• 📍 Overview
• ⚙️ Features
• 🧩 Modules
• 🚀 Getting Started
  • ✔️ Prerequisites
  • 💻 Installation
  • 🎮 Using OSFortify
  • ⚠️ Warning
• 🗺 Roadmap
• 🤝 Contributing
• 📄 License
• 👏 Acknowledgments
• 🗃️ Changelog

OSFortify is a sophisticated terminal-based utility designed to enhance system security, streamline operating system hardening, and facilitate efficient system administration. With a focus on cybersecurity, system integrity, and user-friendly interactions, OSFortify empowers users to manage various aspects of their system's services, features, and ports through a secure and organized interface.

The primary purpose of OSFortify is to provide an advanced yet accessible tool for users to bolster their system's security posture, elevate operating system hardening, and seamlessly administer critical system functions. By enabling users to interact with their system through a curated selection of options, OSFortify bridges the gap between cybersecurity and user experience.

OSFortify brings robust control to your system's services, features, and ports. It allows real-time status checks, seamless activation or deactivation during boot, and dynamic adjustments on-the-fly.

With OSFortify, you can finely manage your system's components and bolster security of end-device by implementing comprehensive built-in security baseline, consisting of over 950 unique GPO policies.

Services and Features - OSFortify encompasses a comprehensive range of essential services and features, including guest user account management, FTP control, oversight of Windows Media Player, and management of USB ports. These functionalities contribute significantly to system security by offering control over potential entry points, data transfers, and media-related threats.

Windows Features - The program covers an array of critical Windows features, including Windows Defender, Windows Firewall, Windows Update, remote management functionalities, and more. By providing control over these features, OSFortify enhances cybersecurity by allowing administrators to fortify defenses, manage remote access, and stay updated against known vulnerabilities.

Ports - OSFortify encompasses an extensive list of important ports, such as SSH (Port 22), HTTPS (Port 443), RDP (Port 3389), and many more. These ports serve as critical communication channels, and their proper management through OSFortify enhances cybersecurity by preventing unauthorized access, securing data transfers, and protecting against potential exploits.

Event Viewer Module - OSFortify utilizes the Event Viewer to extract the most important logs across various categories, ensuring comprehensive visibility into your system's security posture.

Security Baseline Module - OSFortify leverages LGPO via API to seamlessly implement and manage GPO policies, ensuring efficient and reliable policy enforcement. It also provides the capability to backup and restore GPO configurations, giving you peace of mind knowing that your policies are securely stored and easily recoverable in case of emergencies.

Before you begin, ensure that you have the following prerequisites installed:

Windows 8/10/11

Python

Python Package Installer

Python library: curses

Python library: tkinter

Internet connection

1. Install python

1.	Visit the official Python website: https://www.python.org/downloads/release/python-3117/
2.	Go to the Downloads section and download Python 3.11.7.
* WARNING - due to problems with curses library, OSFortify works only with Python 3.11.7. *
3.	Scroll down to the bottom of the page and select the installer that matches your system architecture (32-bit or 64-bit).
4.	Run the downloaded installer.
5.	In the installer, select the option to add Python to the system PATH, which will make it accessible from the command line.
6.	Make sure that in optional features you choose pip to be installed.
7.	Complete the installation by following the on-screen instructions.

2. Install dependencies

pip install tk windows-curses

3. Check version of python and pip:

python --version && pip --version

4. Download osfortify.py from this link:

https://github.com/DannnyzZ/OSFortify/blob/main/osfortify

5. Download OSFortify additional modules (OSFortify_modules.rar) and extract the archive to path:

C:\Users

The full path containing additional modules should look like this:

C:\Users\OSFortify

Main module:

1. Launch OSFortify from the PowerShell console:

python osfortify.py

WARNING! Make sure You provide the correct location of OSFortify.

Example of use:

python C:\Users\Danny\Desktop\osfortify.py

Secondary modules (Event Viewer, GPO):

1. Inside OSFortify instance, use corresponding button (P: Security policies, V: Event Viewer) to launch dedicated module:
2. Follow the instructions on the screen.
3. Enter the choosen option.
4. Confirm with ENTER.

Using OSFortify Safely:

1. Knowledge is Key: Understand changes' impact on security and stability.

2. Caution and Expertise: Modify with care, avoid vulnerabilities or data loss.

3. Backup Always: Prioritize system backups to ensure recovery options.

4. Authorized Access: Limit OSFortify access to knowledgeable personnel.

5. Controlled Testing: Experiment in safe environments before implementing changes.

6. Secure Scripts: Verify PowerShell scripts before execution.

Use OSFortify wisely to enhance security while minimizing risks.

• Task 1: Multiple bug fixes
• Task 2: New features: tidy and colored output
• Task 3: *BIG* feature 4: Network analysis: netstat, routing, DNS informations, local hosts, IPv4/IPv6 of device, Gateway, Netmask and many more!
• Task 4: New features and services: PowerShell, Command prompt, User Account Control, Autorun!
• Task 5: Module - Event Viewer support
• Task 6: Module - Security Baseline GPO

• Incoming feature 1: Exporting results to PDF file
• Incoming feature 2: New services: HDMI, Mini-Jack, DVI, CD-DVD, CTRL ALT DEL on login prompt, Trivial File Transfer Protocol
• Incoming feature 3: One button evaluation of security state (Risk analysis)
• Incoming improvement 1: Improving istallaton process.
• Incoming improvement 2: utilizing secedit.exe to apply GPO's.
• ` New services: SSH
• Incoming feature 4: drivers listing.
• Incoming feature 5: updating all software and drivers.
• Incoming feature 6: SNMP.
• Incoming feature 7: More unencrypted traffic.

• Future Update 1: Moving scripts to libraries, improving by that modularity and variety of features
• Proof of Concept: IT Auditing via SSH

Contributions are always welcome! Please follow these steps:

1. Fork the project repository. This creates a copy of the project on your account that you can modify without affecting the original project.
2. Clone the forked repository to your local machine using a Git client like Git or GitHub Desktop.
3. Create a new branch with a descriptive name (e.g., NEW_FIX).

git checkout -b NEW_FIX

4. Make changes to the project's codebase.
5. Commit your changes to your local branch with a clear commit message that explains the changes you've made.

git commit -m 'Applied changes.'

6. Push your changes to your forked repository on GitHub using the following command

git push origin NEW_FIX

7. Create a new pull request to the original project repository. In the pull request, describe the changes you've made and why they're necessary. The project maintainers will review your changes and provide feedback or merge them into the main branch.

Non-Commercial Use ONLY.

ℹ️ Stack Overflow

ℹ️ ChatGPT 4.0

ℹ️ Readme-ai https://github.com/eli64s/readme-ai

ℹ️ Logo.com https://logo.com

ℹ️ Logo.com https://patorjk.com/software/taag

ℹ️ Microsoft Security Compliance Toolkit 1.0 https://www.microsoft.com/en-us/download/details.aspx?id=55319

OSFortify 1.7

• New section of objects: "Network"
  • Route: Displays the local routing table on the system.
  • Ping: Sends 20 ICMP echo requests to google.com and measures the round-trip time.
  • ARP: Shows the ARP (Address Resolution Protocol) cache, displaying the mapping of IP addresses to MAC addresses on the local network.
  • DNS: Retrieves unique DNS server addresses for both IPv4 and IPv6, then displays them separately.
  • Traceroute: Traces the route that packets take to reach the specified destination (google.com in this case).
  • Routing Table: Provides information about the system's routing table, including destination networks, gateway addresses, and interface indexes.
  • Ipconfig: Extracts information about network adapters, media state, connection-specific DNS suffix, link-local and autoconfigured IPv6 addresses, subnet masks, default gateways, IPv4 addresses, etc.
  • Netstat: Displays active network connections and listening ports, along with the processes using them.
  • Autonomous System Numbers: Retrieves and displays information about the Autonomous System Number (ASN) for a given IP address using the ip-api.com service. Displays IP address, ASN, and AS Name if available.
  • Netstat: Displays active network connections and listening ports, along with the processes using them.

OSFortify 2.0

• New module - Event Viewer - gives possibilities to retrieve choosen logs from the system.

• New module - GPO Policies - gives possibilities to create backup of existing GPO's, implement OSFortify Security Baseline or restore to previous state of GPO policies.

• New functions:

  • PowerShell configurations
  • Command prompt configurations
  • Autorun
  • User Account Control
  • Saving configuration to file, now has a built-in raport generating function, which will create full raport of results on the designated path. Default path: C:\Users\OSFortify_Audit_Report.txt

• Bug fixes: indentation

• Additional comments to clarify code

OSFortify 2.0.1 (not released yet)

• Bug fixes
• Additional error handling
• Fixed GPO backup feature for some systems.