -r -f -t 30"

rem 设置环境变量

rem reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v JAVA_HOME /t REG_SZ /d C:\jdk /f

rem reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v Path /t REG_EXPAND_SZ /d "%JAVA_HOME%\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;" /f

echo 开启远程桌面

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t reg_dword /d 0 /f

rem 修改远程桌面端口为9999

rem reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp"   /v PortNumber /t reg_dword /d 9999 /f

rem reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber /t reg_dword /d 9999 /f

echo 关闭CD-ROM自动运行

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t reg_dword /d 255 /f

echo 显示文件扩展名

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideFileExt /t reg_dword /d 0 /f

echo 修改windows update为自动更新

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t reg_dword /d 1 /f

echo 华生医生设置为转储线程上下文

reg add HKLM\SOFTWARE\Microsoft\DrWatson /v AppendToLogFile /t reg_dword /d 0 /f

reg add HKLM\SOFTWARE\Microsoft\DrWatson /v CreateCrashDump /t reg_dword /d 0 /f

reg add HKLM\SOFTWARE\Microsoft\DrWatson /v WaveFile /t REG_EXPAND_SZ /d "" /f

echo 设置自动重新启动不发送管理警报

reg add HKLM\SYSTEM\ControlSet001\Control\CrashControl /v AutoReboot /t reg_dword /d 1 /f

reg add HKLM\SYSTEM\ControlSet001\Control\CrashControl /v SendAlert /t reg_dword /d 0 /f

echo 设置写入调试信息为无

reg add HKLM\SYSTEM\CurrentControlSet\Control\CrashControl /v CrashDumpEnabled /t reg_dword /d 0 /f

echo 禁用错误报告

reg add HKLM\SOFTWARE\Microsoft\PCHealth\ErrorReporting /v DoReport /t reg_dword /d 0 /f

reg add HKLM\SOFTWARE\Microsoft\PCHealth\ErrorReporting /v ShowUI /t reg_dword /d 0 /f

echo 关机清理虚拟内存

reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" /v ClearPageFileAtShutdown /t reg_dword /d 1 /f

echo 不显示上次登录用户名

reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v dontdisplaylastusername /t reg_dword /d 1 /f

echo 关闭445端口

reg add HKLM\SYSTEM\CurrentControlSet\Services\NetBT\Parameters /v SMBDeviceEnabled   /t reg_dword /d 0 /f

echo 防止小规模ddos攻击

reg add HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect   /t reg_dword /d 1 /f

echo 禁止建立空连接

reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous /t reg_dword /d 1 /f

echo 禁止SAM 账户和共享的匿名枚举

reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymoussam /t reg_dword /d 1 /f

echo 禁止系统自动管理共享

reg add HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareWks /t reg_dword /d 0 /f

echo 禁止系统自动共享

reg add HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareServer /t reg_dword /d 0 /f

rem 自动关闭无响应程序

rem reg add "HKCU\Control Panel\Desktop" /v AutoEndTasks /t reg_sz /d 1 /f

echo 设置无法关闭程序等待时间

reg add "HKCU\Control Panel\Desktop" /v WaitToKillAppTimeout /t reg_sz /d 100 /f

reg add "HKCU\Control Panel\Desktop" /v HungAppTimeout /t reg_sz /d 500 /f

reg add HKLM\System\CurrentControlSet\Control /v WaitToKillServiceTimeout /t reg_sz /d 100 /f

echo 不需要按ctrl+alt+del

reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system /v DisableCAD /t reg_dword /d 1 /f

echo 把显示“关闭事件跟踪程序” 更改为已禁用

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Reliability" /v ShutdownReasonOn /t reg_dword /d 0 /f

echo 禁止自动更新后不断的提示重启

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\windowsUpdate /v RebootRelaunchTimeoutEnabled /t reg_DWORD /d 1 /f

echo 禁止屏保

reg add "hkcu\Software\Policies\Microsoft\Windows\Control Panel\Desktop" /v ScreenSaveActive /t REG_SZ /d 0 /f

echo 是否起用WSUS服务器

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v UseWUServer /t REG_DWORD /d 1 /f

echo WSUS服务器设置

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUServer /t REG_SZ /d http://61.135.177.110 /f

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v WUStatusServer /t REG_SZ /d http://61.135.177.110  /f

echo 重新计划自动更新计划后的等待时间

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v RescheduleWaitTime /t REG_DWORD /d 10 /f

echo 自动更新安装后是否重新启动

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoRebootWithLoggedOnUsers /t REG_DWORD /d 0 /f

echo 是否启用自动更新

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoUpdate /t REG_DWORD /d 0 /f

echo 配置自动更新

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v AUOptions /t REG_DWORD /d 4 /f

echo 计划安装日期

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v ScheduledInstallDay /t REG_DWORD /d 0 /f

echo 计划安装时间

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v ScheduledInstallTime /t REG_DWORD /d 3 /f

rem 重命名管理员以及来宾帐户名称

rem wmic useraccount where name='Administrator' call Rename admin

echo 禁用帐户

net user SQLDebugger /active:no

net user TsInternetUser /active:no

echo 设置当前目录为桌面

if exist %USERPROFILE%\桌面\ (

cd/D %USERPROFILE%\桌面\

) else (

cd/D %USERPROFILE%\desktop\

)

echo 生成windows组策略安全设置

if exist secinit.inf del secinit.inf /f

echo [Unicode] >secinit.inf

echo. >>secinit.inf

echo [Event Audit] >>secinit.inf

echo AuditSystemEvents = 3 >>secinit.inf

echo AuditLogonEvents = 3 >>secinit.inf

echo AuditObjectAccess = 2 >>secinit.inf

echo AuditPrivilegeUse = 2 >>secinit.inf

echo AuditPolicyChange = 3 >>secinit.inf

echo AuditAccountManage = 3 >>secinit.inf

echo AuditProcessTracking = 0 >>secinit.inf

echo AuditDSAccess = 2 >>secinit.inf

echo AuditAccountLogon = 3 >>secinit.inf

echo [System Access] >>secinit.inf

echo MinimumPasswordAge = 0 >>secinit.inf

echo MaximumPasswordAge = 42 >>secinit.inf

echo MinimumPasswordLength = 12 >>secinit.inf

echo PasswordComplexity = 1 >>secinit.inf

echo PasswordHistorySize = 0 >>secinit.inf

echo LockoutBadCount = 5 >>secinit.inf

echo ResetLockoutCount = 20 >>secinit.inf

echo LockoutDuration = 20 >>secinit.inf

echo RequireLogonToChangePassword = 0 >>secinit.inf

echo ForceLogoffWhenHourExpire = 0 >>secinit.inf

echo ClearTextPassword = 0 >>secinit.inf

echo LSAAnonymousNameLookup = 0 >>secinit.inf

echo EnableAdminAccount = 1 >>secinit.inf

echo EnableGuestAccount = 0 >>secinit.inf

echo [System Log]    >> secinit.inf

echo MaximumLogSize = 16384  >> secinit.inf

echo AuditLogRetentionPeriod = 1 >> secinit.inf

echo RetentionDays = 30  >> secinit.inf

echo [Security Log]  >> secinit.inf

echo MaximumLogSize = 16384  >> secinit.inf

echo AuditLogRetentionPeriod = 1 >> secinit.inf

echo RetentionDays = 30  >> secinit.inf

echo [Application Log]   >> secinit.inf

echo MaximumLogSize = 16384  >> secinit.inf

echo AuditLogRetentionPeriod = 1 >> secinit.inf

echo RetentionDays = 30  >> secinit.inf

echo [File Security]     >> secinit.inf

echo "c:\boot.ini",2,"D:P(A;;GXGR;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)" >> secinit.inf

echo "c:\ntdetect.com",2,"D:P(A;;GXGR;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)" >> secinit.inf

echo "c:\ntldr",2,"D:P(A;;GXGR;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)" >> secinit.inf

echo "c:\ntbootdd.sys",2,"D:P(A;;GXGR;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)" >> secinit.inf

echo "c:\autoexec.bat",2,"D:P(A;;GXGR;;;BU)(A;;GXGR;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)" >> secinit.inf

echo "c:\config.sys",2,"D:P(A;;GXGR;;;BU)(A;;GXGR;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)" >> secinit.inf

echo "%ProgramFiles%",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)(A;;GXGR;;;WD)" >> secinit.inf

echo "%SystemRoot%\explorer.exe",2,"D:(A;;GXGR;;;WD)" >> secinit.inf

echo "%SystemRoot%\CSC",1,"D:AR" >> secinit.inf

echo "%SystemRoot%\debug",1,"D:AR" >> secinit.inf

echo "%SystemRoot%\Offline Pages",1,"D:AR" >> secinit.inf

echo "%SystemRoot%\Profiles",1,"D:AR" >> secinit.inf

echo "%SystemRoot%\Registration",1,"D:AR" >> secinit.inf

echo "%SystemRoot%\repair",2,"D:P(A;CI;GXGR;;;BU)(A;CI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\Tasks",1,"D:AR" >> secinit.inf

echo "%SystemRoot%\Temp",2,"D:P(A;CI;0x100026;;;BU)(A;CI;0x100026;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\addins",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\Connection Wizard",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\Driver Cache",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\java",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\msagent",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\security",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\speech",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\twain_32",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo "%SystemRoot%\Web",2,"D:P(A;OICI;GXGR;;;BU)(A;OICI;GXGR;;;PU)(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)" >> secinit.inf

echo [Registry Values] >>secinit.inf

echo MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName=4,1   >> secinit.inf

echo MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous=4,1  >> secinit.inf

echo [Privilege Rights] >>secinit.inf

echo SeNetworkLogonRight = Administrators  >> secinit.inf

echo SeShutdownPrivilege = Administrators >> secinit.inf

echo SeRemoteShutdownPrivilege = Administrators >> secinit.inf

echo SeRemoteInteractiveLogonRight = Administrators >> secinit.inf

echo Seinteractivelogonright = Administrators >> secinit.inf

echo [Version] >>secinit.inf

echo signature="$CHICAGO$" >>secinit.inf

echo Revision=1 >>secinit.inf

cls

echo 运行安全设置

move /y secinit.inf %systemroot%\security\templates\secinit.inf

echo y|secedit /configure /cfg %systemroot%\security\templates\secinit.inf /db %systemroot%\security\database\secinit.db /overwrite /log %systemroot%\security\logs\secinit.log

regsvr32 /s scecli.dll

echo 关闭默认共享

net share c$ /del

net share d$ /del

net share e$ /del

net share ipc$ /del

net share admin$ /del

del secinit.inf /f

windows2003安全加固脚本的更多相关文章

  1. linux--安全加固脚本

    Linux安全加固配置 #! /bin/bash# copyright by hwb# Function:对账户的密码的一些加固read -p "设置密码最多可多少天不修改:" A ...

  2. windows2003安全加固

    因为IIS的方便性和易用性,使它成为最受欢迎的Web服务器软件之一.但是,IIS的安全性却一直令人担忧.如何利用IIS建立一个安全的Web服务器,是很多人关心的话题.要创建一个安全可靠的Web服务器, ...

  3. 网安等保-Linux服务器之最新Ubuntu-22.04-LTS系统内核优化与安全加固配置脚本使用分享

    关注「WeiyiGeek」公众号 设为「特别关注」每天带你玩转网络安全运维.应用开发.物联网IOT学习! 希望各位看友[关注.点赞.评论.收藏.投币],助力每一个梦想. 本章目录 目录 0x00 前言 ...

  4. 完整的WindowsServer服务器系统初始化配置、安全策略加固和基线检查脚本等保2.0适用

    转载自:https://www.bilibili.com/read/cv14326780?spm_id_from=333.999.0.0 0x00 前言简述 最近单位在做等保测评,由于本人从事安全运维 ...

  5. Ubuntu 系统服务器初始化配置、安全加固、内核优化和常用软件安装的Shell脚本分享

    转载自:https://www.bilibili.com/read/cv13875402?spm_id_from=333.999.0.0 描述: 适用于企业内部 Ubuntu 操作服务器初始化.系统安 ...

  6. CentOS7 系统服务器初始化配置、安全加固、内核升级优化常用软件安装的Shell脚本分享

    转载自:https://www.bilibili.com/read/cv13875630?spm_id_from=333.999.0.0 描述: 适用于企业内部 CentOS7 系列操作服务器初始化. ...

  7. 7.linux安全基线加固

    本文大多截图出自于:http://c.biancheng.net/cpp/shell/ 现在大多数企业都是使用linux作为服务器,不仅是linux是开源系统,更是因为linux比windows更安全 ...

  8. linux安全加固项目

    分享一个Linux加固脚本项目,可快速对服务器进行安全加固,顺便做下备忘,安全人员必须熟悉运维相关的知识! 支持的操作系统平台: Amazon 2013.03 Amazon 2013.09 Amazo ...

  9. shell脚本 阿里云基线检查一键配置

    一.简介 源码地址 日期:2017/9/1 介绍:安全加固脚本,会符合阿里云基线检查.有幂等性,可重复执行 效果图: 二.使用 适用:centos6/7 语言:中文 注意:脚本是符合阿里云基线检查的配 ...

随机推荐

  1. Caffe学习系列(13)：数据可视化环境（python接口)配置

    caffe程序是由c++语言写的,本身是不带数据可视化功能的.只能借助其它的库或接口,如opencv, python或matlab.大部分人使用python接口来进行可视化,因为python出了个比较 ...

  2. JAVA中获取当前系统时间

    一. 获取当前系统时间和日期并格式化输出: import java.util.Date;import java.text.SimpleDateFormat; public class NowStrin ...

  3. [CareerCup] 8.6 Jigsaw Puzzle 拼图游戏

    8.6 Implement a jigsaw puzzle. Design the data structures and explain an algorithm to solve the puzz ...

  4. HoloLens开发手记 - Unity之摄像头篇

    当你穿戴好HoloLens后,你就会处在全息应用世界的中心.当你的项目开启了"Virtual Reality Support"选项并选中了"Windows Hologra ...

  5. 推荐一款超强大的基于Angularjs的自动完成(Autocomplete)标签及标签组插件–ngTagsInput

    前言 今天利用中午午休时间,给大家分享推荐一款基于Angularjs的自动完成(Autocomplete)标签及标签组插件--ngTagsInput,功能超强大的.不信,你试试就知道^_^... Au ...

  6. Android--手持PDA读取SD卡中文件

    近两年市场上很多Wince设备都开始转向Android操作系统,最近被迫使用Android开发PDA手持设备.主要功能是扫描登录,拣货,包装,发货几个功能.其中涉及到商品档的时候大概有700左右商品要 ...

  7. document.cookie打不出来cookies

    比如session这种设置,都是设置了HttpOnly 导致document.cookie看不到,这和xss  跨站脚本攻击(Cross Site Scripting)

  8. [BZOJ1876][SDOI2009]superGCD（高精度）

    题目:http://www.lydsy.com:808/JudgeOnline/problem.php?id=1876 分析: 以为辗转相减会TLE呢……但是好像没这个数据……就这么水过去了…… 辗转 ...

  9. AngularJs——grunt神器的使用

    前面我们已经知道了如何安装grunt,本章节给各位道友介绍如何使用 grunt 的插件,grunt是重点在于如何配置使用 Gruntfile.js,官网上也有很多范例. 1,包装函数 module.e ...

  10. Set up gradle HiveMind

    HiveMind is a comprehensive ERP application for service organizations. It includes a project managem ...